Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/49IZyT9KbkyUi4rXowB8HvmQW0Q.roa
File: 49IZyT9KbkyUi4rXowB8HvmQW0Q.roa (raw, json)
Hash identifier: fqg24mzCuzwMgOXVpaQ7qB/PLgiAxyTVSTsmt//mI5k=
Subject key identifier: E3:D2:19:C9:3F:4A:6E:4C:94:8B:8A:D7:A3:00:7C:1E:F9:90:5B:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428251843C6FD3FAEFD8AC1CF21E78693
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/49IZyT9KbkyUi4rXowB8HvmQW0Q.roa
Signing time: Thu 02 Jan 2025 17:51:47 +0000
ROA not before: Thu 02 Jan 2025 17:51:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216366
IP address blocks: 62.76.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:18:43:c6:fd:3f:ae:fd:8a:c1:cf:21:e7:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d219c93f4a6e4c948b8ad7a3007c1ef9905b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:51:ea:62:d7:a5:96:17:3e:36:26:34:98:
21:8f:fe:d1:e6:13:14:54:89:c7:e3:1a:cd:ab:4c:
bf:9d:cb:3a:78:bc:2a:41:77:2c:4e:6a:72:00:50:
3e:8c:b6:71:a9:90:a6:d7:a4:1e:a6:f1:68:f6:b0:
bc:d2:b8:0a:36:0d:6a:e2:d5:c6:f4:14:2b:2a:88:
d3:ba:79:b6:ca:ca:64:b3:a4:e0:38:84:28:77:cb:
2a:ae:aa:c9:59:42:d4:a6:8f:9d:5d:19:9b:1c:2a:
93:03:74:25:9f:fa:1d:b4:9a:9d:cc:54:08:07:81:
ad:50:f7:3d:b6:49:95:25:74:76:e1:dd:a0:b4:f7:
3c:d1:45:16:06:25:85:4a:68:7c:ff:6d:93:c3:c5:
28:e3:0a:22:c7:83:85:a6:46:18:1f:a8:4f:09:13:
c9:72:44:48:78:52:88:5f:f5:3d:f7:97:fd:52:0e:
f8:38:4d:de:1f:61:fb:60:ef:22:08:4d:6a:cf:b6:
c1:8d:35:f1:42:1c:a8:31:00:37:70:a8:98:4e:f3:
e2:41:77:8f:2a:ca:93:97:9c:73:3a:e8:2f:42:f5:
18:db:5e:49:d9:51:7f:c1:d4:b8:e5:36:53:c2:21:
aa:80:e7:ee:86:73:c7:f2:a7:2d:ff:82:08:18:c9:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:19:C9:3F:4A:6E:4C:94:8B:8A:D7:A3:00:7C:1E:F9:90:5B:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/49IZyT9KbkyUi4rXowB8HvmQW0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ab:a2:9a:92:c9:16:66:14:8f:93:df:1e:39:2c:7b:ab:82:
f9:d8:44:3b:b7:db:d5:2e:ce:97:44:ae:10:6e:56:5f:9a:9f:
2a:96:67:05:51:04:22:52:9f:6f:00:53:e9:0e:a6:38:52:de:
21:63:55:d7:b8:26:25:18:d7:d4:f8:4a:9f:df:5e:fa:45:b6:
aa:55:e8:2a:37:87:e9:4a:93:57:31:97:d1:34:ac:b1:00:f2:
02:d0:91:32:0a:43:6a:9d:51:bc:ea:32:1d:85:4a:c1:a8:6f:
e8:c2:7c:78:fd:a3:85:cb:04:04:96:69:e7:f0:d4:da:b2:75:
d3:7c:0a:6d:d6:42:da:3e:68:ec:df:96:2c:8c:57:8d:c0:89:
90:35:c5:92:a8:5e:6a:ce:54:8d:29:cf:45:f8:16:c6:28:67:
5f:b8:84:31:8a:62:06:c2:5d:89:ff:e4:fd:1e:0d:96:6b:08:
ba:49:58:97:b7:0c:99:87:20:57:7c:27:b8:45:58:bf:9b:09:
e1:31:74:8f:96:f8:17:98:f8:61:d1:bc:ad:2c:e7:db:c8:e2:
79:3d:ed:c1:61:08:83:53:18:52:b0:f8:c9:3b:29:ff:82:ba:
d3:36:da:5d:2a:6d:e9:aa:4d:5f:b7:89:99:9a:b3:50:43:db:
e7:56:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:24 2025 by rpki-client