Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/0iPJ2Dh0D4LzrYF2tobncG31bno.roa
File: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (raw, json)
Hash identifier: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=
Subject key identifier: D2:23:C9:D8:38:74:0F:82:F3:AD:81:76:B6:86:E7:70:6D:F5:6E:7A
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01941FFA2C69B8B6F9ED810D6C81561780C8
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/0iPJ2Dh0D4LzrYF2tobncG31bno.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 62.3.56.0/24 maxlen: 24
2a12:100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:69:b8:b6:f9:ed:81:0d:6c:81:56:17:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d223c9d838740f82f3ad8176b686e7706df56e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:4d:8a:61:1e:77:0d:cd:30:46:68:e1:e8:
26:25:94:67:c4:16:1f:32:df:6c:21:90:49:4e:45:
6f:b3:f9:be:35:28:a2:7c:bd:25:22:fb:48:2c:92:
63:6a:e2:97:49:e4:a2:c6:8a:a0:95:38:c2:d8:27:
8a:16:18:d5:60:af:6c:84:58:78:35:06:88:8f:67:
1a:2c:10:9d:fc:72:74:b1:af:d3:b0:ab:a0:b1:ec:
25:02:75:19:fd:3e:9c:10:88:fd:e5:37:cb:9a:cc:
05:38:f0:d1:1b:77:10:9d:e1:6c:ad:b1:60:dc:66:
fb:fc:18:63:fe:f3:f6:5a:a5:37:5a:8f:7a:e7:65:
22:a3:cf:d8:f6:01:d5:f9:35:9f:1a:28:28:6b:11:
1b:c4:58:25:6e:36:0d:c2:d6:0c:d8:01:06:57:45:
63:e2:a7:1b:ba:a8:03:e1:68:10:45:c8:cc:a7:6c:
60:1f:16:b8:d1:f7:a5:97:47:0f:24:9d:b4:1e:e8:
11:e9:52:97:9a:a7:22:15:fc:cc:b9:90:b1:86:9f:
f5:80:ee:94:8f:ea:aa:87:9b:4e:e5:92:b1:6d:84:
9a:22:dd:e8:f4:b8:f6:7b:99:be:f7:fb:e6:e1:37:
d0:e4:02:43:11:ee:c5:5b:43:02:66:68:79:a4:10:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:C9:D8:38:74:0F:82:F3:AD:81:76:B6:86:E7:70:6D:F5:6E:7A
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/0iPJ2Dh0D4LzrYF2tobncG31bno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
ab:a7:40:ef:43:99:aa:0d:fe:2b:b3:d5:3a:8a:1f:b3:c8:5e:
3d:e7:8d:ac:61:bb:36:49:e5:84:b5:b3:ee:17:98:64:ae:ea:
6d:21:d7:82:be:ed:76:ad:ab:b2:ee:53:be:10:36:ba:85:47:
c6:f2:44:64:d9:e1:65:57:97:c9:58:bc:fe:33:52:fe:29:23:
d9:18:d4:6a:c2:8e:0e:0f:03:16:2c:95:0a:0e:cc:33:51:cd:
77:dc:a0:6d:f0:54:79:bc:26:62:9d:2b:26:f5:ed:06:1d:57:
d6:3a:0d:04:e2:ed:cd:5c:f2:a5:30:01:3e:d5:6b:83:f1:0d:
25:da:9d:f7:52:db:87:73:f6:4e:ec:3f:df:db:aa:58:0d:39:
b9:1b:95:9a:fc:6c:0c:68:5f:13:04:07:cd:81:ed:67:a0:a6:
f7:bd:ba:ab:0f:e6:ab:a9:b0:55:d9:a4:ea:7c:70:e0:7d:b8:
ef:bd:da:2e:51:5c:ab:3d:76:54:57:aa:b3:92:c2:07:2d:aa:
dc:c7:c1:bb:8e:b7:73:59:03:1e:d4:fc:f2:5f:0e:95:54:1c:
66:19:bc:b4:96:df:1f:dc:eb:ff:67:66:02:63:0f:2a:3b:0b:
fa:b3:71:f9:9b:44:82:07:8b:89:47:ec:c0:4d:ac:d6:08:4c:
a0:01:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:32 2025 by rpki-client