Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/4spQ6NxJCHQlIe40OSpahfCWkew.roa
File: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (raw, json)
Hash identifier: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=
Subject key identifier: E2:CA:50:E8:DC:49:08:74:25:21:EE:34:39:2A:5A:85:F0:96:91:EC
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 01942826527229062EE5D4BA19BF18FE9358
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/4spQ6NxJCHQlIe40OSpahfCWkew.roa
Signing time: Thu 02 Jan 2025 17:53:07 +0000
ROA not before: Thu 02 Jan 2025 17:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207704
IP address blocks: 92.119.156.0/24 maxlen: 24
92.119.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:52:72:29:06:2e:e5:d4:ba:19:bf:18:fe:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Jan 2 17:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2ca50e8dc4908742521ee34392a5a85f09691ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:f5:f9:be:c7:c8:a0:cf:66:fa:07:6c:c8:
4a:56:b6:29:6b:f2:31:ff:bf:da:fa:b0:52:90:b6:
ac:a9:c5:7c:86:72:60:27:d1:de:a9:52:35:e4:76:
0f:7e:bd:c7:95:82:dc:0b:c6:4e:0e:de:c9:f5:cd:
91:5e:0e:3f:3b:b7:8e:46:62:e0:c6:e0:a7:9e:21:
2b:43:da:5a:64:2b:c6:b4:02:21:7d:23:42:f4:62:
0c:46:23:59:d0:61:94:63:24:35:02:d3:69:3f:a0:
26:b0:eb:18:6f:66:0a:8b:3d:bd:8e:b2:be:af:bc:
e2:8b:c2:2e:fe:3e:84:fc:63:3f:3c:50:a0:a0:78:
aa:c6:17:fe:1e:44:95:37:01:0a:47:7b:fb:27:da:
dc:e4:bb:15:69:e7:15:66:09:f9:d4:99:eb:25:b4:
d8:6b:d0:6d:84:21:68:a3:e8:d3:9f:e7:bf:03:0e:
cf:35:82:91:83:d9:71:34:7a:41:64:72:61:30:37:
52:5e:17:fa:7e:66:b7:66:81:45:f4:9c:8a:ba:04:
ac:48:20:94:d4:1d:b8:ab:4b:a7:e5:84:85:3e:ca:
b1:c3:5c:d2:4f:91:8c:94:1d:9d:dc:a8:38:16:f2:
55:9f:dc:5e:7c:51:17:eb:db:c5:4b:6d:ae:52:90:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:50:E8:DC:49:08:74:25:21:EE:34:39:2A:5A:85:F0:96:91:EC
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/4spQ6NxJCHQlIe40OSpahfCWkew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.156.0/24
92.119.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9d:ce:ab:21:e4:e5:69:92:fe:5e:17:79:5c:65:de:02:fd:
d0:bf:51:ad:2b:c1:82:66:f1:03:7f:6c:7f:e3:f1:9e:c0:56:
ca:49:5f:6f:e7:26:1e:95:fe:99:2a:26:c0:c9:6d:a4:c9:df:
40:2f:9a:b5:56:2d:27:fb:4e:f0:6a:56:d4:dd:b2:0d:25:6e:
90:3c:bd:5b:ca:fd:e2:a8:83:e1:f7:69:61:e3:e9:96:f7:68:
78:78:af:ab:ff:9d:be:9c:33:8d:1a:f5:de:7c:33:87:83:5d:
52:04:e2:c1:22:72:4d:d9:ed:69:04:21:06:1d:3b:56:b2:27:
80:05:5a:af:bf:30:28:30:21:bf:24:8d:0d:5b:2e:12:df:fb:
c7:39:88:11:7e:a9:c6:50:7a:78:81:32:39:ac:24:31:e4:15:
81:eb:41:fc:cf:f0:75:11:38:87:3f:32:fe:2f:5a:32:44:50:
7a:31:ab:70:bd:d9:86:e3:92:fa:06:10:91:d3:2a:97:8f:c7:
39:da:a7:02:8a:78:50:1e:63:f2:0d:98:c8:67:95:eb:26:d7:
7d:a7:70:fa:7a:e2:be:5f:d7:e7:2d:ce:5a:ca:c5:bf:fa:af:
4e:86:55:bb:f8:bb:5e:6d:af:4d:8f:2c:45:b1:15:e1:c7:a0:
cb:a1:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:14:16 2025 by rpki-client