Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/90OYi_DbL9hFl4CkqvB4Uit6loY.roa
File: 90OYi_DbL9hFl4CkqvB4Uit6loY.roa (raw, json)
Hash identifier: 4lOyJpdCc6RgNGNm2G3Ed5fdt/S9u/H6yRogzjS1q68=
Subject key identifier: F7:43:98:8B:F0:DB:2F:D8:45:97:80:A4:AA:F0:78:52:2B:7A:96:86
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D32106DCCFEAC9433E43450FA0673
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/90OYi_DbL9hFl4CkqvB4Uit6loY.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58229
IP address blocks: 37.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:32:10:6d:cc:fe:ac:94:33:e4:34:50:fa:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f743988bf0db2fd8459780a4aaf078522b7a9686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:eb:f7:8f:ea:7d:b3:44:d5:2e:f5:f2:a1:
ae:62:7b:ac:6b:41:b4:48:5b:84:7e:ac:2c:ba:8a:
6f:60:02:a0:e6:f4:06:b1:bc:91:d2:a3:60:d6:f9:
c1:0c:44:9b:c1:f9:e7:d8:6f:cf:c5:7c:12:fb:27:
a4:c0:f6:b4:3a:78:d3:e1:81:9b:c9:75:c9:5d:08:
eb:ed:44:c8:52:54:2f:00:3e:0e:fb:67:44:13:72:
2e:71:21:17:31:5e:32:66:b7:7c:dc:9c:8c:3f:eb:
2a:28:83:93:29:0d:15:84:7b:06:85:42:1e:ed:11:
df:fb:18:c3:1c:5a:7c:94:99:6d:7d:44:b4:ea:ce:
8c:d5:a9:d7:9f:20:2c:7f:04:4c:4f:c8:02:74:26:
19:f6:9a:78:fc:af:24:7b:ad:4b:cb:d8:a5:b4:ff:
66:6a:4c:41:a9:45:57:99:49:4f:3f:37:fb:d3:e8:
ef:b7:e2:36:51:d1:7a:ba:f2:2c:d2:c5:84:f3:c0:
eb:c0:7e:7a:92:30:94:63:6c:15:ce:8e:f8:a6:b9:
e3:48:c1:41:6a:3c:d7:ae:5c:d0:38:f7:c4:8d:af:
34:24:a7:ea:2a:ab:f3:6f:3c:bf:3e:06:f3:60:fb:
65:3f:90:65:ed:0a:f2:5f:2f:46:53:c1:ef:f1:65:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:98:8B:F0:DB:2F:D8:45:97:80:A4:AA:F0:78:52:2B:7A:96:86
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/90OYi_DbL9hFl4CkqvB4Uit6loY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5c:14:9c:31:a8:e6:a5:9c:0b:75:d6:64:9d:b2:b8:5e:0f:
91:9e:4a:f7:1c:84:07:62:8b:cc:45:5b:20:65:6a:e5:98:66:
0b:1a:2d:09:6f:84:52:3d:3b:a1:0e:5b:eb:90:20:2b:e3:67:
58:89:7e:48:24:45:b5:0d:20:e4:9f:af:cd:f5:cb:63:65:58:
27:60:e1:6b:38:53:2a:ba:fb:08:3a:cb:fc:1a:cd:d2:14:0f:
d6:b0:73:2a:6c:47:49:fa:01:0a:4d:5e:e3:64:57:c6:f0:bb:
c0:f8:19:f8:a2:86:68:3a:6e:03:02:65:17:82:2d:cd:da:61:
59:20:a0:b4:43:99:bb:ce:42:f5:c8:3e:9b:96:9f:8b:b1:79:
1e:ac:a1:77:ab:75:38:9a:1c:2f:80:e9:1d:e0:f2:2b:d3:c5:
6c:d6:f1:15:8e:31:c5:d1:d1:f9:27:5d:98:8e:45:71:0c:0f:
f1:01:21:9b:96:93:0f:f8:97:d3:10:da:d5:fa:9e:69:db:17:
4a:5b:d3:29:27:2b:1f:ba:df:94:c0:d8:d1:67:61:82:4c:ad:
8d:b8:71:29:60:6d:59:9a:bc:9b:82:2f:95:8d:d4:86:8c:9f:
d5:68:01:cb:45:3f:2f:f7:f7:93:6a:56:8a:75:5c:6c:0b:74:
80:0a:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:42 2025 by rpki-client