Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sNtSLxx_wXcdTFlGplQGJy4kyH0.roa
File: sNtSLxx_wXcdTFlGplQGJy4kyH0.roa (raw, json)
Hash identifier: 52jEH1ime2fnwmTkEV8FLmXbgGXVCtgfgIroeNbLW3I=
Subject key identifier: B0:DB:52:2F:1C:7F:C1:77:1D:4C:59:46:A6:54:06:27:2E:24:C8:7D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198215AF519A152BD83C6C1746E8E13E97D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sNtSLxx_wXcdTFlGplQGJy4kyH0.roa
Signing time: Sat 19 Jul 2025 06:24:25 +0000
ROA not before: Sat 19 Jul 2025 06:24:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:21:5a:f5:19:a1:52:bd:83:c6:c1:74:6e:8e:13:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 19 06:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0db522f1c7fc1771d4c5946a65406272e24c87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:71:74:5a:25:2a:de:91:b9:50:01:35:93:
88:a9:05:34:a5:68:c3:39:c1:1b:74:ec:7b:04:f7:
5b:2f:44:fd:57:64:63:2f:41:62:c4:3c:8f:3a:ef:
9f:1e:2a:00:b9:9b:a4:13:a0:eb:7d:46:db:e3:73:
39:65:b9:87:dc:f3:05:13:b1:ce:a1:a1:47:73:84:
68:f6:c8:7c:6e:4f:2e:cc:bb:35:b0:b8:53:63:b1:
2f:0f:4d:3b:a4:9f:c1:0f:2e:91:cb:1b:33:b6:2c:
c7:e4:26:20:12:ec:0a:fe:cf:6a:78:4a:21:19:0a:
a1:9d:04:07:17:ad:97:2b:59:bd:78:5f:82:c6:ed:
ae:89:55:cc:86:db:d1:c1:3b:6b:03:e0:53:b5:bb:
96:a3:5a:01:eb:a0:65:13:04:24:fa:4a:85:85:48:
33:13:6d:69:d1:de:f2:2e:71:45:ce:f3:21:e7:b9:
fb:08:69:7f:fc:c8:60:80:7c:61:c4:fa:64:0b:a5:
62:e4:6c:7f:64:9c:1a:ff:61:8d:f0:82:d9:5c:f3:
d0:d5:97:54:21:35:8d:b7:8c:07:e6:69:17:80:26:
11:85:e0:f0:89:a9:dc:8f:b9:1d:20:bd:6a:d7:2e:
9c:08:27:e9:da:4f:37:a8:d4:0b:15:c3:4f:ec:b0:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DB:52:2F:1C:7F:C1:77:1D:4C:59:46:A6:54:06:27:2E:24:C8:7D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sNtSLxx_wXcdTFlGplQGJy4kyH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
Signature Algorithm: sha256WithRSAEncryption
04:cf:d1:e1:d5:6d:f5:24:7a:87:df:7e:fd:11:57:61:df:d8:
33:cf:08:64:90:4d:2d:63:09:4a:27:76:2c:aa:55:54:a5:96:
1c:76:58:2a:e3:83:d0:b8:ba:0f:14:66:5b:ab:b0:04:1b:ed:
c5:6a:ce:4f:d1:eb:f1:fa:2a:bd:c0:2a:9f:7b:61:7a:dc:1a:
ce:43:37:c9:e4:14:a3:33:33:11:dd:1f:01:ec:0f:b8:02:ae:
68:5f:9c:58:1c:41:fd:df:c8:44:68:7a:d6:bf:31:64:51:c5:
19:0d:53:fb:a4:e0:64:d5:1a:e1:ed:82:c7:79:2a:13:57:c6:
b5:bc:74:98:f4:67:2a:9a:4e:5c:2a:9e:c1:a6:7b:09:e2:58:
ac:8c:3e:d3:10:32:ca:c6:00:94:91:ca:1c:c7:41:be:c2:32:
e8:04:06:a1:29:41:17:cf:3f:33:1f:6d:72:93:e4:20:a9:6f:
56:92:33:6c:b7:1c:43:15:bb:04:e2:71:d3:b9:64:39:bf:a8:
62:00:65:6e:09:0b:7e:c5:0d:ca:42:a6:9e:ab:1f:bc:b7:8e:
29:a4:ae:5e:b3:9d:c8:c1:87:7b:7f:ec:d9:27:31:45:7c:ba:
82:3b:ad:30:07:b7:3f:77:48:3f:dc:c1:81:bc:aa:d0:06:d4:
5b:a0:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:25 2025 by rpki-client