Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/30I5HnA19uvAFRwz6jWfyDavx24.roa
File: 30I5HnA19uvAFRwz6jWfyDavx24.roa (raw, json)
Hash identifier: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=
Subject key identifier: DF:42:39:1E:70:35:F6:EB:C0:15:1C:33:EA:35:9F:C8:36:AF:C7:6E
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019425222536BD8F6417AF56D3E79819B531
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/30I5HnA19uvAFRwz6jWfyDavx24.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200428
IP address blocks: 185.92.60.0/22 maxlen: 22
2a05:ef40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:36:bd:8f:64:17:af:56:d3:e7:98:19:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df42391e7035f6ebc0151c33ea359fc836afc76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:2a:ae:7a:90:bd:92:eb:3e:7e:e8:84:f4:
6a:89:47:d2:23:83:a3:36:aa:d5:6c:e9:ea:db:f5:
67:61:ea:28:4c:8b:d3:ec:6c:14:de:ef:5c:fa:db:
f7:82:36:58:a8:48:d1:d5:d8:81:98:84:92:0c:c8:
bc:51:c8:fe:c2:41:bf:66:01:b3:72:15:87:ec:81:
dc:0d:25:7c:f0:7e:13:5d:4b:0e:80:a9:e1:0a:3e:
b9:71:2b:02:8e:dc:ea:b5:0f:ae:7c:3a:36:45:4e:
5a:e5:60:10:3b:8a:3b:74:14:ef:01:1a:3f:01:e5:
60:3b:84:d2:42:be:a2:6d:92:48:b9:91:f7:4e:b7:
2b:f6:eb:00:5c:de:b6:f8:e3:6e:df:20:75:31:f5:
d0:b5:f0:c5:6f:e8:e2:ed:f9:c5:03:c0:37:62:1c:
37:76:a3:61:4f:ad:7d:a5:49:da:96:55:58:33:04:
29:67:a9:76:62:19:a9:c0:67:e1:d7:98:71:b5:d8:
a1:36:00:ec:e3:32:9b:d9:13:9d:bc:cb:b6:fd:a2:
36:0f:72:51:80:05:3d:7b:e9:b5:24:9a:91:e6:18:
5d:c2:55:d5:84:67:45:ac:fd:ea:35:7b:9b:6b:89:
b5:c2:c9:58:d4:57:1f:8e:d6:3a:f6:53:cf:bf:2f:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:39:1E:70:35:F6:EB:C0:15:1C:33:EA:35:9F:C8:36:AF:C7:6E
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/30I5HnA19uvAFRwz6jWfyDavx24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.60.0/22
IPv6:
2a05:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:6d:4d:c3:31:e3:c2:2c:2a:58:ba:18:2e:f8:0f:26:5c:5a:
53:ae:1e:d4:1d:30:b0:b9:31:e0:cf:80:8a:58:84:27:fa:85:
47:0f:44:e5:3a:48:5d:36:6c:6a:f8:70:6e:d3:62:cf:39:ba:
56:4a:8c:73:1c:ab:bc:74:09:38:fe:35:3c:95:ac:76:91:cb:
68:69:29:8f:47:d7:d2:e1:12:cc:26:b3:b2:c4:5b:b3:2d:b6:
b2:56:36:35:b4:52:94:f7:85:e8:0b:25:b0:f7:c2:93:7d:3f:
13:b2:87:eb:3e:c1:ee:f0:a4:fa:dc:31:34:b7:6e:2f:5b:c4:
08:9b:cd:19:83:d5:36:07:4d:b8:eb:77:53:2a:f2:99:74:f3:
5d:54:a7:d5:e4:87:16:54:73:d9:39:d5:87:ab:2a:4d:f6:c2:
4e:3a:8e:1b:b6:9d:25:97:f9:67:4c:0f:3c:0b:79:01:0e:96:
4d:6f:81:8f:01:17:5a:34:87:4a:00:f9:23:89:5e:82:e0:ee:
be:d9:a2:00:48:4e:32:f9:7b:3b:53:7a:dd:68:52:eb:29:8d:
51:59:18:c5:d9:db:e7:f2:56:2b:0c:9e:4c:53:ec:33:b7:88:
c9:8c:57:7d:19:d6:21:d5:38:0c:ab:4b:79:1b:fb:eb:be:4a:
6f:a9:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:23 2025 by rpki-client