Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XXviKyk7V2cw5WRC8twumijCnvQ.roa
File: XXviKyk7V2cw5WRC8twumijCnvQ.roa (raw, json)
Hash identifier: y7nqky9qkxAVuyhY1HkHoBy6FhBnhO38Lbn08sqKY3M=
Subject key identifier: 5D:7B:E2:2B:29:3B:57:67:30:E5:64:42:F2:DC:2E:9A:28:C2:9E:F4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D385D4319CA91449F3AA7044D1C3F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XXviKyk7V2cw5WRC8twumijCnvQ.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201018
IP address blocks: 89.107.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:38:5d:43:19:ca:91:44:9f:3a:a7:04:4d:1c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d7be22b293b576730e56442f2dc2e9a28c29ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:f2:9a:96:e3:a6:bc:c2:7b:f0:a3:02:25:
83:51:a3:3a:33:71:bf:7d:01:18:45:8f:5d:49:65:
7b:69:99:e3:34:49:78:05:d1:a5:ed:5c:99:eb:f4:
65:7e:43:38:24:00:d2:56:67:bc:1b:9a:37:92:3b:
b7:a9:4a:ec:d2:42:51:05:c9:a0:e2:40:10:cd:d5:
9e:de:bb:19:f6:3a:67:e1:a5:33:56:4c:b4:05:ff:
8c:da:81:08:7e:c7:e5:05:8f:49:50:57:16:c2:d3:
ec:ab:00:39:d1:a4:6d:d8:96:df:c9:14:62:84:06:
8a:15:c4:06:b7:5e:91:f2:14:f3:82:14:ee:a3:51:
71:37:05:c3:8b:af:52:bd:a2:df:8a:f0:35:0d:fa:
24:96:f4:9f:23:79:26:94:2c:ab:8f:30:d9:3b:25:
2b:d1:bc:af:a6:ac:9b:88:d1:8a:59:fd:9b:20:a5:
91:f3:e3:fe:46:ee:ec:2c:cc:9d:a9:59:1c:69:42:
7f:7f:2c:e2:bb:07:39:c1:ae:c5:8f:5b:55:ca:d2:
8b:1a:64:31:05:c0:37:aa:f3:78:3a:dd:78:eb:26:
ad:7a:27:30:76:11:1f:a1:33:8d:4b:ca:dc:68:8c:
66:cb:76:e6:2f:ac:37:3c:61:f9:a8:13:ab:12:17:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:E2:2B:29:3B:57:67:30:E5:64:42:F2:DC:2E:9A:28:C2:9E:F4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XXviKyk7V2cw5WRC8twumijCnvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.140.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b9:1a:45:2d:50:b4:9e:26:78:e5:28:b5:14:6b:27:b1:e1:
ea:c1:ae:bf:3d:68:c6:4c:fc:d0:46:bd:24:fc:b8:62:21:62:
77:61:9b:2f:b2:bf:a4:8c:1a:57:6c:11:8d:f9:da:8b:77:ea:
15:e0:e9:3e:f8:bd:de:45:0e:f4:23:03:8d:ea:55:a9:23:b8:
94:a5:69:07:47:d1:3c:fd:61:f5:28:ca:53:1d:ca:e3:79:88:
05:5f:90:d9:d8:99:aa:f9:05:39:bd:8a:22:9c:c8:8e:18:39:
21:2c:c1:b7:5a:bb:e3:d3:70:04:67:a4:44:2e:8b:b6:56:ec:
98:9d:25:1c:b4:a8:de:64:b7:2f:4e:5e:41:fc:e8:6b:50:f6:
09:e3:03:b9:08:6c:e9:d9:b6:c9:88:29:93:f3:54:b4:cd:06:
a2:c7:ed:5d:27:6c:82:8d:cf:d4:40:a3:41:e3:67:8f:80:7b:
1b:be:38:3f:5f:bf:9a:73:ff:6d:da:a6:20:4a:fe:9e:a0:84:
d9:da:1c:6e:09:d2:af:92:20:4d:02:50:5d:3e:69:18:b3:75:
b9:01:54:79:0e:4b:05:1c:1e:37:a7:8c:0d:7d:d3:74:01:e3:
05:44:32:d7:16:59:bf:f3:42:db:df:47:13:f0:e8:cb:49:55:
10:59:10:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijThdQxnKkUSfOqcETRw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDdiZTIyYjI5M2I1NzY3MzBlNTY0NDJmMmRjMmU5YTI4YzI5ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeXympbjprzCe/CjAiWDUaM6M3G/
fQEYRY9dSWV7aZnjNEl4BdGl7VyZ6/RlfkM4JADSVme8G5o3kju3qUrs0kJRBcmg
4kAQzdWe3rsZ9jpn4aUzVky0Bf+M2oEIfsflBY9JUFcWwtPsqwA50aRt2JbfyRRi
hAaKFcQGt16R8hTzghTuo1FxNwXDi69SvaLfivA1DfoklvSfI3kmlCyrjzDZOyUr
0byvpqybiNGKWf2bIKWR8+P+Ru7sLMydqVkcaUJ/fyziuwc5wa7Fj1tVytKLGmQx
BcA3qvN4Ot146yateicwdhEfoTONS8rcaIxmy3bmL6w3PGH5qBOrEherJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF174ispO1dnMOVkQvLcLpoowp70MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvWFh2aUt5azdWMmN3NVdSQzh0d3VtaWpDbnZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWuMMA0G
CSqGSIb3DQEBCwUAA4IBAQCJuRpFLVC0niZ45Si1FGsnseHqwa6/PWjGTPzQRr0k
/LhiIWJ3YZsvsr+kjBpXbBGN+dqLd+oV4Ok++L3eRQ70IwON6lWpI7iUpWkHR9E8
/WH1KMpTHcrjeYgFX5DZ2Jmq+QU5vYoinMiOGDkhLMG3Wrvj03AEZ6RELou2VuyY
nSUctKjeZLcvTl5B/OhrUPYJ4wO5CGzp2bbJiCmT81S0zQaix+1dJ2yCjc/UQKNB
42ePgHsbvjg/X7+ac/9t2qYgSv6eoITZ2hxuCdKvkiBNAlBdPmkYs3W5AVR5DksF
HB43p4wNfdN0AeMFRDLXFlm/80Lb30cT8OjLSVUQWRAf
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:28:36 2025 by rpki-client