Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa
File: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (raw, json)
Hash identifier: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=
Subject key identifier: 57:85:07:12:EE:65:16:E8:5D:67:01:C7:EA:5C:71:5F:84:6C:9E:9E
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019424B3E23125DF6BD48AC82EB9FE31FB95
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 188.92.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e2:31:25:df:6b:d4:8a:c8:2e:b9:fe:31:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57850712ee6516e85d6701c7ea5c715f846c9e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:5f:4b:b4:f0:f2:66:0f:51:f2:08:f8:26:
8e:f7:73:33:94:7f:9a:c6:64:97:24:90:f7:4d:57:
1f:e4:b5:a9:4a:5b:b8:39:59:a2:f8:20:e8:0d:75:
f8:d5:c5:0f:99:c3:14:8b:00:ea:ca:22:98:60:6e:
a4:3a:6f:75:5c:a7:09:73:f2:81:02:61:60:58:b8:
94:04:da:3e:89:cf:bc:30:ab:b8:5e:f0:a6:92:16:
6d:ab:d2:80:de:29:d7:a4:67:66:eb:19:8b:c0:9e:
37:74:9a:cd:67:86:49:c5:76:af:36:a8:6d:5e:51:
4d:1a:02:63:f5:dd:d2:dd:cc:98:d5:71:6f:b8:51:
30:d1:01:cb:3c:32:b3:0f:8b:54:d0:59:72:cc:a5:
7a:09:db:4e:2b:8f:1a:5d:48:56:05:06:cb:ed:ce:
ec:2f:43:3d:86:f1:be:5d:77:b5:c5:ba:9d:51:65:
7a:b0:90:91:5c:dc:45:86:5d:bb:65:27:11:ea:c2:
83:1d:d6:02:de:ca:13:8b:82:37:73:b9:37:40:cb:
ab:82:0a:84:08:4c:09:bb:48:46:bf:00:fe:a6:76:
dd:ca:c5:bb:46:6f:b5:ec:cc:da:86:8d:6e:59:c3:
fc:eb:30:2d:70:ee:44:c9:de:c5:cc:a8:18:4d:8d:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:85:07:12:EE:65:16:E8:5D:67:01:C7:EA:5C:71:5F:84:6C:9E:9E
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.152.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:09:9a:e7:4a:41:44:51:b2:ea:2e:04:03:e5:d7:67:39:2a:
0d:55:9a:ac:9f:87:7c:7c:e8:7a:1e:d8:08:e0:0d:00:1a:a0:
3b:36:75:61:0d:36:dd:73:5d:0c:e3:b5:69:df:f0:43:d4:b3:
a7:b8:98:34:70:e9:02:3b:e0:ba:0e:82:f4:01:4c:8e:3d:de:
95:78:63:13:01:05:78:98:c5:0d:55:02:06:4a:84:95:b2:35:
84:af:6c:dd:dd:f7:6a:fe:0a:05:cc:4a:d9:0c:03:14:f8:fc:
e5:50:d5:d8:cb:49:67:2d:4a:67:47:2a:ec:7d:6d:49:aa:f1:
0d:7f:bd:39:1a:ad:a4:42:dd:02:d3:26:27:13:ac:f3:73:57:
21:c4:2d:c9:e0:5b:70:86:99:27:c8:66:99:23:1c:65:71:85:
db:d4:4c:34:25:c9:a3:bc:63:9f:cf:ad:63:8d:17:16:97:7a:
7d:f9:02:60:54:e3:a4:4c:06:62:57:3e:5a:f1:b2:51:08:bc:
af:93:06:b3:3d:5f:ff:f6:43:e7:81:68:b8:33:5c:1a:c6:97:
e4:62:ec:39:6b:d7:3a:1b:bd:6f:f7:fc:f1:c1:b6:c6:ab:20:
fa:b7:cf:8a:01:8d:69:14:6d:6e:28:de:fe:74:e8:81:c4:81:
25:e2:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:40 2025 by rpki-client