Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4peFkTT6ranzEgINLjQOtSVsY_A.roa
File: 4peFkTT6ranzEgINLjQOtSVsY_A.roa (raw, json)
Hash identifier: 2i7UduEwqSyLgmnHSAjVrHfIBjINeWAlY4ZYKw5oeNU=
Subject key identifier: E2:97:85:91:34:FA:AD:A9:F3:12:02:0D:2E:34:0E:B5:25:6C:63:F0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37FE59F4D795069C80EE34FE873A9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4peFkTT6ranzEgINLjQOtSVsY_A.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57391
IP address blocks: 62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7f:e5:9f:4d:79:50:69:c8:0e:e3:4f:e8:73:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e297859134faada9f312020d2e340eb5256c63f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:2f:82:f0:2e:4c:fd:16:d8:44:5f:7a:af:
d1:7d:9e:36:2e:09:f4:27:20:b0:6e:77:c4:8f:ed:
d6:c4:ef:50:e7:66:69:ce:1b:ae:0e:44:f0:71:5d:
45:4c:70:d6:9d:2d:a0:e7:69:99:05:19:b2:47:ff:
2e:37:bd:e6:c7:66:2d:a8:12:a1:cd:af:65:d6:1f:
2e:05:e8:7c:97:57:51:a8:a2:38:da:59:d7:cd:6f:
10:09:77:58:ce:16:85:d8:4f:a6:bd:65:52:62:7b:
f7:1f:cb:31:6c:bf:c0:8a:26:c0:d1:78:da:e4:90:
a6:12:b0:57:a5:ec:0a:32:c1:28:45:b4:3d:d6:41:
7c:ac:a5:2a:21:49:f5:d0:04:01:3a:68:57:47:b4:
5c:a4:63:e4:0b:c8:43:c1:9e:96:2a:89:db:0c:ec:
1e:25:ed:3d:eb:39:2e:1e:4d:67:cd:d7:f4:8d:42:
76:b4:28:88:28:b7:9f:83:6a:b6:58:d5:9c:62:8c:
86:f5:6d:7a:87:16:89:92:33:07:88:2b:38:1c:44:
10:56:b2:84:53:aa:27:41:22:da:ba:8b:3c:cd:71:
b7:5a:fa:84:71:cb:c5:0a:0d:1e:a0:ee:0f:43:8e:
6e:89:b5:ad:b4:56:ee:8b:e4:ec:76:e1:bb:11:53:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:85:91:34:FA:AD:A9:F3:12:02:0D:2E:34:0E:B5:25:6C:63:F0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/4peFkTT6ranzEgINLjQOtSVsY_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.172.0-62.60.179.255
Signature Algorithm: sha256WithRSAEncryption
52:6c:9a:c7:94:18:17:21:a0:5c:6d:67:6b:89:30:51:23:8e:
8f:e0:c7:3d:7f:eb:82:af:e8:fe:5c:e4:cd:fa:79:6b:ad:02:
1d:59:a7:cf:ca:ad:7b:9e:04:28:78:28:fd:0e:52:c1:75:53:
88:50:b5:52:26:ff:fe:b4:25:72:de:16:fb:a6:ea:a7:8f:14:
3f:7e:ed:2d:88:73:ef:c8:98:79:fe:ed:e2:34:af:25:11:55:
b8:75:f6:b3:d4:48:62:19:c7:04:31:16:cd:32:25:af:fa:b2:
bd:3b:fc:30:27:26:60:6c:2b:f0:6c:98:bb:e9:8a:e9:9c:be:
00:8c:05:9b:43:d8:d9:07:d1:73:d7:33:c8:1c:cf:6b:92:5e:
c7:39:40:17:34:b0:95:90:63:f1:9e:1f:33:85:be:34:be:2f:
42:80:36:52:0d:99:4e:17:83:c4:1d:b8:76:db:64:23:6c:1f:
e4:85:68:32:56:f2:2e:7f:f2:98:99:b1:a7:09:56:f1:f9:eb:
e7:e0:94:7b:5e:1d:58:c8:c4:23:81:45:9b:4a:8f:8d:7a:fa:
f4:91:ac:b5:fb:3c:db:89:f4:5b:17:38:ba:97:d1:89:2c:a9:
f7:24:c0:50:b2:c9:02:90:58:7d:f0:80:02:a0:e6:ef:fe:f4:
46:24:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:20 2025 by rpki-client