Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/izm1O4S-x2UDeNY6fo1YhqW7N8g.roa
File: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (raw, json)
Hash identifier: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=
Subject key identifier: 8B:39:B5:3B:84:BE:C7:65:03:78:D6:3A:7E:8D:58:86:A5:BB:37:C8
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 0194266B96E6644DF136B602F16437355F08
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/izm1O4S-x2UDeNY6fo1YhqW7N8g.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 92.42.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:96:e6:64:4d:f1:36:b6:02:f1:64:37:35:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b39b53b84bec7650378d63a7e8d5886a5bb37c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:f3:f9:b2:9b:f6:f5:60:b1:0e:a4:ab:93:
a0:b8:35:33:8f:45:bc:83:b4:67:1b:d0:38:d3:96:
e5:72:f2:0a:b9:cc:0f:56:39:b4:38:90:c3:4e:7b:
b8:e7:4c:f5:01:46:d5:61:dc:1d:bc:87:85:d3:c1:
d9:8a:a4:9f:3d:90:96:79:47:24:1a:87:7c:4f:0d:
5c:e1:11:a5:57:3b:e2:b3:d6:af:ae:73:e6:eb:4c:
b6:f9:11:6a:91:e2:ac:c7:ce:96:3c:1d:2d:fe:cb:
e5:f1:ab:da:98:cf:eb:86:cc:41:e2:3d:91:72:58:
20:62:30:7f:6b:78:e1:72:f4:a1:c0:e3:82:e2:59:
a7:c1:d5:31:98:8b:fb:7f:e4:73:29:1a:e2:5c:96:
8a:70:94:ed:e9:08:01:12:5e:b5:a0:15:87:b9:9a:
16:30:57:cb:99:8e:eb:ad:c6:23:05:1c:81:a2:0f:
87:69:e6:34:37:44:40:25:f0:65:d0:af:7d:30:fe:
c1:6d:db:7a:de:dc:a0:65:fa:04:dc:45:b9:2f:30:
27:88:e9:14:5b:ae:eb:ca:52:bf:63:aa:58:c1:5d:
ad:e5:a7:9f:cb:52:4b:a4:f9:19:5d:d4:80:6a:e3:
71:59:17:bc:a5:05:97:59:16:0b:9e:44:7e:ae:ce:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:B5:3B:84:BE:C7:65:03:78:D6:3A:7E:8D:58:86:A5:BB:37:C8
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/izm1O4S-x2UDeNY6fo1YhqW7N8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6c:b7:6b:de:cd:8d:3d:35:50:77:96:a6:f3:f0:5c:b9:27:
2d:70:e7:f8:df:3c:a2:68:4a:42:e7:70:d2:92:88:7b:41:90:
27:4d:2d:5b:77:4a:ce:95:02:73:00:36:c5:16:52:8d:5c:52:
74:36:26:57:c8:67:31:20:84:67:20:96:62:70:0f:b7:f6:fd:
08:b2:9a:14:39:20:3d:c0:fd:60:ee:e2:f8:a3:17:21:94:f0:
6b:36:13:76:af:ac:f2:fe:60:49:31:e5:cc:55:db:46:04:da:
b1:cb:6a:cc:c0:7b:3c:3b:f7:39:ab:d9:0c:c0:a7:00:20:7e:
d1:72:49:3b:0b:28:8e:6a:35:32:1a:92:64:87:70:0a:72:92:
42:88:f8:f1:fd:1b:00:68:5f:bf:0f:a5:a6:33:ec:36:6a:cb:
2c:46:ce:01:59:80:e4:e8:d6:b1:e9:59:1a:81:e1:4f:ca:7d:
4b:5c:60:9f:88:8c:9b:d7:97:56:8f:9d:e9:dc:cf:3c:54:e3:
58:aa:b8:94:3c:ee:4b:87:1a:dc:35:76:f1:2b:88:f0:fc:ed:
65:0a:1a:b5:a5:74:eb:4b:50:7c:41:0d:d7:91:84:7a:fb:3f:
71:4f:ea:81:f1:cb:65:a3:c0:a2:e3:a4:0d:bf:88:dd:fe:97:
74:78:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:30:51 2025 by rpki-client