Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DP3dCaMLsH29a1sg8q_ioKW0oYA.roa
File: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (raw, json)
Hash identifier: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=
Subject key identifier: 0C:FD:DD:09:A3:0B:B0:7D:BD:6B:5B:20:F2:AF:E2:A0:A5:B4:A1:80
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01942521528FE1E32D2C034E0BB0A137D8CD
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DP3dCaMLsH29a1sg8q_ioKW0oYA.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216050
IP address blocks: 92.61.105.0/24 maxlen: 24
92.61.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:52:8f:e1:e3:2d:2c:03:4e:0b:b0:a1:37:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cfddd09a30bb07dbd6b5b20f2afe2a0a5b4a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:b3:f8:e5:f9:a1:db:87:13:f3:7a:98:94:
d2:d8:8d:5b:44:42:60:db:50:e1:7a:53:b3:2d:f4:
b1:90:06:a4:8c:c7:67:da:8b:89:43:3e:c2:92:73:
77:5b:92:9b:c8:96:bf:75:7f:55:33:94:ab:ee:2b:
5d:ad:ea:7b:07:95:05:42:6b:1f:da:db:26:78:23:
2c:2d:2e:2c:48:fb:2f:67:82:84:92:c3:6c:3c:f8:
42:b4:28:60:ac:97:5c:b0:7b:9f:d8:d1:42:dd:a9:
a9:7d:d8:f6:e1:bb:56:cd:c8:fa:a5:e5:dd:c1:09:
c3:bf:e7:68:4a:90:4f:f6:67:c4:e6:f1:c2:c4:3b:
f6:2b:1b:44:4c:3f:79:ce:1e:08:b8:49:d4:12:b5:
a7:68:73:8f:36:ae:6f:45:5a:20:18:12:6d:28:f5:
4d:5a:f4:ca:39:d9:21:bb:ef:07:5f:0f:d4:74:b0:
39:10:be:14:68:bf:15:40:bb:9d:70:e5:13:31:76:
d6:d2:29:6c:50:9e:20:69:df:04:a0:e1:e7:9a:d6:
1f:39:16:57:49:db:b1:0e:8d:fe:8c:57:23:f7:6b:
33:5a:70:63:82:6e:77:f7:cd:99:09:41:0a:79:34:
07:58:68:7f:41:c2:77:23:78:3d:e5:e1:c6:10:3f:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:DD:09:A3:0B:B0:7D:BD:6B:5B:20:F2:AF:E2:A0:A5:B4:A1:80
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DP3dCaMLsH29a1sg8q_ioKW0oYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.105.0/24
92.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5d:19:44:b3:d6:5b:31:81:db:0f:10:b3:4b:b1:7b:d2:4b:
9f:3f:6d:91:c9:61:dd:ae:cb:bb:ec:1c:62:85:5e:e8:b4:d7:
22:a2:e9:5b:a5:83:ab:2d:e8:8b:1f:ea:e5:cf:29:d6:64:f5:
12:ca:13:59:96:37:05:38:97:c1:89:33:bd:4b:4c:2e:6f:35:
5e:ec:df:e7:61:dc:7d:01:cb:7a:17:14:35:e2:ac:d0:96:a0:
d9:a1:b9:ff:62:7b:e6:0c:96:bb:2a:97:4d:d0:fc:bb:22:50:
2c:8a:28:b6:00:4d:3d:d0:e8:e0:77:f8:65:19:9e:9a:fc:5a:
36:25:63:55:fd:ab:b2:c4:ee:cc:86:bb:3a:c1:e2:5c:d8:d7:
f0:92:4a:a4:5d:61:75:fb:9b:16:76:be:c2:d4:2a:91:ec:02:
de:e2:19:51:bd:98:26:d2:33:9f:44:4c:ec:3d:cf:7d:3d:b6:
65:39:75:c6:a6:9c:87:80:e7:89:58:a6:55:26:a1:b5:a2:ea:
49:c4:49:50:2c:9f:6f:48:3f:f6:08:1e:a1:09:69:0e:65:23:
b8:b6:66:fa:b3:52:54:63:db:5a:6c:7b:b4:2f:fe:2b:9c:73:
1a:36:11:71:28:3d:3b:8c:ed:2d:ed:33:db:94:c7:4a:9e:4e:
51:cc:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:19 2025 by rpki-client