Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/cofMrZUGj5NsQp1oLa40MN7rEkw.roa
File: cofMrZUGj5NsQp1oLa40MN7rEkw.roa (raw, json)
Hash identifier: wmR8/1eMWv5ki7+/+pR2G+FNUzCKSL6K5OVlD8TTm08=
Subject key identifier: 72:87:CC:AD:95:06:8F:93:6C:42:9D:68:2D:AE:34:30:DE:EB:12:4C
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0195F6D37BCF3165E36DF196DE4779FD9733
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/cofMrZUGj5NsQp1oLa40MN7rEkw.roa
Signing time: Wed 02 Apr 2025 14:06:49 +0000
ROA not before: Wed 02 Apr 2025 14:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214865
IP address blocks: 62.169.139.0/24 maxlen: 24
2a14:5140::/32 maxlen: 32
2a14:5140::/40 maxlen: 40
2a14:5140:100::/40 maxlen: 40
2a14:5140:200::/40 maxlen: 40
2a14:5140:300::/40 maxlen: 40
2a14:5140:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:d3:7b:cf:31:65:e3:6d:f1:96:de:47:79:fd:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Apr 2 14:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7287ccad95068f936c429d682dae3430deeb124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:de:e8:a5:8b:30:d6:c1:8a:57:47:12:30:
da:05:66:05:8e:0d:91:57:15:00:29:10:37:46:dd:
51:46:e8:89:b6:92:55:b2:26:85:c1:92:c8:c6:69:
97:5a:50:ae:43:48:19:dc:ee:3d:cd:77:51:da:62:
3c:79:cd:7c:1f:5b:10:a4:82:a4:ba:b8:cd:49:65:
d3:2f:28:74:66:8a:8e:03:bd:ef:ae:7a:dc:e0:68:
7d:4b:e0:3f:80:05:9e:f7:ac:ac:22:93:70:2b:61:
e1:f4:3a:1a:97:a9:7e:8e:b8:d8:8e:29:a2:45:14:
50:08:80:d7:55:70:8c:7f:57:b2:f3:0a:ae:55:f0:
3d:5b:f3:7f:e9:c1:9c:f6:06:1f:09:2e:3c:09:ea:
1a:9b:cc:4e:e1:19:31:3f:81:cc:09:40:7e:20:ce:
1b:26:19:c9:23:d9:82:8b:72:00:ce:1d:77:dc:b9:
b3:46:85:1c:e4:bb:fb:c6:06:34:61:d6:04:52:09:
9a:f7:c7:f3:26:88:d3:92:9b:7c:28:d5:c3:37:3c:
6e:07:d0:7d:b7:ae:bb:fa:5e:7d:22:17:e5:87:b2:
73:53:8d:c1:77:a8:69:23:ef:80:92:04:59:e4:4f:
c9:9d:89:af:4a:17:3c:36:5e:57:88:87:51:e7:41:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:CC:AD:95:06:8F:93:6C:42:9D:68:2D:AE:34:30:DE:EB:12:4C
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/cofMrZUGj5NsQp1oLa40MN7rEkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.139.0/24
IPv6:
2a14:5140::/32
Signature Algorithm: sha256WithRSAEncryption
08:ed:de:20:68:9c:22:9d:0e:cd:88:c7:cc:d9:0f:11:0c:57:
63:ee:e1:a3:f4:19:9b:9e:d7:d7:63:c5:8b:cc:c9:9a:5f:8c:
1c:ae:ca:b5:77:2c:03:23:8a:44:e7:75:96:4f:19:e1:dd:e9:
57:84:8c:9b:cb:05:f1:bb:71:cf:32:d2:dd:e8:f1:df:15:5b:
71:46:8b:57:17:61:67:d8:74:bc:fc:48:c0:32:6d:cd:22:f7:
72:c7:54:36:7f:41:f1:5f:ff:2d:52:0c:57:b5:b6:fa:a1:22:
cb:37:38:81:df:8a:16:1c:22:76:bc:28:f5:d8:10:61:58:44:
01:01:d5:ec:ad:cc:07:52:52:98:07:25:b8:01:d7:f4:1a:e6:
a0:0f:25:38:cf:0e:74:4b:59:4a:08:4c:fa:2b:ab:97:64:75:
f6:a7:da:07:49:d9:9f:8b:88:2d:29:0a:6b:c2:06:6a:a8:c9:
11:ff:bf:0e:0f:49:dd:8c:99:42:05:6f:e2:cb:70:4f:bb:fa:
a3:a4:82:e2:38:0b:16:f0:34:79:9e:1c:7d:8a:27:d8:5f:bd:
b1:17:5b:97:e0:f0:d8:ba:2e:54:80:25:43:60:2c:54:96:d3:
cd:75:6d:5e:75:d7:90:91:61:20:ee:c5:02:03:d5:5c:5e:be:
b9:d6:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:38:44 2025 by rpki-client