Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/cn93QuX2YdPXgnP-Ap-fx-piHNE.roa
File: cn93QuX2YdPXgnP-Ap-fx-piHNE.roa (raw, json)
Hash identifier: FT8+M7aW9XOt/heXG0ufWxmctR0sL58NsPtCDBLOLik=
Subject key identifier: 72:7F:77:42:E5:F6:61:D3:D7:82:73:FE:02:9F:9F:C7:EA:62:1C:D1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8778CC81B4B35485783F4CDFF1E1
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/cn93QuX2YdPXgnP-Ap-fx-piHNE.roa
Signing time: Thu 02 Jan 2025 09:50:34 +0000
ROA not before: Thu 02 Jan 2025 09:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204304
IP address blocks: 92.50.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:87:78:cc:81:b4:b3:54:85:78:3f:4c:df:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=727f7742e5f661d3d78273fe029f9fc7ea621cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:e9:73:90:ee:d8:71:a2:16:51:4d:ea:39:
8c:c6:ea:52:89:fa:b0:ae:0b:0a:06:31:d9:94:59:
2c:bc:ef:7e:70:a5:84:8e:76:d5:03:c7:df:d5:71:
90:38:95:0c:61:6b:22:45:cf:a0:7c:d5:8f:4a:5f:
57:4e:21:e6:44:79:f5:07:79:56:bc:96:43:f2:3d:
df:b5:42:7b:11:e0:c6:1f:28:ed:db:96:67:f2:f9:
40:4b:15:dc:6f:6d:e2:75:1a:b7:ff:84:2c:2d:4c:
0a:83:14:24:a6:5f:ac:ff:57:f3:16:69:b1:ee:41:
81:c3:24:96:a7:e7:7c:13:40:a5:0d:3e:fe:63:49:
d5:1c:12:8c:8a:3b:46:cb:32:70:36:b5:80:6d:c2:
71:4e:7d:43:cd:d3:ec:70:06:22:47:8d:bb:47:cd:
87:89:f9:1d:53:d7:2e:66:ab:a6:2b:f1:2b:37:b4:
a8:67:d7:79:6a:11:15:9c:ea:20:71:6c:bb:5b:2c:
2c:8d:31:2c:37:26:a2:c7:db:5d:27:b0:9a:01:88:
55:86:af:e1:51:da:ba:cc:ad:dd:5d:b5:41:7c:61:
1d:a8:7d:a8:51:1e:68:40:11:f6:08:90:34:16:9a:
bc:87:da:4f:4d:74:0a:df:98:d5:cc:6b:03:b7:7d:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:77:42:E5:F6:61:D3:D7:82:73:FE:02:9F:9F:C7:EA:62:1C:D1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/cn93QuX2YdPXgnP-Ap-fx-piHNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bc:c7:83:f3:7d:55:f1:58:ba:a4:3a:7e:4e:1a:9c:d7:49:
79:58:8c:c7:14:b8:8e:4d:ab:d8:39:89:ad:df:cf:0d:a7:5e:
1e:13:d5:5c:cf:a3:49:2e:65:20:35:d3:00:49:47:e6:47:a5:
2f:7a:3f:54:33:45:67:58:e1:d2:f8:66:7f:fc:ca:3c:9c:06:
07:7d:8e:1d:f0:47:3d:fd:a9:0d:68:68:ab:ac:42:2e:11:29:
c0:1a:65:31:5e:76:11:a8:c8:33:06:16:5f:be:5a:4a:9f:01:
af:2d:a5:08:34:92:08:08:df:38:4a:47:e4:39:63:d1:3f:68:
5c:ed:f0:27:34:85:a7:3a:cb:a8:6b:e4:82:1a:63:53:25:c2:
65:05:77:8d:67:28:c0:e1:4d:4a:63:ca:36:57:6d:44:b8:29:
8c:79:ac:6b:fc:8a:4b:02:de:2c:d6:01:0d:ef:a8:06:be:6c:
ea:86:f6:c9:03:c7:8d:d4:66:ae:1c:9c:dd:c2:a2:6a:ad:18:
1b:8a:39:99:50:85:61:89:75:a4:f0:db:5d:ca:0a:89:0f:88:
9b:d2:d2:15:19:6d:b4:ee:36:15:ee:c3:98:ec:5d:56:96:1a:
c7:2f:0c:70:5d:3a:ed:8c:97:25:26:b3:0d:a0:ad:b7:36:5f:
20:ed:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:33 2025 by rpki-client