Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jBvmzPcNVN1L_pG2Bok13MXL6uY.roa
File: jBvmzPcNVN1L_pG2Bok13MXL6uY.roa (raw, json)
Hash identifier: aV4SCSY0tI6XZc5h0VQsqhn/NZ3+sq1u4RMGjVicd4M=
Subject key identifier: 8C:1B:E6:CC:F7:0D:54:DD:4B:FE:91:B6:06:89:35:DC:C5:CB:EA:E6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3F5249B99E37A2E0578A22966C41
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jBvmzPcNVN1L_pG2Bok13MXL6uY.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211076
IP address blocks: 62.89.204.0/24 maxlen: 24
185.196.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3f:52:49:b9:9e:37:a2:e0:57:8a:22:96:6c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1be6ccf70d54dd4bfe91b6068935dcc5cbeae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:f5:97:cb:92:b1:c4:3f:a6:0a:f5:06:d5:
73:95:46:69:5f:0b:11:29:8d:30:c3:79:0d:31:23:
60:09:df:ef:0f:22:97:9c:ce:52:fe:6c:78:65:91:
f9:16:2c:13:aa:d9:2d:7d:96:87:49:c7:a0:58:0b:
3e:a6:a7:de:a6:80:fd:f7:14:04:19:05:3d:23:71:
18:cb:85:7f:d4:c1:30:e4:5e:58:b8:9e:ad:32:e9:
ae:a6:1c:16:88:9f:60:93:9e:fb:7e:e7:fb:8a:ca:
33:59:c8:45:c6:de:80:ad:60:44:e4:5a:79:ec:02:
26:fc:0c:38:ff:93:ae:cf:9a:ed:87:d1:d8:da:bb:
38:17:4d:c4:c6:0a:af:e2:21:70:26:6e:2d:3b:ee:
97:86:c9:9d:2c:f5:bc:78:b0:9a:81:f9:a5:c0:07:
32:e2:86:26:f3:d3:76:83:c9:fe:ab:92:50:29:c8:
16:d7:1a:d1:c3:06:4d:69:35:b9:05:9d:1d:c3:bb:
26:01:6c:e8:28:ba:59:4a:4d:bc:cf:bd:81:1a:5a:
bc:8d:53:4d:ea:4d:00:0c:cf:66:89:01:38:8d:fb:
94:04:a8:9b:35:6c:82:a9:8b:35:0e:93:27:30:64:
e2:f2:12:f1:ed:a0:48:9a:86:df:63:39:72:1a:cd:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:E6:CC:F7:0D:54:DD:4B:FE:91:B6:06:89:35:DC:C5:CB:EA:E6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jBvmzPcNVN1L_pG2Bok13MXL6uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.204.0/24
185.196.245.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cb:68:b8:a1:53:bb:4c:0f:0c:5d:2c:93:02:e8:7b:5a:05:
a5:98:1f:84:9d:c4:ed:a9:ed:be:b7:05:e3:c3:97:08:14:dc:
c6:90:2d:24:fa:e6:31:25:f3:b3:a9:48:83:fd:3e:9f:9e:20:
b9:72:94:d0:ff:79:14:b1:49:47:f8:0b:95:42:bd:bd:c3:3f:
67:54:29:a4:28:5e:97:7d:6a:95:33:92:30:6b:7d:c3:c0:cd:
1f:d2:6f:a0:10:a3:78:ae:1a:a4:b2:3a:c2:f1:74:74:e4:a1:
5e:b0:11:ef:f2:8a:12:cf:30:31:f4:1a:02:ce:f8:eb:52:f0:
fb:23:a3:21:f6:b8:75:ed:7e:50:0e:7b:b0:f6:07:71:4d:e6:
8a:e5:d5:d2:c5:47:e2:a0:a0:5c:9f:1f:12:38:88:6a:24:b4:
08:77:f6:79:75:b6:c7:67:9f:c5:40:33:e0:6a:14:f0:6b:23:
1f:6e:04:f4:1c:b5:20:d4:5b:6d:7f:e7:ed:22:46:f5:ed:34:
cc:3c:e8:4b:8b:b4:c9:dc:71:5c:21:e8:3b:66:64:ad:6b:eb:
33:fd:95:06:c4:c9:3a:56:ba:dc:21:f7:86:cb:55:e0:8c:95:
31:9a:a4:4f:4b:6d:f8:31:95:88:65:f8:db:82:a1:66:bc:59:
d6:a6:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:16 2025 by rpki-client