Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/r96qSxTq9VrHJe-onW3LkjF49Kw.roa
File: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (raw, json)
Hash identifier: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=
Subject key identifier: AF:DE:AA:4B:14:EA:F5:5A:C7:25:EF:A8:9D:6D:CB:92:31:78:F4:AC
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019420683590A13B1907D649BB579F95698C
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/r96qSxTq9VrHJe-onW3LkjF49Kw.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:35:90:a1:3b:19:07:d6:49:bb:57:9f:95:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afdeaa4b14eaf55ac725efa89d6dcb923178f4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:3b:cc:28:0d:3f:a8:e9:d9:0d:41:a0:c9:
1c:23:51:cb:70:7d:6e:89:e0:71:1f:b5:c5:cd:af:
06:d0:45:39:c5:4f:b5:19:94:cb:b2:89:a7:8a:99:
ad:fb:c2:6b:38:7a:2a:0d:54:36:5d:56:1d:ec:b8:
10:db:3a:ae:ce:e8:b9:b9:5a:d5:de:cd:3b:34:f2:
6f:80:3d:9a:33:3d:35:4c:06:10:25:13:57:c3:c7:
7a:c6:a3:91:7f:f0:f9:76:0b:de:cd:5b:93:58:1b:
49:20:fb:c7:ac:25:95:3b:85:21:5b:6a:21:37:b9:
d2:c7:95:01:f0:50:62:74:32:97:8c:34:61:ee:7d:
91:f2:c2:89:a1:1f:b9:cd:55:d3:a0:73:d3:cb:49:
16:fd:0d:60:9f:b7:4e:35:c3:61:46:1d:51:a3:9a:
f1:51:d0:24:2b:45:42:85:3f:78:a7:aa:c2:10:9d:
52:59:d5:f0:5a:b9:82:4a:7b:6b:13:aa:37:cc:5e:
8e:87:b1:c6:17:c6:6b:ef:18:b4:13:e1:d9:9d:dd:
b9:36:2d:2a:b3:a1:26:e6:b4:e2:b8:53:f7:93:e1:
4d:3d:7e:6c:15:c4:29:e5:33:0d:8e:87:c5:92:c9:
70:67:19:5b:3b:50:73:79:51:b4:39:f5:17:5e:c3:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:AA:4B:14:EA:F5:5A:C7:25:EF:A8:9D:6D:CB:92:31:78:F4:AC
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/r96qSxTq9VrHJe-onW3LkjF49Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c2:2a:a0:30:81:ee:ce:f4:34:62:85:21:2d:08:cf:91:d9:
63:0d:bd:99:5f:f3:b8:51:01:3d:f0:42:3b:58:c5:e4:80:9b:
c8:22:9f:08:d2:e9:a4:d9:7b:04:e8:49:21:cf:35:75:a1:04:
29:a6:64:b6:b2:a9:72:8a:dd:eb:c2:b3:0e:24:12:24:8f:41:
13:fc:e5:66:21:ae:3f:51:17:15:34:0c:78:d6:c8:4b:f8:75:
fe:61:d9:e0:27:8d:3c:ee:29:8a:87:69:c4:59:87:e2:fc:98:
18:04:8c:84:5e:85:89:b4:af:a3:8d:28:5f:57:d0:a6:42:13:
0c:79:b5:fb:e5:e3:a8:b2:1b:93:26:46:1c:7b:73:b2:4f:02:
96:c4:e7:df:86:d6:de:e4:ee:c3:49:0e:8e:f5:a3:f4:6d:f7:
cc:12:9e:7e:b9:b6:bc:9b:3b:4f:94:f6:1d:6b:dc:09:82:2b:
eb:1c:fe:6c:73:a0:30:ca:ee:f1:1f:84:b1:e9:4e:fd:4e:69:
19:c8:9b:08:0a:63:94:9a:3d:ad:5d:5b:95:18:c0:95:b0:68:
92:80:63:28:de:f2:e7:94:c4:ad:43:7c:af:28:ea:7e:1d:29:
6c:52:a9:96:92:59:55:d1:0a:63:73:5c:68:66:07:09:c9:4f:
42:8d:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:49 2025 by rpki-client