Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kF7D5dOU02LhBrPQO5JPO-bbuPs.roa
File: kF7D5dOU02LhBrPQO5JPO-bbuPs.roa (raw, json)
Hash identifier: eiunCdT7pUYvc+BAnzB9LUduC3rIC8v3xX5Jq9EgDg8=
Subject key identifier: 90:5E:C3:E5:D3:94:D3:62:E1:06:B3:D0:3B:92:4F:3B:E6:DB:B8:FB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D8514012F2A4068D0186BCBA902756
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kF7D5dOU02LhBrPQO5JPO-bbuPs.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 185.92.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:51:40:12:f2:a4:06:8d:01:86:bc:ba:90:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=905ec3e5d394d362e106b3d03b924f3be6dbb8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:f7:18:fd:2b:af:46:ec:7b:0e:fa:03:32:
1d:80:02:42:a4:73:7a:64:05:68:be:75:46:56:cd:
a9:92:fc:a7:4c:b5:48:1d:f4:69:a7:7c:c0:ef:93:
91:cd:fe:ae:57:6b:bc:4f:25:71:7c:e2:01:01:75:
f8:56:5d:73:6a:b4:d7:55:88:72:79:cf:3a:5b:4d:
6f:65:36:20:19:91:6d:ad:78:38:19:0b:ed:25:48:
d6:4e:c5:a0:d5:57:13:6c:a2:4c:09:d6:b5:00:c2:
88:91:02:9a:da:f1:15:26:d0:78:8b:78:0c:ee:f4:
fe:3e:2b:57:52:83:8a:f0:77:a9:0c:53:d6:c7:15:
b2:1f:ff:4c:04:e6:7d:29:31:19:fb:67:7d:3f:2e:
50:5d:07:32:f1:48:c9:1b:31:71:4a:8a:9a:50:66:
7c:1d:72:63:7c:3b:d1:81:66:5c:7a:d5:d3:c6:3d:
76:22:82:d8:fc:11:3a:d4:4b:33:e0:59:59:d9:00:
b9:60:f6:3d:77:04:e0:23:02:9f:6f:ce:0b:f6:5f:
2f:5d:a9:a7:00:8d:5e:18:00:ad:ec:eb:f5:b6:99:
61:55:2b:75:fa:83:8e:e6:28:c1:d4:cb:6e:9c:32:
3e:51:8b:3f:6a:7c:9d:d1:f5:67:35:13:b0:73:bc:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:C3:E5:D3:94:D3:62:E1:06:B3:D0:3B:92:4F:3B:E6:DB:B8:FB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kF7D5dOU02LhBrPQO5JPO-bbuPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:98:42:8f:c8:50:5b:1b:46:84:b8:9a:4d:20:5e:47:38:5d:
6e:1a:e5:71:2c:fe:53:8c:76:a5:2f:5f:ed:f2:a6:4f:8d:b5:
2f:76:1a:ac:c8:f8:3e:74:83:66:d7:c6:9d:10:5d:54:f4:53:
a5:f4:bf:94:f8:2f:95:93:f3:b2:de:d8:03:77:f4:1d:da:81:
d4:96:23:0d:88:c7:97:4b:b3:20:47:41:c0:50:1b:57:53:bf:
a1:15:78:a2:46:99:80:d1:ca:a0:0c:0e:9f:4c:36:48:f4:3d:
eb:dc:8b:b0:88:ab:c7:27:6a:45:c0:7a:d6:2f:8a:81:14:c7:
13:8a:28:e4:35:63:2f:2e:31:ca:ea:4d:39:96:39:db:9c:d0:
7a:b0:a6:05:58:4c:f5:a9:32:d7:c5:27:b3:e9:f1:24:f1:65:
0f:f8:38:17:de:f9:0c:8c:22:34:1a:34:e0:e2:cf:14:20:02:
d5:c2:32:6d:c8:4c:2a:3d:7b:00:78:3e:59:b1:fa:0a:a6:aa:
bc:89:12:0a:15:62:94:1f:a4:b1:cc:5e:fa:8d:a8:7c:1c:9b:
3c:c0:39:37:d2:70:b0:fe:6d:5a:7d:79:01:33:09:b3:df:71:
1b:e2:18:0e:ce:6d:09:50:08:3e:79:11:c5:a7:c0:cc:ba:54:
cd:74:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:57 2025 by rpki-client