Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dDE1zJ4gNGHLcnYl5ULHFpkw5rU.roa
File: dDE1zJ4gNGHLcnYl5ULHFpkw5rU.roa (raw, json)
Hash identifier: n1CMfD6L5h+rVMnh3u/kfavdStN9oFqSn6RtHXA0foQ=
Subject key identifier: 74:31:35:CC:9E:20:34:61:CB:72:76:25:E5:42:C7:16:99:30:E6:B5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2A88DB6387F1EA3F8784BB8F404E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dDE1zJ4gNGHLcnYl5ULHFpkw5rU.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33908
IP address blocks: 82.140.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2a:88:db:63:87:f1:ea:3f:87:84:bb:8f:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743135cc9e203461cb727625e542c7169930e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:1b:e7:95:d9:69:bc:d6:82:30:95:13:5d:
a9:cb:66:dd:2c:e3:07:12:6b:70:74:d6:6e:bb:23:
f5:0d:fb:59:42:cd:0d:6d:19:ab:83:d7:5c:bc:fc:
e1:dc:87:95:ae:35:52:42:30:68:59:72:3f:cd:64:
d6:ee:4f:ca:d4:82:d6:a7:8e:ce:b1:dc:84:5d:ed:
2f:e5:54:77:f6:0c:15:a6:77:a2:ce:f3:fc:da:24:
a9:e0:58:4e:03:05:a0:12:0b:a5:93:5b:61:6f:82:
48:9c:93:00:69:e8:6f:01:18:33:4a:5f:1f:52:cc:
18:f4:c5:5d:ca:b9:48:e5:17:33:29:5e:c4:00:d3:
dd:42:6d:6b:8a:db:34:8d:1e:1d:8a:e8:8f:e5:c1:
e3:70:6f:d9:30:3e:b6:92:92:6b:da:c0:9a:b4:66:
99:39:10:de:4a:27:28:36:87:1e:9d:60:29:52:19:
d9:1c:38:cf:23:5b:09:52:5b:e2:a4:22:17:60:3e:
25:34:3a:85:d6:57:7f:77:db:0e:71:cd:23:26:75:
e8:06:35:49:ed:24:fd:15:0b:2d:1c:82:cb:0f:2f:
f0:f3:dd:0e:39:ef:e7:55:1f:21:8a:fd:fe:d2:72:
4c:e2:76:29:ec:88:a1:96:4b:43:03:0a:65:60:a7:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:35:CC:9E:20:34:61:CB:72:76:25:E5:42:C7:16:99:30:E6:B5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dDE1zJ4gNGHLcnYl5ULHFpkw5rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:47:d6:d6:30:d6:b1:95:5d:b5:47:d4:ec:ae:11:d0:8f:31:
c3:57:b3:c1:dd:9b:21:50:0c:4f:c5:9b:a4:89:c4:3e:09:15:
d4:64:fb:6e:24:d4:a5:2a:a4:97:5a:fb:b3:a8:52:0f:8e:e6:
df:55:8c:b2:8e:42:70:3e:a4:35:9d:4b:e6:3c:1a:04:5a:ea:
d3:f2:c6:0e:2b:07:d4:66:29:de:51:9a:cd:4d:a2:13:ba:9a:
ce:6e:a6:b7:05:c5:be:2c:0d:1b:f5:27:84:a9:91:21:42:a4:
77:d0:1f:a2:a6:2f:09:c2:de:86:e9:3e:24:7f:2b:72:8b:cf:
bc:55:1d:8b:be:e2:1c:34:f1:2b:64:5c:51:ad:52:51:ec:ee:
75:87:2a:3f:7b:43:4f:22:68:f7:ce:40:9e:8b:e5:af:ce:7f:
5a:50:49:47:6a:e5:20:c5:7b:bc:2a:dd:d8:4b:2a:7b:82:87:
60:67:65:8d:60:17:f6:cf:74:45:9a:21:6f:cf:6e:75:6c:7b:
40:67:72:b0:17:47:d0:2d:37:6f:f2:34:55:26:02:dd:b5:94:
c5:1c:74:91:fa:2d:8d:4f:2e:47:c3:cb:19:ef:2d:85:37:4e:
7b:ee:fd:be:d4:33:14:b8:45:02:a2:07:1c:9c:a3:7a:09:40:
86:09:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:44 2025 by rpki-client