Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa
File: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (raw, json)
Hash identifier: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=
Subject key identifier: 63:5A:A2:3A:C8:89:97:B7:2D:15:0D:52:E6:8B:D0:D1:D9:3C:84:82
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 0194244510ECA756465F31FCBEF746878C80
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39484
IP address blocks: 89.106.32.0/19 maxlen: 19
185.239.192.0/22 maxlen: 22
2a02:13c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:10:ec:a7:56:46:5f:31:fc:be:f7:46:87:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=635aa23ac88997b72d150d52e68bd0d1d93c8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:b8:9c:96:56:f0:2e:f0:e8:4d:d9:55:cd:
b4:55:8e:d7:ae:ce:8f:e3:ac:df:e1:fc:7e:bd:ea:
ab:8e:32:4d:df:f6:03:61:18:f9:41:67:2d:80:95:
19:66:de:1f:f6:8c:b1:66:03:b6:2f:03:70:36:5f:
cf:a3:00:4a:ab:e5:b9:30:54:58:6e:f5:f2:e1:14:
4a:c8:da:77:02:6e:7b:7a:e5:32:71:9d:48:43:48:
d7:fa:e7:4b:a0:a8:df:f2:a7:5e:04:6a:89:b4:27:
e5:c9:df:e7:ef:7f:94:51:98:63:39:62:f0:be:04:
15:e5:2e:ba:06:8f:27:fe:7f:be:40:a9:7b:4c:0d:
0d:96:fe:b4:74:ae:49:d8:80:e4:49:2d:c5:47:71:
22:60:cc:aa:32:01:7a:a6:b5:e0:7d:5a:71:1d:43:
19:b6:a3:d4:0f:96:f2:b6:d5:6b:94:2d:5f:c0:fc:
26:d4:88:47:2b:40:70:d8:d7:22:c0:ea:e7:d6:61:
4a:e1:06:92:1b:2a:b0:40:fa:eb:08:cf:d3:49:11:
fc:97:2e:c1:b4:f0:d3:4d:25:f7:21:de:e5:b3:85:
15:61:c3:9a:7d:4d:65:78:d8:d9:d9:a5:ae:e5:de:
9f:8b:43:e6:21:f8:a0:6f:c2:84:a3:fe:eb:22:24:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5A:A2:3A:C8:89:97:B7:2D:15:0D:52:E6:8B:D0:D1:D9:3C:84:82
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.32.0/19
185.239.192.0/22
IPv6:
2a02:13c8::/32
Signature Algorithm: sha256WithRSAEncryption
07:40:8d:fb:47:37:11:d7:e3:c3:76:fc:8d:0c:63:cf:d3:80:
b5:b0:12:43:99:f8:f2:4f:24:04:cb:12:21:c0:e6:89:40:a9:
24:93:f2:d0:0e:65:69:a4:4f:69:8f:da:39:7f:99:4a:01:d9:
bd:04:df:16:cd:77:e7:00:1a:94:33:1d:36:37:a2:99:62:98:
62:55:73:6b:a1:b9:ac:2d:1d:8b:8e:5a:10:57:42:18:0b:cd:
26:14:e3:29:b2:46:81:fa:cb:ba:e3:df:5c:6e:ca:7a:4a:06:
d0:a3:c4:82:6d:d1:9c:46:03:91:ee:35:5e:d4:b0:ac:96:e6:
73:a8:4d:b9:cb:90:ba:5d:9c:4f:ad:c1:cf:55:de:82:54:54:
6e:f6:95:36:93:34:cf:77:1c:a9:48:d3:66:1e:05:f5:1e:b4:
21:79:ff:a3:45:50:93:48:da:c5:2e:e8:af:52:92:46:8a:05:
38:92:af:8a:1a:b0:e9:d9:ea:31:41:ef:b4:b4:c5:65:02:13:
5a:3c:1c:75:b9:fb:6b:93:51:17:4d:8f:01:06:a8:89:16:4a:
f7:e4:f5:66:05:29:3d:68:1d:ac:5e:9e:9b:05:5f:65:00:32:
52:2e:a9:22:08:00:85:dc:b9:b0:21:19:bc:f9:db:75:9e:27:
61:03:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:49 2025 by rpki-client