Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/XNkz6ZVHIVynkp_0EBDRKs20yRg.roa
File: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (raw, json)
Hash identifier: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=
Subject key identifier: 5C:D9:33:E9:95:47:21:5C:A7:92:9F:F4:10:10:D1:2A:CD:B4:C9:18
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D727220CE81EE3C6424A8602677478
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/XNkz6ZVHIVynkp_0EBDRKs20yRg.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200639
IP address blocks: 45.92.42.0/24 maxlen: 24
2a0e:1cc0:11::/48 maxlen: 48
2a0e:1cc0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:22:0c:e8:1e:e3:c6:42:4a:86:02:67:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cd933e99547215ca7929ff41010d12acdb4c918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:93:9f:2f:00:69:fd:3e:43:5f:46:d6:37:
2a:c4:82:a3:2a:f6:ba:f1:88:99:0a:ed:e6:2b:0c:
69:97:42:43:79:69:65:5a:42:ee:32:dc:80:b9:4f:
70:07:9c:ef:38:d6:ea:f0:94:25:90:37:49:c6:d3:
72:94:35:38:97:a1:56:bb:7a:8d:db:34:9f:f1:e5:
80:e8:df:b2:22:e0:93:25:a8:db:84:27:65:e0:c9:
f9:a3:f5:d5:57:5c:29:80:fe:f0:6f:06:6b:8e:0e:
e5:fa:c5:2e:ac:4c:6a:d3:ec:97:12:50:61:52:e2:
e3:71:c2:9e:34:4f:bc:b8:12:63:75:b7:31:49:5c:
93:8c:68:1e:a8:8f:83:14:63:5c:c0:a1:40:0d:07:
89:8a:6a:ff:9a:46:24:44:1a:be:18:7e:3b:d5:d6:
cc:e6:16:33:06:ed:6a:50:c1:84:a9:99:07:85:08:
66:2b:a7:bc:89:69:15:d8:d4:ca:f6:12:eb:e2:80:
00:c8:b3:75:0e:c8:8e:c5:be:ee:d2:6d:6e:3e:7d:
0c:76:14:4f:13:2a:3b:a4:29:e7:f0:4d:db:5f:0b:
c2:62:b4:0f:e4:8f:db:87:92:0a:e7:14:81:c3:f8:
28:35:6d:2c:9e:d5:8b:14:5e:c3:db:80:6e:4b:c1:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:33:E9:95:47:21:5C:A7:92:9F:F4:10:10:D1:2A:CD:B4:C9:18
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/XNkz6ZVHIVynkp_0EBDRKs20yRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
IPv6:
2a0e:1cc0:11::-2a0e:1cc0:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:3a:a2:9b:78:31:8c:9f:d1:22:62:60:a0:f6:20:7d:c0:19:
c5:8b:51:07:9d:fa:f6:fd:30:9a:ee:ac:c1:28:ad:47:b9:23:
4d:d4:ac:97:7e:96:2f:a1:d0:cd:09:36:d1:c7:e3:49:1b:10:
31:fa:78:78:c8:d3:5e:d3:9a:95:2c:18:44:84:4c:54:35:80:
01:43:3e:64:73:bd:1d:cb:74:60:bc:00:8a:4f:46:7f:2b:f4:
65:da:19:47:e5:a2:5a:e4:ef:b7:72:af:9d:c0:39:36:29:09:
c8:73:aa:6e:b8:f6:51:15:f5:74:8c:f7:46:2f:71:8c:8e:99:
4c:a7:6a:fd:51:2e:e4:bd:7f:a4:c1:3d:e9:6c:d1:a1:48:4c:
c5:a3:c3:2a:0a:85:b0:1a:5e:07:45:7a:04:a9:e4:8c:7e:69:
d9:2e:7f:f7:d8:d0:2b:89:84:5d:00:32:ea:03:20:8a:ac:2b:
37:46:8a:f5:9f:5a:a6:dd:20:8f:c5:90:2f:a1:40:89:46:c1:
bf:2f:38:48:85:f4:a6:3c:ea:0b:cd:6a:9a:23:b1:4d:3f:b4:
f8:6f:9b:ee:bb:86:32:83:bc:5a:02:d7:6d:3a:62:f0:4f:97:
88:f5:8b:fd:c5:1e:35:d5:76:92:81:ac:06:2b:17:cd:ac:6e:
c8:f1:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:52 2025 by rpki-client