Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/142k_JqxOgOrOMAX_ATrLZuI5UE.roa
File: 142k_JqxOgOrOMAX_ATrLZuI5UE.roa (raw, json)
Hash identifier: jH0I/my3MHEp3GGWEBiCxttAcOQrt9WiSUlbnLNkdjI=
Subject key identifier: D7:8D:A4:FC:9A:B1:3A:03:AB:38:C0:17:FC:04:EB:2D:9B:88:E5:41
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D398EDEFEED355BAC49E039CD83BF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/142k_JqxOgOrOMAX_ATrLZuI5UE.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202768
IP address blocks: 91.107.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:8e:de:fe:ed:35:5b:ac:49:e0:39:cd:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d78da4fc9ab13a03ab38c017fc04eb2d9b88e541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:49:bf:36:49:b1:1f:56:19:a1:3a:42:24:
60:1f:90:67:b6:58:86:83:36:ce:2f:85:ca:41:2f:
78:2d:f5:07:cf:a3:3c:18:a5:ca:1f:49:d6:c6:40:
eb:33:fb:19:69:1a:2d:e4:87:83:44:56:99:18:84:
ca:7d:bc:fb:54:9e:0c:87:d1:b4:17:90:b2:0e:4c:
bf:18:79:2f:ad:db:a7:ec:19:ba:68:ee:87:3d:6d:
c4:25:f8:c7:79:e2:99:58:82:5c:e2:1a:f2:d9:bb:
0a:f6:22:e7:b1:0d:7c:32:ec:34:c4:ff:99:6b:56:
d7:d7:5e:f8:5e:67:23:8e:d1:32:32:14:10:92:3f:
0e:85:57:5c:84:c5:36:57:19:23:c9:83:f8:09:e7:
61:d8:90:3e:e5:0f:59:81:4c:44:89:f0:49:21:5e:
70:ef:cc:a4:22:b9:84:fd:50:a9:44:47:e4:34:7d:
39:8c:e8:da:41:b9:c7:08:95:96:03:27:4d:f3:62:
c4:2f:d9:f8:a6:96:cb:cc:2c:1a:7a:bb:62:f0:71:
83:8c:5d:b2:dc:48:1f:63:d2:75:e9:00:56:7a:73:
ec:a7:49:bc:b7:a2:5d:62:b7:f5:02:72:d8:10:3a:
81:e8:38:b1:95:a6:bd:f4:4c:c4:e5:66:6e:da:56:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:A4:FC:9A:B1:3A:03:AB:38:C0:17:FC:04:EB:2D:9B:88:E5:41
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/142k_JqxOgOrOMAX_ATrLZuI5UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:40:89:78:03:64:91:ea:2f:5d:00:fe:26:ca:a9:89:89:ff:
b5:9a:6c:d3:20:ab:95:f1:89:d1:22:08:18:4f:90:c1:2c:de:
9d:2e:91:f5:c0:f3:44:9f:2b:4c:ad:5f:fc:40:4d:89:36:5b:
c9:5b:c7:cb:72:c8:60:3f:40:67:44:6a:42:10:b7:7b:0d:d3:
00:68:12:3a:11:cb:2d:05:ab:a7:09:67:72:2a:dc:e2:5a:5a:
8b:5a:af:9a:f0:35:ef:6c:98:8a:ed:98:cb:95:fe:16:d3:5d:
8f:b3:0c:c7:b4:61:ad:e6:fb:6f:ad:1d:d7:8b:92:b3:86:43:
3e:00:39:f5:27:91:18:7f:d1:af:ab:aa:79:21:cd:9e:d2:d5:
a9:50:86:f4:79:77:da:d9:7e:f6:67:9c:b6:a9:57:6f:17:f2:
21:50:50:22:26:7a:bb:bb:fd:f2:20:c6:e7:35:48:44:37:2a:
a7:32:0f:96:59:e2:f4:36:31:ec:59:22:fd:0f:ce:01:e5:9f:
bc:ea:56:b3:7c:f9:f8:e3:cd:f1:79:5c:79:6e:5d:1e:e2:22:
e4:0f:01:0f:b2:cc:5d:cf:c4:d2:88:b7:91:b8:7c:6d:14:5b:
d3:05:39:39:78:2a:8f:aa:a8:f9:a6:33:b0:5f:b3:a9:1b:97:
fa:f3:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:18:03 2025 by rpki-client