Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Rn00nM3USYCNOR6GhQP-fK5_9cI.roa
File: Rn00nM3USYCNOR6GhQP-fK5_9cI.roa (raw, json)
Hash identifier: FI6sEmyL1rmI4mh6+IDBkKxKha/Rds0m7TXVAGXYlfg=
Subject key identifier: 46:7D:34:9C:CD:D4:49:80:8D:39:1E:86:85:03:FE:7C:AE:7F:F5:C2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0196A468BF7F0F5F5FDB950F4EB9FD08D908
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Rn00nM3USYCNOR6GhQP-fK5_9cI.roa
Signing time: Tue 06 May 2025 07:04:10 +0000
ROA not before: Tue 06 May 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.62.240.0/24 maxlen: 24
92.62.241.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:68:bf:7f:0f:5f:5f:db:95:0f:4e:b9:fd:08:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 6 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467d349ccdd449808d391e868503fe7cae7ff5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:f1:36:2b:05:fc:3d:04:a2:d2:48:29:38:
a2:fd:02:4d:f3:d5:8b:9b:cb:d3:ff:6e:9a:14:ec:
07:54:39:c4:cd:63:7b:24:1e:63:25:83:4b:69:90:
fa:63:ed:0c:47:11:0a:d0:e4:64:a0:b2:f2:86:8e:
5c:f8:78:f1:0b:97:8d:d2:80:b9:02:fe:7b:a9:02:
d9:d4:11:63:e2:da:ee:8b:16:6d:ba:03:5a:a9:01:
20:6b:b6:91:e5:00:bd:ca:b0:6a:f2:4c:af:3f:fc:
f7:10:d5:cf:b7:2e:3c:e2:c4:56:69:c0:90:e2:93:
07:db:f1:04:b7:48:22:46:6a:14:7f:b5:68:4e:7d:
f2:ae:22:de:55:db:ff:05:fa:91:3f:fe:86:7c:79:
7c:68:b0:99:97:ae:54:bc:05:38:4a:0a:7e:84:8d:
da:59:21:af:21:53:20:50:fc:bc:96:c5:cd:96:87:
b7:3c:7d:56:8b:ad:fc:12:74:e2:7e:e4:70:96:fc:
8e:d0:a9:7e:4a:d8:6c:c6:b9:67:bb:ca:6c:ec:cf:
48:23:f1:40:cc:1f:84:59:14:0f:05:37:05:86:9f:
f2:b5:08:f1:d7:3e:10:57:7b:3a:cd:32:9a:98:eb:
d1:78:7c:7a:21:e5:c3:e7:e7:66:dd:9a:e8:90:be:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7D:34:9C:CD:D4:49:80:8D:39:1E:86:85:03:FE:7C:AE:7F:F5:C2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Rn00nM3USYCNOR6GhQP-fK5_9cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/23
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7d:6c:9e:d9:fb:42:0e:e4:31:4f:af:a2:7c:4e:de:15:f0:
82:6c:14:e7:07:07:1f:77:1c:84:7e:ff:f0:ac:e2:8b:90:d7:
6a:a5:c3:74:dd:37:08:8d:f6:5e:08:e3:92:6a:19:f9:ca:69:
37:32:ed:6e:3f:4b:c0:23:fd:27:22:d1:1f:15:02:98:e3:0b:
0d:41:6c:bc:da:34:14:73:73:4d:cf:f4:f5:d3:c2:ac:89:37:
55:bf:98:e7:56:ae:2e:3d:2e:c8:21:f5:60:a3:6e:b4:e8:ec:
da:c1:d2:74:a4:3d:bb:e7:fa:2d:ef:d4:42:24:9b:3d:8e:e7:
cd:6d:4a:e0:f6:f8:5f:e1:00:27:4b:36:09:3c:59:47:6b:57:
30:fb:18:ee:86:ce:02:5b:7c:ac:f7:15:b6:1e:45:31:71:70:
82:fc:2b:8d:3d:fd:e3:70:98:57:d2:da:75:97:e0:d6:fc:dd:
8b:7d:da:f8:57:b3:2d:a4:ef:4d:87:a4:82:18:1d:3d:1f:27:
c3:36:2b:44:45:9d:8e:d3:b5:1c:f8:ff:97:fb:c4:f6:2e:6e:
a0:3a:5e:ab:c3:1a:6b:99:a1:1d:87:d5:68:01:27:50:4f:1c:
2e:23:b0:aa:a5:cd:96:b3:ff:13:e1:0d:6c:72:33:8c:b1:a6:
6b:b9:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:27:41 2025 by rpki-client