Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SCzC3-IQBySNFZ2zCa3meGnUjd4.roa
File: SCzC3-IQBySNFZ2zCa3meGnUjd4.roa (raw, json)
Hash identifier: 2WL67rm+Gv54JjxUw3o/XJhsHm53gcRyLL6t576R9nQ=
Subject key identifier: 48:2C:C2:DF:E2:10:07:24:8D:15:9D:B3:09:AD:E6:78:69:D4:8D:DE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3A738B55EA9F3743EDD169C93B58
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SCzC3-IQBySNFZ2zCa3meGnUjd4.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204271
IP address blocks: 62.89.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3a:73:8b:55:ea:9f:37:43:ed:d1:69:c9:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=482cc2dfe21007248d159db309ade67869d48dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:6d:a0:bc:c5:90:77:cb:f2:5f:08:da:14:
55:e5:07:49:52:2f:c8:5f:8e:d2:b2:6a:52:ac:8c:
78:ea:69:43:90:97:d0:0a:cb:1c:85:e8:d2:03:ec:
88:dd:e2:06:9d:6f:8e:05:0a:c0:80:00:c4:7f:64:
2e:8a:8c:a6:0d:1d:71:b0:88:2c:5d:e4:25:d4:43:
d9:3d:f2:11:c1:88:68:59:b4:cb:c6:db:67:20:66:
eb:f1:73:07:16:46:23:9f:50:c1:e3:02:d9:15:7e:
57:96:60:10:5d:e8:e0:9e:c7:81:6f:28:66:c1:80:
15:6f:f6:68:52:cb:e0:78:c7:3b:60:f9:d1:13:cd:
c1:8a:9d:0f:cf:40:fc:b3:7e:23:c9:e1:a7:77:72:
de:97:d9:47:60:44:30:66:50:f8:d3:79:b0:53:fb:
b8:05:67:38:74:da:17:55:fe:eb:6a:6c:21:40:6f:
d4:96:3d:31:c6:e7:d7:96:af:71:ce:7a:31:a8:db:
ae:fb:d8:01:f6:d1:58:e2:7c:87:22:d4:40:43:42:
41:90:f0:68:47:56:8b:ad:9f:67:a9:7f:f6:0e:0b:
55:68:c4:f6:31:ea:1d:1c:1d:36:84:fb:9c:1f:7c:
56:ba:dd:6f:44:02:55:4a:fd:3b:e5:4e:a9:e5:fd:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:C2:DF:E2:10:07:24:8D:15:9D:B3:09:AD:E6:78:69:D4:8D:DE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SCzC3-IQBySNFZ2zCa3meGnUjd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:86:6a:d9:2e:a9:b4:37:8a:8b:78:57:77:9a:35:63:1f:cb:
8c:bf:77:a0:a3:29:b9:1c:ed:a4:06:dc:7f:56:84:e6:7b:77:
ae:d7:2e:cc:00:a7:76:7c:52:21:2a:d5:b5:a5:4a:ba:39:b3:
f9:09:3e:35:69:8d:b1:cd:bd:74:d8:a0:a4:2d:ef:b5:e0:a7:
58:29:2b:4a:97:42:08:1a:81:1a:05:93:c4:55:11:39:b5:4d:
26:58:3f:02:0b:ae:06:e4:3b:01:7a:5e:fd:e6:a2:ec:36:78:
9e:dc:75:d9:59:9a:99:3b:8f:e0:75:2a:ce:36:50:07:71:6c:
be:65:89:80:2b:f1:a2:28:9e:63:dd:99:90:cc:d8:6a:a8:2f:
c5:77:5e:15:af:61:4b:cd:63:c4:4c:30:bf:97:21:d1:24:63:
0d:55:db:42:54:2a:86:e1:bf:52:37:30:40:64:71:c8:cc:c8:
74:2c:b3:4b:e4:8a:67:c3:d2:c7:b0:5e:d5:f8:e4:f3:45:c2:
0e:d9:0b:62:54:12:0c:37:28:a5:4b:7d:43:58:cc:6c:04:3a:
25:06:4e:f6:a9:fb:ed:40:d7:29:e8:b6:1a:4f:84:c8:ec:53:
ef:f8:4b:7a:7c:9a:b4:67:86:1b:16:98:c3:29:84:61:6c:5f:
b8:18:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:02:50 2025 by rpki-client