Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/JIWcXiw5e-DMCtEQjl82_rCum6M.roa
File: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (raw, json)
Hash identifier: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=
Subject key identifier: 24:85:9C:5E:2C:39:7B:E0:CC:0A:D1:10:8E:5F:36:FE:B0:AE:9B:A3
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0194221FCACE2B3DB6F40B5204E08B994D33
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/JIWcXiw5e-DMCtEQjl82_rCum6M.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201706
IP address blocks: 92.53.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:ce:2b:3d:b6:f4:0b:52:04:e0:8b:99:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24859c5e2c397be0cc0ad1108e5f36feb0ae9ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:96:42:96:5f:ac:fd:48:a4:25:66:22:d2:
95:18:94:22:65:cb:ee:ca:58:eb:11:55:1a:ec:48:
49:92:f7:19:09:20:39:6c:62:2d:b1:b6:c8:6b:d4:
67:05:bf:f9:75:c0:d4:c8:04:76:7d:aa:a6:7e:ea:
cf:17:bb:d6:aa:65:62:a1:e5:4f:df:a2:c9:87:f4:
71:74:0b:f7:6b:2f:5a:bf:2e:79:d3:0e:a8:e8:47:
8b:84:78:1d:ed:c3:20:12:9e:05:3a:ff:16:0a:cc:
61:ba:91:ef:9c:06:d1:8e:c0:74:e9:16:da:91:38:
ed:b3:38:4b:68:92:30:78:80:b5:55:c3:6e:7d:17:
dd:cc:11:67:3d:2c:98:b5:78:d0:07:68:a9:bc:f5:
0d:38:49:6e:29:dd:77:07:da:16:d1:c8:88:8f:ca:
2b:e9:0d:86:e9:18:cd:4e:af:1a:c6:6e:ee:b2:87:
d2:3c:bc:0c:bd:d8:85:e5:f2:5a:5c:bf:d6:27:7a:
b7:dd:49:62:4f:35:04:a7:ef:d1:85:37:94:d2:52:
e2:0b:2c:fb:03:80:ca:79:7e:1b:b1:78:bd:d9:e3:
c0:a6:9a:6f:19:68:d5:f3:19:5d:bf:85:4f:ca:2d:
10:ed:b7:a5:a6:0a:b3:d8:64:7a:6b:79:e7:aa:33:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:9C:5E:2C:39:7B:E0:CC:0A:D1:10:8E:5F:36:FE:B0:AE:9B:A3
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/JIWcXiw5e-DMCtEQjl82_rCum6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.65.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bc:90:7c:15:88:01:2f:6a:e5:05:8e:7d:21:41:f8:b2:2a:
60:08:7c:d6:4f:ff:8c:b9:ad:ed:1f:66:5a:13:ee:31:67:6d:
23:d8:e9:2f:82:45:b1:38:7a:70:6e:14:2c:c1:59:63:6f:44:
f9:da:81:ec:78:84:7b:5d:91:7e:c6:74:ac:09:b7:33:37:7a:
1d:87:81:e6:3d:ba:f3:4e:79:51:c9:45:24:a0:0e:82:20:5f:
9d:2e:33:17:75:82:34:25:e6:7b:4b:61:50:01:09:fe:3f:e2:
0e:5c:bb:eb:28:2b:39:d1:ca:9b:a9:17:55:36:61:5a:b6:47:
46:0a:78:c1:d6:75:1c:48:2d:df:6f:38:ea:85:36:c7:f1:82:
d7:9c:07:c2:86:44:d7:a4:a6:64:2b:61:e8:ed:dd:ea:da:8b:
7b:df:f5:e4:d4:05:c0:69:6e:8e:e3:c7:10:53:16:5a:84:58:
cc:f8:0d:36:1c:c7:f6:7e:98:a2:b8:0a:71:d8:1d:83:1f:e3:
7d:df:80:72:9e:7d:2b:a3:6d:70:eb:a2:1e:83:f5:17:a8:3d:
9c:ad:f0:32:2c:e6:b1:53:ee:bf:02:d0:11:c2:15:2d:35:d1:
ca:4c:a6:f2:7c:ea:6b:21:90:c1:ba:30:33:11:96:f1:8e:db:
e1:ae:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:04:43 2025 by rpki-client