Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa
File: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (raw, json)
Hash identifier: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=
Subject key identifier: 6D:2F:E5:D8:59:7B:25:F3:41:12:1E:2F:42:2A:96:3F:BC:D6:B7:F1
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 01942067D3CB5687B89F488A0B33EECD8D7F
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 62.68.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:cb:56:87:b8:9f:48:8a:0b:33:ee:cd:8d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2fe5d8597b25f341121e2f422a963fbcd6b7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:72:62:02:1b:79:a7:c0:0b:8c:23:85:1a:
d7:66:8d:e8:80:94:50:68:e9:e9:6e:fd:87:a9:b1:
d4:d4:1b:6e:c3:82:a7:34:ca:bb:9e:10:a4:b9:9c:
6b:a4:9f:4f:ec:86:e8:5f:c4:95:e2:f4:8c:32:76:
de:5a:ed:e1:a7:fe:aa:ff:4f:c5:0b:4a:3c:10:2d:
4d:b6:4c:a4:63:07:a5:5f:a4:f8:c8:64:bb:59:41:
78:6a:1a:a8:ad:a0:bf:fa:e3:90:c2:61:df:84:b4:
5f:05:fb:e1:58:bd:ce:2b:01:a1:13:48:9f:42:5f:
b6:bc:a7:ee:1a:46:c8:17:d5:d1:05:21:49:eb:56:
6a:7d:f5:7e:21:c2:30:4e:54:90:fe:69:3d:02:79:
62:c8:0e:b8:05:1b:d3:d6:c3:87:f4:35:57:83:99:
d3:14:e2:9b:e7:aa:cd:b1:2a:b7:e7:17:92:ba:35:
e8:7d:28:12:ac:6c:dd:01:18:82:b1:69:da:bc:fe:
db:52:02:42:34:42:5a:2f:af:9a:d3:7c:21:ce:16:
18:90:28:1b:e4:03:4c:5f:c4:2c:e1:d4:95:01:2f:
d3:79:7d:f3:1c:3a:13:c8:31:fd:8e:e6:e5:3a:a0:
69:52:ce:83:05:87:8b:e4:3f:d5:62:33:07:fe:ad:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:E5:D8:59:7B:25:F3:41:12:1E:2F:42:2A:96:3F:BC:D6:B7:F1
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.84.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cb:f0:57:73:3c:34:17:da:24:25:27:57:ba:85:0e:ac:57:
0d:6f:1f:c6:49:47:03:42:dd:bd:e0:c7:81:f3:e0:cb:7e:1f:
69:cb:fc:07:7c:f7:b9:08:df:0f:8d:98:c1:4e:c1:28:10:0f:
dd:8f:ea:86:f2:ef:4f:24:cd:b4:5c:bb:41:c9:87:dc:e4:89:
8e:1b:85:00:ff:8e:77:24:7a:12:80:de:32:d7:a8:24:3b:75:
0d:12:3e:9d:6b:dc:91:32:a3:6a:58:6e:30:66:36:72:e5:8e:
d8:1e:c9:7b:ea:4b:58:8f:58:a4:13:c0:2e:12:c1:ce:c2:ef:
e0:9e:3a:e4:72:91:dd:a0:62:e6:db:c7:a2:5a:d1:4e:67:c7:
ba:f7:9e:9f:16:5b:b1:df:b0:2a:c6:4a:a3:22:d1:68:42:aa:
83:5c:d5:49:27:32:cd:23:03:39:b2:a0:5c:30:d6:4c:ad:71:
14:fd:0c:e4:21:c9:02:8b:7a:0d:9d:09:54:35:7c:b8:83:69:
3c:9f:49:96:04:e6:ae:f4:ea:ff:ad:b1:f2:f6:6d:12:1d:7d:
14:ef:d2:91:ad:d9:cc:2c:19:d5:ed:33:bd:f1:d5:f9:8f:b8:
45:f0:e2:d5:72:cc:38:73:8a:68:80:37:47:e6:4d:d6:ac:ab:
54:06:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:22 2025 by rpki-client