Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5GJeCGqIct6WMpJMKyy63Ef25_Q.roa
File: 5GJeCGqIct6WMpJMKyy63Ef25_Q.roa (raw, json)
Hash identifier: 3F6WjvVgFs/YNj25nu5+2BjXWLx3d3UnrgkSn5ExcKU=
Subject key identifier: E4:62:5E:08:6A:88:72:DE:96:32:92:4C:2B:2C:BA:DC:47:F6:E7:F4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2B78618EDF4847E0E49E71A20B9F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5GJeCGqIct6WMpJMKyy63Ef25_Q.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34552
IP address blocks: 78.109.112.0/20 maxlen: 20
78.109.122.0/24 maxlen: 24
80.75.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2b:78:61:8e:df:48:47:e0:e4:9e:71:a2:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4625e086a8872de9632924c2b2cbadc47f6e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:5d:44:ef:9b:aa:a2:81:50:32:c7:a2:35:
1d:76:51:7d:17:bf:cf:87:d8:c1:42:d8:0a:30:27:
1c:6d:15:ad:c3:9c:4c:32:e9:1d:b5:c8:cd:58:0f:
8e:49:dd:f8:92:47:1d:44:50:39:fa:fa:af:d5:64:
dc:4b:f8:da:2d:2f:cc:5e:2e:f0:46:4b:39:03:a7:
e6:64:fc:07:5b:a1:7f:53:f7:b8:75:73:b7:ee:8f:
92:8c:65:37:08:31:df:a7:b5:2b:52:5c:1d:df:aa:
57:cf:7e:31:f3:f3:15:d4:dd:af:ea:87:e1:8a:02:
89:38:3c:66:63:b7:6b:c3:f6:14:c3:89:40:76:8f:
a8:3d:d3:ca:7b:7a:b2:72:2c:68:8a:0f:2a:49:7a:
01:f6:8b:0d:ec:4d:ca:e0:ee:b5:d9:75:13:f3:e2:
85:b4:fd:a3:e5:84:65:f1:98:9c:97:6f:75:80:31:
52:ba:50:5a:06:25:46:9e:64:82:eb:94:ba:84:4f:
58:f2:a5:7d:a5:e9:8c:8a:97:a5:f5:b2:1f:7a:0b:
38:31:64:35:42:a7:2a:d4:09:9a:7e:b1:d7:8d:46:
fd:f6:c6:7b:6d:83:f7:06:f0:1e:26:d7:6e:98:00:
78:6a:3c:61:83:82:3a:00:21:52:e8:45:1d:d5:5e:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:62:5E:08:6A:88:72:DE:96:32:92:4C:2B:2C:BA:DC:47:F6:E7:F4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5GJeCGqIct6WMpJMKyy63Ef25_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.112.0/20
80.75.80.0/20
Signature Algorithm: sha256WithRSAEncryption
78:a3:c9:c6:85:4f:2a:9b:79:fd:49:cd:de:0f:17:16:48:8b:
f4:56:ab:03:47:f3:48:e3:3d:45:f0:7f:e4:c5:bc:fb:11:08:
79:e0:30:e5:b8:4e:c6:ae:1a:20:26:95:57:dc:3a:84:aa:6a:
cc:4e:43:8d:c6:3b:36:d9:8a:4d:bb:78:76:8b:03:ba:65:55:
8e:4c:ea:2d:77:ec:b1:93:c6:28:de:74:ab:51:a5:a1:86:08:
c0:b9:de:48:3e:54:40:a1:b4:3a:4f:e8:d2:9d:c0:50:3c:a6:
fe:a7:d1:68:77:df:0c:48:8a:da:6b:8e:81:fd:b0:53:7f:5a:
ce:8b:dc:56:db:18:79:db:e2:2c:82:32:d7:1c:75:ff:a3:de:
3d:bd:15:9f:38:0d:e3:c8:e8:1c:5d:66:89:bf:0a:c2:e3:52:
21:2d:b4:b3:e8:80:e4:e4:d1:51:d8:40:a7:d2:6b:4e:0b:e2:
a8:98:7c:c9:7a:1d:4e:66:3a:ed:c7:a2:ae:d0:0a:06:a6:d8:
a6:7f:f7:06:0b:88:d5:a2:e3:d3:b0:41:f8:bf:43:7f:64:51:
13:2a:2d:66:08:5c:32:27:57:28:82:07:5f:5a:48:92:f0:6a:
59:f1:49:58:b6:c6:e1:6e:2e:00:45:87:30:aa:2a:dd:64:bc:
16:6b:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:07 2025 by rpki-client