Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/pSukRsg6yv_sYe0co7sE6hrZh3c.roa
File: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (raw, json)
Hash identifier: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=
Subject key identifier: A5:2B:A4:46:C8:3A:CA:FF:EC:61:ED:1C:A3:BB:04:EA:1A:D9:87:77
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01941FFAB9BA00B7A4DB6111A0539DFE07C9
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/pSukRsg6yv_sYe0co7sE6hrZh3c.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 109.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:ba:00:b7:a4:db:61:11:a0:53:9d:fe:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a52ba446c83acaffec61ed1ca3bb04ea1ad98777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:45:87:72:b1:1f:93:3d:45:ca:0c:2b:20:
3a:53:0b:84:f7:c7:fb:5f:49:df:b2:dc:09:9c:58:
c2:08:6e:c0:ac:3e:a2:c7:f0:22:2b:72:bc:33:1e:
54:cd:55:bb:2e:c4:48:6a:18:1e:0b:6f:fe:82:e3:
1b:7d:56:ec:d7:01:50:30:dd:2c:26:8f:61:c2:27:
2c:97:1d:99:93:b1:e2:72:4d:05:ec:5b:5d:1c:62:
bb:58:72:93:d9:e1:39:0f:70:53:c8:a9:01:3c:28:
6f:51:47:ce:ef:db:0d:b8:ef:d6:f9:50:aa:d6:c0:
0b:05:19:98:c6:13:ef:a8:02:98:26:34:97:09:ec:
45:c1:3b:28:79:46:c0:e1:a3:e7:2f:c3:e1:55:5d:
83:c1:78:60:a1:52:d9:d8:38:ce:7a:44:81:4a:70:
66:3d:2b:39:62:be:28:eb:08:07:a3:45:3f:70:49:
df:99:a6:fd:f7:32:a5:09:13:16:52:d8:d2:c7:13:
4c:86:d7:70:5e:6b:b6:45:a0:af:ba:0e:85:0d:9b:
87:59:54:e4:04:a7:1f:a5:57:c7:56:09:aa:06:6a:
1a:d6:aa:3d:98:bb:fc:7c:00:4d:9c:f1:cc:6c:30:
d3:f6:2e:cd:cf:9a:a2:7e:51:98:d4:1f:ca:10:99:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:A4:46:C8:3A:CA:FF:EC:61:ED:1C:A3:BB:04:EA:1A:D9:87:77
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/pSukRsg6yv_sYe0co7sE6hrZh3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:18:1e:1f:ea:0a:ea:08:75:0a:9d:ad:5f:cb:3b:40:d1:33:
c5:80:f9:b5:40:ae:01:73:81:a9:fd:db:b3:48:b1:95:a3:f0:
bc:d3:00:aa:bf:27:23:15:04:f6:45:b0:c6:03:47:f2:16:8e:
7f:b6:01:25:c1:27:0e:ff:f1:37:83:00:f4:34:36:52:85:cd:
eb:65:07:40:e4:52:c7:9d:7c:39:1b:de:8e:c7:f7:5d:a2:61:
97:05:c4:a7:f3:f8:6a:80:0f:79:bd:d0:37:4c:91:42:c6:68:
4d:94:60:d7:98:d1:78:bb:ff:8d:96:1d:1e:d3:3c:09:fd:00:
ef:8c:bc:12:3c:24:0f:e0:3a:cd:ce:78:75:bf:3e:9f:7a:33:
0f:ae:c2:5e:3c:0c:10:fe:e8:38:c1:db:2e:4e:9f:fe:cf:33:
5e:e4:a8:ea:9d:e8:da:e0:8c:45:65:9f:26:b2:f9:0e:c9:15:
92:f7:a2:30:a6:23:4a:55:c5:8b:ae:09:9b:f7:87:86:5b:fa:
13:5b:09:7a:54:e5:78:63:e6:64:d4:f6:b8:77:cb:8c:44:f8:
c7:d9:3e:30:01:70:f3:28:f1:d5:47:bc:3b:0d:1d:fe:d2:05:
b9:ce:76:df:ef:79:3b:ea:87:32:c8:ce:45:b8:0d:22:2c:53:
db:53:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:44:22 2025 by rpki-client