Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i7v5xES7KqnGKp2XIwwDykdC--8.roa
File: i7v5xES7KqnGKp2XIwwDykdC--8.roa (raw, json)
Hash identifier: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=
Subject key identifier: 8B:BB:F9:C4:44:BB:2A:A9:C6:2A:9D:97:23:0C:03:CA:47:42:FB:EF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9C00DA34C34A07D5C52946513B69
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i7v5xES7KqnGKp2XIwwDykdC--8.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197248
IP address blocks: 92.52.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9c:00:da:34:c3:4a:07:d5:c5:29:46:51:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbbf9c444bb2aa9c62a9d97230c03ca4742fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:0f:f5:e4:a5:cc:cf:92:ec:35:53:89:a5:
3e:b8:86:86:8c:45:a8:ab:54:fa:6d:cc:60:bc:ce:
14:46:b5:2b:fa:7c:2d:25:03:93:8c:a2:cc:4b:f5:
cc:95:5a:72:ab:18:bf:a7:58:00:77:22:09:6a:0b:
ec:bb:e2:fc:e8:b9:39:28:89:a5:e6:24:f8:bb:6e:
03:f7:52:d1:85:c0:3c:f9:01:8f:36:48:a9:23:a8:
65:ab:ae:81:e4:3e:66:71:15:17:24:12:ca:eb:fc:
c1:5d:45:36:d2:99:d3:f8:31:1d:c7:d0:73:51:9d:
fe:68:90:4c:26:34:11:f4:62:73:26:ef:25:20:0c:
6c:12:40:b1:0f:d9:69:12:34:0c:e5:b5:75:23:f7:
67:ba:7c:d0:c1:71:22:5a:ae:db:7d:be:f3:44:fc:
24:ba:9a:4c:16:26:bb:1a:e1:b4:23:31:8f:58:ec:
29:dc:7a:12:5a:5d:d4:21:c3:f5:7c:48:70:a2:d0:
f5:2d:fc:bb:d2:61:08:fe:27:83:23:8a:96:3b:8b:
7a:32:b8:47:97:d6:47:ac:35:d1:9f:03:5e:65:e6:
0c:02:b4:d8:4d:14:1a:8f:3a:ae:be:bd:e7:55:dd:
d7:ea:73:16:ca:70:88:d5:7f:90:c4:74:6f:a6:09:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:F9:C4:44:BB:2A:A9:C6:2A:9D:97:23:0C:03:CA:47:42:FB:EF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i7v5xES7KqnGKp2XIwwDykdC--8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.223.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:87:1c:a5:09:03:b4:7a:28:df:34:8b:68:ff:8c:ab:ad:ed:
b5:89:64:fc:67:fa:cc:d2:97:df:69:ed:84:ac:74:69:11:73:
15:e5:49:52:7c:7c:ac:cf:65:af:d8:db:ce:b8:e0:e5:53:89:
35:7c:a3:24:9e:20:27:ce:20:20:f6:7b:df:06:8f:c0:b3:81:
2c:e9:28:f4:6f:62:92:5c:2f:72:0b:45:20:db:e4:e9:ef:f5:
af:4e:d3:47:4a:39:59:c0:8f:8c:6b:af:52:dd:95:48:20:d8:
96:42:fa:4e:33:7a:56:4a:32:47:a2:ca:d3:aa:18:10:4c:ae:
54:72:9f:74:40:32:95:23:9a:a0:ee:6c:ee:e1:e8:35:6a:ef:
5c:e9:9f:8c:81:a4:4c:53:ed:b7:88:af:33:1b:e6:50:3d:70:
46:21:de:2c:64:08:5d:07:c7:26:6c:1e:2d:c7:16:1c:4e:7e:
be:99:3f:d0:4e:89:99:b3:48:72:dd:09:57:17:40:66:84:e0:
68:f3:2b:2c:46:ab:b3:57:9b:e3:c2:50:3b:2c:35:3c:01:0f:
08:1b:4a:cf:8e:b7:ce:5a:15:03:08:58:19:16:34:aa:23:57:
da:67:16:49:8a:ea:21:d6:a9:ee:25:cc:9e:93:d9:e5:ef:05:
41:5b:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:13 2025 by rpki-client