Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/3quFwzbtQXLlMwPInkFxljyXrpU.roa
File: 3quFwzbtQXLlMwPInkFxljyXrpU.roa (raw, json)
Hash identifier: aHmEm1YrxyrbyeHbPRYWUXnitX3r2T2VQ0K9cGALSkw=
Subject key identifier: DE:AB:85:C3:36:ED:41:72:E5:33:03:C8:9E:41:71:96:3C:97:AE:95
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 0194423A85258B45F80637B2E66430FB1F38
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/3quFwzbtQXLlMwPInkFxljyXrpU.roa
Signing time: Tue 07 Jan 2025 19:25:18 +0000
ROA not before: Tue 07 Jan 2025 19:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 67.63.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:3a:85:25:8b:45:f8:06:37:b2:e6:64:30:fb:1f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Jan 7 19:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deab85c336ed4172e53303c89e4171963c97ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:a5:6c:c6:6d:c0:8a:92:99:af:75:d3:70:
f5:3e:28:0b:76:6b:c8:6f:da:56:f3:ec:8f:75:d1:
c7:25:5c:76:c8:c4:0b:64:0b:14:a2:fe:48:45:22:
f5:08:25:61:e8:44:ab:52:d6:8b:03:9d:cb:d8:b8:
59:a3:ea:af:3d:3a:21:9c:64:a5:73:1f:d0:5a:33:
3e:50:c7:43:4a:24:6c:c4:7e:cb:32:30:d8:7d:4d:
ff:5b:91:5a:08:cb:bd:64:0e:b1:ea:56:4b:28:d8:
42:71:ef:b8:00:4d:27:f9:47:33:a3:ba:54:b5:dd:
6a:33:1b:b9:3e:d8:59:f8:bd:38:60:4f:bb:f4:d4:
78:d6:3d:46:87:5b:c9:ff:5d:33:16:d3:ef:92:12:
28:9c:62:5c:b1:19:43:0f:df:ad:f0:76:2e:2e:91:
d6:46:80:e6:40:15:45:ec:b9:9a:63:af:b7:e2:85:
90:b8:53:24:00:1e:5e:f3:66:99:2d:d5:37:ff:50:
fd:43:06:2b:ec:d1:e8:ff:4d:56:ac:26:7d:d7:eb:
7a:19:33:fa:e6:8c:cb:e7:87:4f:4d:f2:f7:5e:8f:
c7:34:49:57:14:a6:bd:a9:3e:da:87:f8:f3:9d:1f:
2a:c9:bc:82:e6:f7:1f:b2:d8:cd:14:ae:17:31:9b:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AB:85:C3:36:ED:41:72:E5:33:03:C8:9E:41:71:96:3C:97:AE:95
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/3quFwzbtQXLlMwPInkFxljyXrpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.62.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5e:58:6c:19:41:6d:da:5d:1d:7e:59:89:d5:2a:74:b9:20:
24:71:1c:8f:0b:e7:6b:b9:21:9a:6c:f9:d6:b3:b1:c2:40:81:
cb:41:15:bb:ab:79:83:da:0e:87:5b:27:35:b0:06:17:c7:c3:
91:46:03:91:cd:91:63:a5:f9:9f:2b:3b:b2:39:d5:f0:25:7f:
fb:82:3f:2b:72:74:22:9f:bc:3f:44:67:fd:d1:b3:17:3f:55:
7c:75:3b:8b:33:42:e9:a2:dd:c9:2e:61:90:00:7e:8e:f4:58:
a8:47:31:5c:46:09:b7:71:be:3f:4b:32:5d:27:6a:1d:c4:ff:
b6:d3:09:18:ba:c4:67:7c:d0:76:e8:bc:b3:46:5c:e1:bb:17:
6c:d2:ec:9f:b4:68:df:af:fd:af:c5:f7:57:a5:e0:38:05:ea:
dd:cf:d9:18:41:1f:64:4b:bb:ae:d1:55:85:dc:56:45:4e:a7:
8a:3f:b4:e7:7b:c6:cb:01:05:a4:c7:7f:48:d6:60:1e:30:ae:
32:08:84:71:45:81:1f:f1:aa:d9:e1:54:aa:71:18:10:e2:e6:
3d:68:fa:20:47:3d:25:84:2c:c5:1d:c9:17:6e:0b:8f:f6:2c:
af:3f:39:f9:a8:1d:0b:d0:22:ef:f6:60:17:ac:7e:bc:4b:e1:
5f:d5:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:40:57 2025 by rpki-client