Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/InvlOQlXHysCNzw0ls55YDrBMiI.roa
File: InvlOQlXHysCNzw0ls55YDrBMiI.roa (raw, json)
Hash identifier: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=
Subject key identifier: 22:7B:E5:39:09:57:1F:2B:02:37:3C:34:96:CE:79:60:3A:C1:32:22
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 0194266B9D8729F016305A6937D8610BA9C3
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/InvlOQlXHysCNzw0ls55YDrBMiI.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32806
IP address blocks: 92.39.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9d:87:29:f0:16:30:5a:69:37:d8:61:0b:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227be53909571f2b02373c3496ce79603ac13222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:73:99:ac:06:97:40:9f:ac:e5:43:09:6b:
a0:21:a2:90:d3:f3:2f:b4:f2:85:35:44:34:1f:f6:
25:7c:22:50:7b:df:09:9f:29:0e:8e:f0:b0:d4:72:
c5:fc:c0:21:af:0c:06:b4:d9:7d:fe:82:d5:26:eb:
53:0b:c5:d8:52:53:59:ab:b0:7c:ab:1e:ed:39:41:
76:4f:7e:9f:cd:cc:06:fe:3a:5e:b0:6f:00:5b:1e:
d0:0c:9d:e3:3b:60:e6:84:51:6f:23:6b:60:39:1e:
d7:27:21:04:a2:ce:db:89:ca:2b:e4:d3:ae:3f:78:
8f:45:54:6e:46:cf:ba:89:d3:a6:a8:d5:34:db:93:
6a:53:5b:3d:e7:dd:74:1f:91:4d:4b:9a:00:35:f6:
99:20:ee:82:d6:43:28:96:55:2a:f8:e8:07:9a:c3:
e6:20:15:7e:27:4d:aa:27:69:09:0f:29:d1:b3:32:
65:6f:a6:44:bf:56:7d:f1:74:c1:5c:20:3b:58:59:
28:78:e7:89:e8:fd:97:b3:5e:02:49:00:b9:a9:f3:
ba:c7:ee:4b:a9:e4:10:8c:76:43:33:98:d7:7e:18:
9b:0e:02:83:c8:22:b0:51:d6:ef:7a:b9:9a:fc:8c:
4b:48:fd:8e:5c:d0:2f:0b:5e:af:32:22:7a:48:e2:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:E5:39:09:57:1F:2B:02:37:3C:34:96:CE:79:60:3A:C1:32:22
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/InvlOQlXHysCNzw0ls55YDrBMiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ea:43:a4:2b:40:0c:56:32:da:db:b0:61:15:29:e6:af:29:
53:26:23:39:a5:b3:eb:c4:b8:09:5a:4b:da:5c:9d:93:1f:09:
07:1a:ed:4d:ba:cc:d8:72:49:8a:bc:2f:0c:e2:5f:65:03:93:
3d:18:95:11:83:ca:ff:fe:7e:ce:55:4a:e2:f9:75:f4:d9:28:
00:78:9b:fb:c5:2a:2c:58:20:21:85:32:f0:3e:9b:dc:90:b8:
4e:ac:a4:24:bc:87:34:59:87:6e:2b:e0:e6:a2:c6:97:b2:f8:
1a:84:16:02:cf:c2:6a:b0:9c:19:00:8a:96:20:44:d6:72:fa:
c8:f0:6b:cc:80:66:8f:b3:5c:75:f9:31:2e:62:4e:2e:d0:d3:
13:1d:44:0c:8f:d4:68:7d:0a:ba:2d:ce:ff:0d:cf:b7:f4:99:
8c:9a:5c:12:6b:51:79:69:f3:fd:ff:3e:f5:e5:bf:cb:83:e7:
71:41:01:75:a5:ab:bd:05:88:92:86:11:35:67:ea:24:fb:5e:
bc:85:4a:d7:d3:79:32:39:b8:1b:d1:eb:3b:25:fa:9e:7b:53:
f8:89:03:b2:1f:62:6b:40:7a:8c:ec:2e:2f:13:1e:14:06:63:
6a:2f:e1:2b:8f:40:08:fd:f8:48:c9:d2:0e:7c:59:10:87:74:
02:28:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:15:34 2025 by rpki-client