Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZP7CSq7KgqMJWZWNT1Ant_MGMc.roa
File: jZP7CSq7KgqMJWZWNT1Ant_MGMc.roa (raw, json)
Hash identifier: g88Di7M91N1g+76duolBydNA4abeRKoWPOo70F50g04=
Subject key identifier: 8D:93:FB:09:2A:BB:2A:0A:8C:25:66:56:35:3D:40:9E:DF:CC:18:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EDF3DC8D162C3DEE24DC3178AF37
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZP7CSq7KgqMJWZWNT1Ant_MGMc.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ed:f3:dc:8d:16:2c:3d:ee:24:dc:31:78:af:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d93fb092abb2a0a8c256656353d409edfcc18c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:05:48:b7:c8:21:66:73:c3:fe:f3:8f:6f:
ae:d3:eb:4c:06:5d:69:b7:91:e2:c6:48:84:45:42:
83:a7:d9:db:b4:e1:db:e1:cf:30:ac:47:a0:bc:e7:
5e:97:a6:50:6d:32:da:e0:33:5e:12:d8:2d:f6:0d:
25:51:34:d7:5e:8f:f3:23:32:5c:1d:f1:a8:53:db:
b3:2c:5d:0d:bc:10:38:c6:73:1c:52:b8:b5:57:d8:
1e:c7:26:1b:25:d9:48:45:8e:e6:09:38:a9:f2:11:
1d:60:d0:7f:9b:be:ec:0c:3c:58:ef:ab:f7:cf:9b:
46:ea:e7:17:c2:1d:7f:34:ae:66:df:6c:2f:f2:1e:
92:15:e1:29:de:09:73:51:58:9a:bf:a0:1a:50:d5:
64:d6:33:dd:db:40:78:0f:54:b0:42:da:c7:29:b7:
0a:35:94:42:86:95:8e:49:64:42:08:a0:d6:f8:21:
39:36:44:4a:8b:23:c9:74:d8:5a:d6:5d:4c:0c:0e:
0d:58:03:cc:9e:f0:22:4e:82:0a:ca:b5:21:f0:40:
8a:97:20:5e:e9:1a:e3:a2:f5:a7:e2:63:70:25:d3:
69:f7:f0:4e:c5:ae:e1:55:af:f0:f2:30:da:c6:21:
33:f8:d7:a7:a6:ae:7b:ec:34:55:1a:a2:05:25:73:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:FB:09:2A:BB:2A:0A:8C:25:66:56:35:3D:40:9E:DF:CC:18:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZP7CSq7KgqMJWZWNT1Ant_MGMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2b:fa:83:bd:77:75:9e:2d:e3:7d:d9:a5:70:51:e1:05:1d:
7c:45:27:7a:77:d2:3e:67:56:86:bb:91:3e:56:65:1d:ed:83:
08:8a:98:f9:52:c0:a8:c3:23:ff:4a:3e:5a:b5:01:fb:6e:71:
18:a3:fc:a8:1b:59:d5:90:96:53:aa:ca:36:73:07:e0:68:f3:
78:27:3a:00:58:9f:63:c9:99:71:c5:28:00:5b:ae:47:36:5e:
24:f8:ae:9b:50:7d:12:f8:0a:53:7b:df:66:9f:7d:ce:60:32:
10:4f:8c:ba:0c:ae:b4:f1:78:8c:70:bc:28:a6:4a:19:00:b0:
25:22:6f:cc:6e:89:83:1d:cd:af:ef:37:a4:f3:29:5e:d8:fb:
31:00:c3:25:21:0a:ae:ff:fc:69:98:f1:2e:db:38:0a:9b:46:
45:13:5d:8c:3e:bd:38:23:10:33:49:e6:1c:8b:f7:93:e7:b8:
95:cd:9f:e1:3f:25:15:d5:74:ae:50:79:0b:fd:87:37:b8:e1:
86:59:17:0a:87:96:77:c3:6b:fe:8d:88:e6:88:a2:2c:25:3b:
2c:ee:f4:d1:a5:13:cf:9e:8c:b9:a2:95:35:b5:7c:9e:45:40:
11:94:e4:b0:e6:05:88:e9:a3:41:99:a8:65:76:52:45:b1:5c:
7a:b0:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:14:08 2025 by rpki-client