Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa
File: DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa (raw, json)
Hash identifier: jU7eitkasCXaSHRJrOwhJr50g3LZ5XZllbkxukDWdO0=
Subject key identifier: 0E:74:61:F7:41:7A:9E:05:B6:43:F9:7C:2B:2B:C0:BD:31:58:36:19
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 01942368D32EA4EB0B0CEB2A31A10C9A92E1
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28878
IP address blocks: 185.42.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d3:2e:a4:eb:0b:0c:eb:2a:31:a1:0c:9a:92:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7461f7417a9e05b643f97c2b2bc0bd31583619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:c7:a3:ab:1c:f0:b9:f9:61:87:3a:cb:f7:
1e:f6:63:04:59:e2:ee:9c:e8:ba:13:c5:55:de:44:
ba:2a:3d:99:fe:15:7d:b6:e5:3c:85:c0:25:98:f7:
be:ef:86:f8:74:bc:08:b0:5d:c6:43:d4:ef:01:b3:
d0:10:33:59:ae:32:41:ed:ac:e5:2d:b9:2f:31:dd:
b5:83:97:65:32:c0:8d:6f:24:11:da:45:cc:f2:b7:
f0:bb:e0:a3:f6:02:67:68:10:0a:33:5f:b7:1c:52:
47:29:b2:38:f1:8c:c9:c2:d4:0a:24:95:68:14:ac:
17:ea:24:31:84:44:c9:3e:41:7f:3e:e8:01:ed:f6:
91:7b:2b:a3:be:85:fa:68:9a:6d:89:9f:f0:eb:b6:
0b:24:10:84:51:77:7a:74:fb:35:6b:4b:e3:1e:53:
8d:18:61:fe:3a:df:10:c4:2b:28:5f:7b:04:a9:92:
00:77:f9:c5:de:a6:a6:69:d1:a2:58:6f:f6:45:8a:
26:e5:0d:59:3a:04:cb:88:41:f0:5d:e5:44:01:7f:
9f:da:11:5e:d9:17:3c:35:77:bb:20:96:50:78:02:
a1:16:73:4b:16:eb:f5:30:7e:2f:bd:84:07:c8:28:
48:92:79:68:46:a8:e0:f9:82:55:e0:78:77:79:fb:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:61:F7:41:7A:9E:05:B6:43:F9:7C:2B:2B:C0:BD:31:58:36:19
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:38:21:6d:16:19:1d:df:ca:3b:53:42:49:b4:4b:12:4d:c1:
0b:28:ef:91:6d:e0:c7:99:52:28:c6:46:f5:66:3c:14:b2:9f:
98:8b:64:3e:96:c1:e7:61:5b:a0:83:78:ea:81:0b:b9:52:a0:
26:6c:f1:3c:80:60:6b:0d:50:53:fc:13:71:9e:02:16:a7:1c:
63:8a:72:80:a2:ef:b0:db:a8:7f:c7:b6:bd:5e:01:2d:6c:be:
9c:a3:60:18:a8:3e:fc:f1:15:94:17:01:1d:5b:02:91:f4:57:
92:94:3b:6a:d5:19:a9:53:ff:e1:58:b6:6d:f4:6b:c0:35:28:
4b:f7:bf:2c:3d:66:19:56:7c:4c:6d:3a:f3:c5:05:09:ff:af:
63:14:26:12:ea:7d:6d:9b:b3:e6:79:71:33:44:40:37:28:8f:
37:f4:5d:bb:f8:8c:df:83:2a:af:24:25:77:3c:a5:38:d6:de:
4b:5d:61:a1:d4:c0:de:6d:44:d4:05:39:62:ab:c2:c5:42:f3:
e3:4c:c5:29:0d:7b:f1:9d:5c:27:38:dd:85:78:1f:f5:c0:f6:
aa:02:80:43:a7:2d:cb:38:af:8e:91:0a:84:58:f3:f1:62:6d:
f1:15:28:dd:9b:32:02:7b:c9:50:6b:ce:8d:53:31:2d:7b:b3:
8e:fa:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:34 2025 by rpki-client