Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/gS2YYEML9M4UNWK3VVDTZTM54bA.roa
File: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (raw, json)
Hash identifier: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=
Subject key identifier: 81:2D:98:60:43:0B:F4:CE:14:35:62:B7:55:50:D3:65:33:39:E1:B0
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 019427B618D36764D9426573D1C09C7D6366
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/gS2YYEML9M4UNWK3VVDTZTM54bA.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214554
IP address blocks: 62.169.144.0/22 maxlen: 22
2a01:50a1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:18:d3:67:64:d9:42:65:73:d1:c0:9c:7d:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812d9860430bf4ce143562b75550d3653339e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:6c:1f:bb:d5:53:08:82:2f:cf:b6:d2:56:
35:9e:41:61:04:57:91:40:af:28:de:d8:f1:8a:9d:
e2:0d:95:5f:01:28:05:6e:c1:9e:7a:7b:06:de:96:
61:ad:33:d4:1e:b3:0a:62:27:ed:7d:e9:71:e3:2a:
eb:9e:07:71:5c:1a:ab:b8:07:4e:4e:bf:08:b5:5e:
ff:60:d9:f1:10:b5:ca:3a:3c:11:46:c3:14:a8:3f:
e4:1c:b1:2d:62:ea:d2:db:f1:76:1b:3a:fb:04:bb:
3f:93:96:3b:55:be:52:62:57:dc:5b:b0:98:96:40:
81:91:3f:9e:b3:e2:24:06:1b:1e:15:0b:74:a0:32:
41:7b:ab:ae:39:35:f6:4f:03:f6:d8:c7:01:96:f3:
b5:2c:8f:84:78:90:91:f2:8d:c4:0a:1e:a7:92:c8:
52:3d:35:16:a4:cc:8c:1f:4e:49:60:8b:ed:d0:ca:
d2:34:86:e9:15:7f:bc:d5:2f:dc:27:22:55:9b:38:
c2:1c:35:0d:f0:e9:db:3f:3e:fe:4e:d3:50:57:27:
7c:72:69:6e:70:f6:b1:31:a1:53:ba:bd:68:5c:4c:
82:4a:79:51:b3:cb:16:10:bd:16:b6:f2:a3:ca:4f:
7c:e7:b1:b4:fe:d0:df:32:1e:0a:fd:35:1d:c4:0a:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:98:60:43:0B:F4:CE:14:35:62:B7:55:50:D3:65:33:39:E1:B0
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/gS2YYEML9M4UNWK3VVDTZTM54bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.144.0/22
IPv6:
2a01:50a1::/32
Signature Algorithm: sha256WithRSAEncryption
66:d2:1e:22:65:30:e7:99:ab:70:2b:31:5a:f2:e0:80:98:d3:
57:07:9a:40:04:5e:9c:b5:9d:35:f2:47:31:12:7c:84:c0:09:
3d:ed:b7:19:56:1e:4a:19:b0:d9:d1:17:6e:6e:6d:3f:03:af:
49:06:9f:61:68:f5:76:24:3e:80:94:22:ab:cd:3b:6e:45:a1:
54:2d:06:f5:d9:97:03:66:61:06:c4:d5:2b:f4:92:ea:99:a2:
ee:13:47:45:39:25:a0:79:1a:f3:69:d6:30:72:5f:36:e6:1a:
1b:d4:12:54:ef:e9:0f:06:b1:61:52:ab:45:4d:c3:d3:dd:4a:
1b:89:98:4d:d2:ab:9c:23:22:b4:a8:ba:57:a5:2c:86:24:56:
18:7d:cf:85:48:e7:77:ee:9d:7f:e4:73:be:d2:d3:59:3c:42:
2a:5f:d4:4b:85:b1:91:5e:d1:b3:ba:1b:23:47:c1:4d:a8:e9:
2f:ea:da:32:40:ad:4a:fc:48:dc:f1:aa:e2:64:1a:d3:bb:78:
58:04:0a:41:78:a5:aa:44:99:76:d8:18:bb:f7:24:ca:56:2e:
6a:94:d6:41:3e:8e:7b:ba:42:da:cb:f1:f0:c2:28:db:02:be:
21:f5:f8:b5:e3:7b:8d:bd:ad:17:84:84:bb:66:1a:42:89:9c:
bf:ab:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:19 2025 by rpki-client