Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa
File: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (raw, json)
Hash identifier: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=
Subject key identifier: 38:36:18:F4:09:73:21:9C:74:89:EB:89:EF:C8:9B:FE:DE:CF:CC:3B
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01965C611CED223440EB1A9F45371FE67F1F
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa
Signing time: Tue 22 Apr 2025 07:23:10 +0000
ROA not before: Tue 22 Apr 2025 07:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 92.242.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:61:1c:ed:22:34:40:eb:1a:9f:45:37:1f:e6:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Apr 22 07:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=383618f40973219c7489eb89efc89bfedecfcc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:4d:35:09:7d:55:cb:4b:de:97:18:8c:ae:
b5:a9:84:4d:f6:60:42:37:0d:af:c4:d7:6c:c4:6c:
77:d6:b3:87:ca:64:b2:a6:98:7a:9d:e0:51:a2:8e:
f2:59:ac:48:2f:db:bb:e3:31:72:6b:26:de:21:25:
8d:8d:2e:d4:83:52:b5:33:92:78:43:eb:25:da:e2:
71:48:52:5b:43:7f:3d:e0:6a:7b:9b:88:86:81:3b:
c1:91:22:c3:68:20:9c:51:0c:5f:9a:6d:68:62:2d:
cc:fa:d8:58:08:73:81:e4:5c:56:19:37:09:1d:93:
62:dc:74:4d:fb:4d:65:26:14:7a:75:17:60:70:30:
fd:c8:ef:29:49:df:a4:54:38:9e:aa:e7:49:ef:5b:
82:0a:62:c1:90:59:fc:d5:5e:94:5f:10:eb:34:9a:
63:ae:b5:89:18:4e:65:60:f8:95:90:23:92:d7:e9:
9b:08:db:b3:92:48:5f:3d:49:93:1f:2c:75:65:fe:
9c:23:a6:34:bc:cc:82:18:fe:31:9f:dc:f5:53:ac:
f3:32:c1:c4:7b:36:a1:41:20:15:aa:0e:ce:ef:a4:
77:0e:92:97:4c:c1:74:82:f8:15:06:b6:ea:b3:81:
0d:3d:9e:d6:c6:07:b2:16:38:fd:64:6b:99:9e:e9:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:18:F4:09:73:21:9C:74:89:EB:89:EF:C8:9B:FE:DE:CF:CC:3B
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.164.0/24
Signature Algorithm: sha256WithRSAEncryption
78:dd:3d:c0:c2:51:19:0e:06:42:ea:2b:bc:14:18:78:00:02:
fa:42:ee:64:37:ba:f2:6d:dc:96:e5:fb:94:09:c0:55:f3:bc:
3e:50:51:64:d6:d6:a9:f8:b9:0c:27:75:60:4b:5e:c8:fa:52:
c5:9e:6c:a5:43:25:f7:9a:86:e5:50:8f:82:82:d0:cc:56:1b:
f4:80:8e:39:2d:5a:a9:29:5d:51:f4:84:d6:4a:0a:23:72:cf:
1f:16:af:c3:0c:42:1c:35:6c:f3:1c:f8:0c:6f:56:80:56:db:
06:19:e8:e0:fc:e8:09:96:b0:10:81:e4:0b:f9:48:c5:84:a9:
81:1d:1f:5c:75:7b:e7:cf:8e:33:50:6a:6f:d8:4f:85:82:c3:
7a:a5:4b:12:9f:07:f9:dd:22:d2:c0:7e:b8:ca:45:cd:f7:a5:
cb:f0:39:5f:49:b2:f8:77:28:ae:99:53:fe:39:09:3e:88:80:
91:d7:0c:82:f4:31:da:d7:d3:e9:54:ca:01:18:ae:62:0d:28:
69:51:d0:2a:3b:83:23:e6:54:61:88:a4:a3:34:d5:44:f3:48:
72:1e:63:9b:0d:e9:76:96:e7:aa:f3:1b:06:b6:29:b7:d9:72:
e5:d7:99:30:8f:4e:2a:bd:dc:c5:7c:d2:12:34:79:c5:79:ae:
8a:74:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:22:19 2025 by rpki-client