Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iXlJ104KuqxV5REEAJHbWARC02c.roa
File: iXlJ104KuqxV5REEAJHbWARC02c.roa (raw, json)
Hash identifier: rfE/ATgZ8g0z0CqiMjyHr9PZkrSgbAylH3f2j8r3KJQ=
Subject key identifier: 89:79:49:D7:4E:0A:BA:AC:55:E5:11:04:00:91:DB:58:04:42:D3:67
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244556E1E2666715C8AA5A91C2911645
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iXlJ104KuqxV5REEAJHbWARC02c.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39253
IP address blocks: 62.244.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:56:e1:e2:66:67:15:c8:aa:5a:91:c2:91:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897949d74e0abaac55e511040091db580442d367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:60:ec:48:43:20:9d:e0:51:60:7c:d8:b8:
34:36:ad:a9:c5:25:b2:79:41:29:82:c2:ea:21:bd:
0d:83:a1:55:c8:93:04:2b:04:8a:17:22:fa:7a:d1:
b6:c6:da:ec:33:11:20:13:ee:8e:02:11:08:02:64:
c6:d1:a2:be:c1:7b:b2:5c:50:17:3b:e8:24:8b:f0:
b4:6d:02:de:1e:d9:18:f1:dd:a5:3f:cb:7f:c7:74:
53:c4:86:5c:09:16:91:1a:37:7b:a5:b4:8e:71:87:
bd:14:29:bf:9c:38:f8:23:61:b4:2a:83:5f:66:b7:
5d:57:5d:b7:07:33:b4:5d:1d:a4:0e:ec:dd:97:6e:
6a:96:2c:d5:5e:39:2f:5c:97:51:40:33:c8:09:cf:
0c:d1:33:36:01:9b:5b:4c:72:c6:05:e6:60:38:90:
34:01:5e:6e:f9:7a:a0:5d:b6:f1:d1:3a:f5:f5:c9:
78:be:99:cd:53:bd:77:c1:3d:6b:6a:13:1e:54:3f:
7e:3b:9c:3d:53:42:5f:92:f2:49:d4:53:59:55:ea:
e7:04:43:76:37:31:7b:8c:2f:a8:d2:06:74:45:ff:
0f:23:b8:ea:31:86:80:d5:23:e0:8c:27:5c:c5:4f:
63:73:ef:12:ef:71:8a:bb:7d:77:1d:6a:8b:14:3f:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:49:D7:4E:0A:BA:AC:55:E5:11:04:00:91:DB:58:04:42:D3:67
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iXlJ104KuqxV5REEAJHbWARC02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6e:7f:6f:86:5f:16:fe:69:1b:58:14:c6:45:db:d7:68:6f:
53:76:08:84:2f:ae:c5:42:cb:08:e8:f6:06:8a:9e:1c:de:fa:
af:e7:90:47:a7:5c:cd:39:e2:8e:54:18:7f:cf:cc:a4:9d:e8:
41:26:d8:a6:92:d5:72:cf:9d:ef:c6:9a:2b:cc:eb:3d:4e:fe:
5d:d2:3a:0e:31:77:05:3d:7a:a9:ac:f5:d6:84:f2:9d:d2:48:
4f:9c:30:40:fe:b8:40:01:5b:39:ce:0d:a3:ec:11:b9:f6:40:
1b:45:e5:d5:d2:30:9a:60:dc:ff:79:e7:9e:8b:f6:46:b6:21:
91:0a:da:b6:a9:93:23:15:50:d1:f4:7e:c1:c4:4c:87:a8:d5:
0b:3c:b6:01:5d:b1:30:98:2a:2d:60:51:43:e5:a6:0f:d6:40:
b9:3c:70:59:e3:3b:2e:89:7f:84:c4:5b:22:d4:32:46:0d:27:
6b:ad:3d:c8:1e:c9:92:19:e8:5b:2e:fd:84:98:40:3c:ff:31:
ba:c5:df:af:7f:a2:cd:66:15:59:eb:b0:57:14:d3:e2:da:4b:
df:3c:e5:3d:c2:7c:c7:05:f1:a6:d2:d1:ca:17:82:93:db:9a:
80:b8:60:71:bd:26:53:6d:06:d8:55:b7:b1:56:0f:4e:c9:1f:
52:e5:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:27:02 2025 by rpki-client