Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/xKKq4SF6-ObtvfC7jpcnypKexwg.roa
File: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (raw, json)
Hash identifier: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=
Subject key identifier: C4:A2:AA:E1:21:7A:F8:E6:ED:BD:F0:BB:8E:97:27:CA:92:9E:C7:08
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 019424B3D6B732DC8FB34FCFDAAB5810EDD7
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/xKKq4SF6-ObtvfC7jpcnypKexwg.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 62.108.88.0/22 maxlen: 24
62.108.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d6:b7:32:dc:8f:b3:4f:cf:da:ab:58:10:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4a2aae1217af8e6edbdf0bb8e9727ca929ec708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:d5:b9:28:ee:07:71:fc:26:15:c9:c1:33:
05:50:22:b3:de:6d:db:75:b7:37:37:f4:07:79:ea:
01:f2:69:28:79:47:6f:ba:60:37:d0:66:d9:39:7b:
7d:a8:b1:ad:d7:fe:7d:06:b9:ec:03:40:ca:5d:5a:
df:94:43:c7:25:9e:01:ea:90:c1:19:3b:63:ab:f5:
b7:b3:eb:ac:df:4f:14:44:cb:93:29:20:e7:52:93:
01:72:78:a0:1b:9e:17:4d:70:6a:69:ab:1b:a2:52:
b1:11:ed:aa:a8:67:ce:f1:43:64:03:d1:66:51:f7:
a0:be:7b:4a:e3:86:df:d8:ab:9b:de:8f:20:6a:1e:
f0:a0:52:4b:0b:7b:0d:9c:72:7e:c6:ec:32:2a:c1:
ea:9a:15:6a:68:a1:3a:27:70:79:19:36:6f:2d:4e:
59:10:15:ed:df:af:bd:42:d0:6d:f5:11:d3:25:68:
22:44:83:c2:99:e1:f3:39:2f:76:60:3d:85:5b:ee:
37:a1:94:05:be:a7:49:87:49:f0:db:d5:6c:e9:ee:
00:17:aa:98:e9:36:b3:3e:b2:27:f8:be:82:e6:1c:
b0:72:86:9b:08:18:3a:2a:8c:2f:50:cb:c7:2c:30:
05:fc:16:e1:a4:af:a3:d7:09:3e:76:ed:1e:b6:6a:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:AA:E1:21:7A:F8:E6:ED:BD:F0:BB:8E:97:27:CA:92:9E:C7:08
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/xKKq4SF6-ObtvfC7jpcnypKexwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
44:f0:d7:4d:43:91:92:65:6f:12:38:6a:99:7c:0e:4c:90:3b:
1d:40:ee:1f:b9:c6:6f:40:16:35:c3:62:24:c8:6c:c7:ff:ce:
63:fe:39:4d:34:62:2f:b4:11:80:db:68:1d:48:20:bf:16:8c:
e0:c5:70:d8:8d:a0:c3:c5:9c:2f:2f:c6:83:1b:eb:45:51:fe:
08:6b:05:8d:9e:a6:f6:4a:e0:87:b0:8c:69:39:3c:78:29:25:
9b:55:c5:36:ac:1a:68:02:79:dd:0f:65:94:ec:f2:60:0d:3f:
05:e6:1e:63:73:44:dc:c6:0b:5c:d0:74:fb:8c:84:22:63:40:
ca:11:a4:dc:95:98:b5:b7:b7:ed:6e:d5:d5:f0:98:6c:bf:99:
ec:1f:d9:72:f0:28:cd:15:6e:81:7f:04:23:3f:50:96:70:2c:
4d:f4:6f:f3:7d:b3:84:3b:5d:aa:ca:11:5b:1d:37:66:a1:94:
d7:cc:52:71:bc:a5:d3:18:92:8c:5d:b1:72:2d:8c:54:c9:ae:
fd:72:25:65:02:46:84:97:2c:8a:40:87:07:3e:d0:d9:e0:19:
39:7e:0a:65:a5:db:cc:02:1d:a3:4f:37:ef:ba:65:12:3c:84:
2e:3d:62:67:15:f6:18:21:59:47:90:8d:d3:ac:eb:9f:0d:c1:
6e:69:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:45 2025 by rpki-client