Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-XgcfywfVWqbXjJamP0lKlPDGd8.roa
File: 1-XgcfywfVWqbXjJamP0lKlPDGd8.roa (raw, json)
Hash identifier: 8K1ugQ5H5R9Vak8LUQoXIPaVCeLxMy6U0Aunm67hRR0=
Subject key identifier: F9:78:1C:7F:2C:1F:55:6A:9B:5E:32:5A:98:FD:25:2A:53:C3:19:DF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D335B2A6201210E58E3FCDA4FA1F9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-XgcfywfVWqbXjJamP0lKlPDGd8.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60484
IP address blocks: 62.89.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:33:5b:2a:62:01:21:0e:58:e3:fc:da:4f:a1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9781c7f2c1f556a9b5e325a98fd252a53c319df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:7e:93:54:e3:db:c6:c1:87:1f:af:24:c3:
83:af:82:f6:f2:fe:bb:0c:57:89:f5:22:71:da:ec:
b6:34:4e:a5:f3:ec:c5:4e:d1:0c:99:18:e7:00:ff:
ec:cf:d4:8b:06:1f:bc:ed:49:65:67:66:a3:3d:fa:
1f:7a:e8:c2:87:33:dd:b6:a5:31:af:a2:a9:f9:1a:
28:e7:9e:b9:ec:eb:ba:e6:96:68:ac:9f:86:73:e7:
d1:40:8f:04:11:82:25:9b:2d:81:6a:47:29:2d:5e:
66:96:30:ac:70:a9:9c:92:d2:b6:99:79:4b:f9:30:
d4:8c:8a:94:33:87:00:cb:82:06:1d:5c:c1:33:d2:
7d:f5:84:ee:05:47:91:fc:2a:d9:e4:44:46:e6:2e:
b3:6a:93:a9:dc:cf:15:ef:12:ca:96:ef:34:86:40:
5d:19:0a:93:e5:19:ea:7f:95:a4:0c:09:e9:7d:3d:
8f:7d:47:50:31:49:c8:31:67:82:59:5c:3c:ba:d9:
5e:51:20:ec:c8:93:e5:26:5d:97:30:6f:33:9f:52:
11:8c:2e:89:05:0a:4a:09:e7:7a:9f:89:b9:15:28:
71:94:7a:33:45:48:23:44:99:45:d9:13:da:0f:5f:
62:95:8e:bd:73:a9:2d:56:f5:a8:bb:bf:f2:bf:f4:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:1C:7F:2C:1F:55:6A:9B:5E:32:5A:98:FD:25:2A:53:C3:19:DF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-XgcfywfVWqbXjJamP0lKlPDGd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2c:6f:ee:be:8d:ff:04:e9:d6:6a:99:6f:46:17:e9:01:bf:
a7:cb:8c:80:ef:b5:a7:13:10:34:6a:6b:6b:49:82:de:ed:f2:
d0:93:47:cc:41:93:29:d9:69:92:c3:46:67:31:af:55:13:ca:
1b:c6:9a:39:4d:78:e2:da:e5:6a:62:85:d6:ec:c9:d6:02:a8:
59:98:f1:22:28:d3:c2:af:11:39:d8:59:18:f8:1a:fe:58:7e:
46:3c:de:8a:34:81:77:2f:01:b6:27:69:93:4e:b7:3b:c2:05:
3f:9b:39:85:00:90:51:5e:08:36:ee:b6:c7:08:e8:b6:7c:3e:
77:4b:4e:4b:01:31:eb:32:2c:02:1c:64:22:5f:c1:f4:90:ae:
92:b6:8e:a8:92:dd:96:34:78:3a:76:54:f6:3d:da:66:68:e1:
73:6b:1b:61:c2:b4:47:5e:31:a5:4a:b0:60:85:43:ed:c4:7a:
6b:2c:96:bd:df:62:0a:f2:0c:d6:73:28:2d:b8:82:c3:cb:23:
62:7a:51:a3:7a:c3:2e:15:e5:27:f4:52:be:cf:6d:16:5d:ef:
ff:ac:96:2a:f2:0f:78:68:93:db:01:03:04:b1:fd:0c:8d:a1:
ae:5a:92:e0:b9:e4:43:01:14:9d:69:76:4b:de:08:9f:65:f2:
9f:ae:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:01 2025 by rpki-client