Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jx6sf754-VYd5Og5nvcp5unrAyk.roa
File: Jx6sf754-VYd5Og5nvcp5unrAyk.roa (raw, json)
Hash identifier: D3DLgP5OFULjC1PpELSPiJrkZ1hR2NUXXRL/5u3293w=
Subject key identifier: 27:1E:AC:7F:BE:78:F9:56:1D:E4:E8:39:9E:F7:29:E6:E9:EB:03:29
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F002DDF30C5B2E684085181B8FBE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jx6sf754-VYd5Og5nvcp5unrAyk.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8764
IP address blocks: 62.122.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:02:dd:f3:0c:5b:2e:68:40:85:18:1b:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=271eac7fbe78f9561de4e8399ef729e6e9eb0329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:d2:0d:b0:29:66:de:e0:80:5a:45:cd:a2:
69:d5:4b:42:fb:49:41:c9:ff:21:d2:14:51:54:2d:
1c:7e:45:e2:4f:b6:61:e8:db:2c:61:4b:76:b2:50:
d7:78:46:2e:84:20:8a:de:78:34:17:e4:f7:d7:a9:
42:11:84:d5:7d:fc:f4:5b:8b:31:2f:58:f5:26:79:
e0:e6:0c:31:6e:cd:d6:00:a9:7d:9c:e5:96:9f:c3:
86:46:66:ac:15:f8:7c:f9:08:55:fc:b8:37:e0:b1:
f3:69:6a:0c:02:e6:f2:dd:81:17:1a:8e:77:a5:d7:
be:5a:d4:7b:77:1e:53:3f:67:9f:f9:23:19:3a:d0:
c7:76:3b:9d:2d:8a:48:dd:9c:d1:ab:36:7a:03:26:
18:fd:d9:42:a2:ea:02:39:6b:86:8d:17:5c:67:24:
08:5b:c1:df:a8:11:fe:c7:7a:70:a4:bb:cb:64:f1:
3e:1c:96:95:93:f2:21:20:56:a2:08:2f:d0:3c:ab:
f3:62:d8:ca:da:bf:b3:ba:dd:1f:28:0b:14:f2:bf:
6a:af:58:cc:d5:5b:62:4f:e4:11:9c:62:20:58:0d:
52:d6:95:03:ef:36:e4:77:4c:d9:10:0d:85:e5:f2:
e1:0e:26:2b:0d:82:a8:c7:96:10:07:69:c1:0f:c1:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:AC:7F:BE:78:F9:56:1D:E4:E8:39:9E:F7:29:E6:E9:EB:03:29
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jx6sf754-VYd5Og5nvcp5unrAyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:36:81:c6:26:a4:22:5b:5f:08:3d:5e:3c:56:1e:81:62:b3:
6b:93:58:13:da:f8:af:86:0e:3c:af:6f:0c:83:75:49:a4:93:
e2:1d:c1:7a:88:64:ff:10:f8:6b:3c:f1:23:c8:fc:78:0c:8b:
e6:b3:b1:e9:b7:d0:64:cd:6e:5e:e8:c7:69:ba:2a:39:2e:6b:
1e:8f:3a:c7:44:ed:a6:81:1b:45:a6:4a:39:4f:9f:88:66:46:
7b:dd:e5:6a:a4:11:87:11:5a:71:a8:69:0c:f3:e2:69:08:54:
1f:89:cb:ed:92:8e:34:07:cd:07:9b:03:e7:12:be:92:4f:9f:
10:30:bd:d4:48:bf:1f:86:09:a8:28:f9:5d:9c:5b:d9:4c:79:
ec:55:6b:a5:05:92:85:2c:43:bf:60:a6:ed:03:23:d4:51:e2:
3e:1c:ce:ac:c6:17:2b:2b:6b:44:f4:59:01:12:d4:db:60:b0:
07:9b:30:93:97:d4:73:62:d2:7d:1b:20:f1:fd:90:19:66:eb:
c8:88:d3:42:93:26:83:e9:bf:1a:41:87:b1:e1:08:57:35:66:
51:1b:32:49:a7:97:6b:ec:5f:38:ae:50:3a:cb:15:86:db:b3:
eb:14:35:41:77:27:67:b3:84:67:dc:a5:22:ef:68:73:93:d3:
95:2d:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:57:52 2025 by rpki-client