Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/irOUAsVrlxFg5m013u0wtydduUU.roa
File: irOUAsVrlxFg5m013u0wtydduUU.roa (raw, json)
Hash identifier: z7Yif2k8ig/75nD80USkf23TbWyOlu3D9+tkTdBp9Ks=
Subject key identifier: 8A:B3:94:02:C5:6B:97:11:60:E6:6D:35:DE:ED:30:B7:27:5D:B9:45
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC406EA42E050DCFD554479D40A1BE
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/irOUAsVrlxFg5m013u0wtydduUU.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 62.204.35.0/24 maxlen: 24
146.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:6e:a4:2e:05:0d:cf:d5:54:47:9d:40:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab39402c56b971160e66d35deed30b7275db945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:41:48:78:84:b6:63:5f:05:a3:52:13:6a:
35:f2:24:a4:1f:6b:67:4f:53:92:ee:7e:f8:1b:7b:
f1:1f:73:4e:37:76:ab:b0:87:0e:e9:7c:fa:6f:5c:
9d:29:16:c5:d5:4a:ac:77:14:39:ff:93:93:96:d9:
6e:44:7d:1e:22:7a:19:8f:32:af:84:c1:48:1e:39:
08:cb:af:df:a3:e1:70:09:35:d6:a9:6d:37:a6:7e:
4a:09:4f:7f:b0:bf:77:6d:b3:49:af:8f:f7:45:55:
9b:7b:2b:fa:dc:ca:63:d9:dd:78:67:0b:3c:3a:bc:
af:b4:16:93:fa:ff:3b:91:a7:0d:41:2f:9e:54:5a:
93:83:95:6c:d2:6a:66:f5:f2:1b:32:4d:a9:0f:d7:
e6:9f:af:c6:a5:41:58:cb:4b:94:b9:1d:b5:1c:77:
4e:55:9f:6e:e1:3a:7e:76:ef:24:f4:51:83:49:12:
ed:a0:58:3b:c6:03:be:23:cf:d6:30:47:ab:f0:64:
82:84:45:02:c5:4c:d6:60:35:e0:e6:b9:92:a2:e6:
d5:48:30:a3:7e:69:fb:50:a3:ae:46:20:bd:04:df:
d7:ec:ee:75:52:52:11:b5:ca:19:c4:7a:22:58:70:
77:da:3e:ef:fa:ce:10:67:d4:69:6d:a2:cc:59:d9:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:94:02:C5:6B:97:11:60:E6:6D:35:DE:ED:30:B7:27:5D:B9:45
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/irOUAsVrlxFg5m013u0wtydduUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:29:66:ef:c2:1c:fb:06:62:08:9d:25:af:08:d4:da:62:
41:e2:af:9d:92:aa:eb:fa:36:66:a8:cd:1d:6e:1d:04:78:d7:
9b:39:e0:2f:36:89:3c:bb:ec:fa:49:ea:f3:4d:79:87:37:92:
77:b6:51:33:19:44:15:88:8b:f4:ee:af:f9:53:9f:c2:0f:f0:
90:3c:50:d4:b8:b5:5c:29:a2:be:a0:51:03:1d:0b:d9:ff:16:
85:45:df:24:7c:d3:0f:7a:3d:26:4d:a3:c4:30:29:a7:a5:38:
b3:6d:1f:c5:f1:84:3b:ca:45:88:a2:6a:b5:6d:f0:51:60:5b:
07:18:fe:cd:cb:98:d3:01:91:0e:21:8a:18:3d:e7:98:19:17:
7c:65:48:c9:a5:cc:8e:5f:d7:61:b9:93:10:98:d3:99:b9:2a:
91:77:7e:59:17:33:d0:81:f4:b2:a0:20:cf:a9:14:74:9c:55:
7a:8c:75:2e:10:9f:70:8e:a4:80:ca:93:98:4a:5b:c9:37:d9:
df:3e:a7:bd:9c:09:9e:58:1c:cc:e8:a1:ce:d2:48:54:77:ce:
25:13:d2:b5:64:5e:36:fc:de:87:42:8a:57:f3:01:f7:6c:c7:
d2:d6:bb:b2:dc:a3:25:ff:c6:a4:27:a9:5d:bc:ad:bb:54:e5:
07:fb:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:39 2025 by rpki-client