Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/27z3zvbcVWqs_7POg5QhQc8T7vw.roa
File: 27z3zvbcVWqs_7POg5QhQc8T7vw.roa (raw, json)
Hash identifier: J37O++pYx5afq4v2icLHbQpLACT+N5czdMSBRJ0zZSc=
Subject key identifier: DB:BC:F7:CE:F6:DC:55:6A:AC:FF:B3:CE:83:94:21:41:CF:13:EE:FC
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01965E5A7D4749324DD8E4637485E4441518
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/27z3zvbcVWqs_7POg5QhQc8T7vw.roa
Signing time: Tue 22 Apr 2025 16:35:10 +0000
ROA not before: Tue 22 Apr 2025 16:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 92.60.72.0/23 maxlen: 23
92.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:5a:7d:47:49:32:4d:d8:e4:63:74:85:e4:44:15:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Apr 22 16:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbbcf7cef6dc556aacffb3ce83942141cf13eefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:8c:2a:ba:1a:fc:52:81:5e:09:23:22:f9:
74:a1:47:33:84:fc:25:cc:67:30:82:cc:eb:ea:c4:
26:b8:f5:a1:78:00:0c:46:6d:c7:c6:50:e8:19:3f:
5b:ab:57:53:a4:9d:d9:c1:8b:b9:ef:8c:5b:2b:9d:
6b:d4:56:06:7e:2e:29:45:92:42:38:75:48:98:83:
b2:cb:a8:78:b7:45:bf:fa:89:5f:8d:ce:e0:06:fa:
72:c2:ff:12:2e:a5:19:eb:f4:53:8c:a9:f6:4f:2b:
08:c1:e1:14:a1:31:32:c5:42:0b:da:81:b1:85:aa:
a5:66:2a:db:00:e3:76:b7:63:dc:49:e4:3c:01:10:
1e:4a:b2:cc:ba:e6:39:6f:69:89:ac:59:8d:91:a4:
75:a8:ba:1f:49:70:33:14:46:11:cb:75:18:8f:cb:
61:da:5d:42:c7:44:d4:7d:75:dd:3e:a8:f2:d4:d0:
04:74:f3:c7:be:9d:8d:ea:ea:75:97:ca:6d:53:59:
5d:fd:f3:bb:22:f9:e1:b6:e8:c0:d3:4f:af:67:40:
54:8d:2e:ee:c4:e4:31:2b:97:ea:0d:2b:82:9d:f4:
a2:33:19:de:ac:87:42:80:4c:2c:ef:fa:2a:19:42:
c8:97:97:4f:17:38:5c:7e:02:45:b3:4c:b7:28:4d:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:F7:CE:F6:DC:55:6A:AC:FF:B3:CE:83:94:21:41:CF:13:EE:FC
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/27z3zvbcVWqs_7POg5QhQc8T7vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.72.0-92.60.74.255
Signature Algorithm: sha256WithRSAEncryption
45:28:48:ba:bc:ba:0f:75:18:66:0e:04:fd:7a:38:67:b5:ac:
f5:d7:c4:ce:28:c6:b9:90:b6:68:5e:9e:f9:4f:13:c1:4e:60:
0f:25:75:26:56:75:52:15:3f:cb:94:d5:b0:87:cc:cf:f2:05:
56:e0:c9:64:39:b2:e7:44:1f:2f:53:9c:47:48:02:b5:b9:e4:
1f:21:98:53:a3:ec:a1:ab:0d:ff:f3:2e:30:38:2e:3d:fa:cb:
68:56:02:e9:08:0d:85:7a:d4:d3:25:1b:45:93:a8:e1:da:92:
34:66:e5:1c:58:af:aa:cd:1c:42:6b:b8:c9:6d:f8:97:b0:41:
f2:db:28:41:bf:fa:68:ef:92:08:e6:d1:77:d6:c4:7f:6a:00:
b5:a4:7f:d0:0f:f3:f4:c6:53:d5:3d:f2:a2:99:28:34:47:91:
67:db:ef:98:8c:f9:9f:99:19:f6:3b:e4:45:da:4a:fd:32:1b:
3b:ca:42:96:a0:c3:c5:e1:35:e2:34:c8:e2:37:0f:7e:7a:f0:
10:4d:31:05:04:4f:00:b0:07:78:8c:79:88:7f:74:28:b6:34:
87:60:9e:fc:6b:a5:2a:0e:0d:af:78:d9:25:08:82:51:c1:ba:
8a:df:07:29:c9:6e:81:e1:09:f9:f4:84:dc:e8:a6:9b:69:09:
2d:92:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:46 2025 by rpki-client