Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/exkrYc_UMRL6pFKVEmeWp_5qepc.roa
File: exkrYc_UMRL6pFKVEmeWp_5qepc.roa (raw, json)
Hash identifier: mJeUFVHRt84bLM4JTnfphw8n7YJxlOot27ig4IAeMpU=
Subject key identifier: 7B:19:2B:61:CF:D4:31:12:FA:A4:52:95:12:67:96:A7:FE:6A:7A:97
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3092BB206AE3454A851FAF2FCFEE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/exkrYc_UMRL6pFKVEmeWp_5qepc.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51219
IP address blocks: 5.8.180.0/23 maxlen: 24
81.23.10.0/23 maxlen: 24
109.73.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:30:92:bb:20:6a:e3:45:4a:85:1f:af:2f:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b192b61cfd43112faa45295126796a7fe6a7a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:3b:a8:4b:87:70:be:35:af:6c:a0:11:72:
25:e6:b9:3e:63:d8:ba:5f:ee:c5:7b:b1:9b:ef:12:
27:18:7b:55:67:c2:00:8a:cd:e5:9d:a2:1f:06:43:
b2:46:4a:c2:b4:53:c5:c1:72:13:42:8e:e1:75:48:
00:9e:01:ad:d6:be:6c:99:51:c4:3b:57:c3:94:2c:
c6:81:61:a1:db:1d:24:67:7a:7d:e9:c6:fb:bf:a1:
68:b6:dc:79:3b:45:00:93:ea:28:49:a5:f8:54:96:
91:4d:29:46:65:db:cf:44:95:94:72:14:96:d1:41:
f6:bb:24:32:b3:72:88:66:bb:1b:92:94:e2:bf:18:
90:a7:db:cf:59:87:43:cc:6e:80:5e:24:bb:39:07:
45:b4:bb:e5:45:aa:61:45:ec:03:1c:9a:be:47:c5:
54:ef:77:67:a5:0c:47:d2:c6:f4:17:0e:23:a9:4a:
ea:c9:21:be:9a:0c:be:61:bd:a3:15:0f:b7:c4:32:
2b:ba:38:7a:1d:b1:d7:71:dc:f1:d2:55:fa:d4:86:
95:ad:eb:a6:6a:03:9e:68:03:89:54:74:5a:b1:0a:
7e:02:1f:98:d5:13:da:73:d6:79:90:97:ba:33:b2:
3c:af:4d:30:12:d7:2c:b7:94:fc:41:82:2e:db:62:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:2B:61:CF:D4:31:12:FA:A4:52:95:12:67:96:A7:FE:6A:7A:97
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/exkrYc_UMRL6pFKVEmeWp_5qepc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.180.0/23
81.23.10.0/23
109.73.14.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ac:b6:e1:01:43:d8:14:b2:31:04:c9:a8:45:23:16:1b:27:
d2:da:da:95:55:26:67:c2:a0:0b:ef:77:b6:42:e2:23:c8:d3:
51:9a:d5:5c:83:94:27:70:01:59:49:49:09:f0:d9:13:f3:8c:
02:1d:e0:a9:97:1a:66:04:26:7b:cc:7b:c1:64:40:be:4c:c0:
21:75:54:e2:99:7c:58:41:67:e3:30:8e:63:16:47:2c:1a:fd:
89:c2:dc:34:1b:fd:e4:80:8d:6f:c7:18:0f:12:70:f9:79:40:
69:72:09:8b:73:ff:05:0e:a3:71:b2:e1:a8:d0:74:8b:1d:51:
a5:84:f8:ea:75:e3:93:41:a5:3f:97:e0:38:3d:56:52:4c:41:
59:84:8f:f1:64:a3:8c:da:cd:43:d4:bb:bc:e0:35:5f:14:eb:
e7:d1:63:97:7c:56:41:05:89:fd:24:cc:85:00:49:14:63:9e:
b5:ce:6a:5d:9f:43:01:fd:95:ce:10:2b:ea:61:6a:3b:f5:d5:
d7:00:2d:c5:f9:65:1a:7d:d5:0c:17:be:2a:e0:f1:0e:ac:82:
8d:e9:ac:90:8f:dc:b1:d6:0f:ce:62:b4:93:a8:4f:cd:b8:5c:
a7:39:69:c2:10:95:be:94:e5:2b:10:ed:1e:ab:b3:0d:fc:e3:
00:b5:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:32:59 2025 by rpki-client