Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/8XP3ZgnWsREYJBKcesUxqlAiBzw.roa
File: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (raw, json)
Hash identifier: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=
Subject key identifier: F1:73:F7:66:09:D6:B1:11:18:24:12:9C:7A:C5:31:AA:50:22:07:3C
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 0194252229CC062886338FA8F0A39369FD19
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/8XP3ZgnWsREYJBKcesUxqlAiBzw.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43003
IP address blocks: 62.93.120.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:cc:06:28:86:33:8f:a8:f0:a3:93:69:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f173f76609d6b1111824129c7ac531aa5022073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:84:7c:42:47:ff:a8:65:d1:38:94:a9:ad:
3a:5b:72:ff:8e:03:99:fd:ad:c1:3f:54:df:ff:84:
ab:28:06:39:0a:42:08:a0:2c:62:40:5e:bd:59:8b:
bb:6f:b2:95:2e:a0:25:c4:ee:ce:23:6e:f2:ab:b9:
6a:3b:b0:67:4f:c2:51:55:7e:d7:39:d8:09:b3:9d:
f2:cd:4a:c0:72:ad:ed:ba:58:6b:59:c8:c9:f3:24:
04:0b:98:1d:67:22:30:54:8a:e0:7b:d5:01:d9:2a:
af:8b:8f:89:57:f2:f6:06:33:c3:a1:12:ff:e2:36:
11:7a:20:51:45:e7:1c:4c:cd:8c:e7:57:cf:82:56:
1b:b4:fb:9a:f7:1e:97:cc:a5:0a:da:d2:d7:bd:06:
c3:b0:c8:e2:89:6e:a9:ae:90:eb:57:f4:11:87:8f:
9e:14:3d:0c:6b:4d:5b:e4:53:9e:81:0e:6b:e2:78:
0e:76:8b:10:51:f1:c4:fc:0a:5d:66:ce:0a:40:38:
49:5f:0c:d8:7a:c5:72:32:77:4c:b3:79:54:09:bf:
b8:83:56:89:eb:38:48:62:67:0e:0b:f0:b3:8b:6e:
da:24:82:ab:fe:f3:74:81:bd:a1:b8:8d:c4:fa:2c:
8a:81:53:04:2a:ee:b2:e2:ca:11:d6:e1:6b:b0:45:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:F7:66:09:D6:B1:11:18:24:12:9C:7A:C5:31:AA:50:22:07:3C
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/8XP3ZgnWsREYJBKcesUxqlAiBzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.120.0/21
Signature Algorithm: sha256WithRSAEncryption
14:54:1c:2b:2f:60:fe:0a:54:b4:25:49:fb:67:fb:80:9c:40:
92:46:c2:21:ce:73:ee:97:4b:ce:a6:26:00:e4:d4:35:ac:ba:
7d:d3:4b:5d:03:c9:0d:65:df:31:34:44:d4:9c:60:ac:41:1e:
21:1b:45:c2:03:38:4c:26:04:0d:ac:2f:45:2b:39:d2:23:73:
6b:99:43:21:12:2e:57:74:06:a5:9b:86:2b:b8:af:3c:70:9b:
8d:b1:4d:19:c1:5a:73:e0:3e:06:9c:40:d9:fe:b8:b1:51:d2:
43:7e:a7:40:a8:ea:17:e2:3f:8e:eb:06:63:0f:ec:e0:a2:89:
da:d8:8b:a8:41:a0:be:e3:cf:4f:69:2a:47:6a:9c:2b:4f:ed:
0d:5c:bb:00:91:37:bf:83:c1:52:e7:84:3f:8a:1f:e9:8e:a7:
72:9e:91:33:ac:aa:3a:85:b5:cd:6d:d4:e6:29:aa:59:92:f9:
d2:87:b4:e6:13:02:59:a9:f4:06:78:8f:bc:8b:cf:5a:64:27:
7e:bd:6c:50:a3:a4:d7:9a:79:e1:de:08:2d:57:42:ea:61:67:
18:2d:12:25:fd:4e:17:b6:62:00:7f:b6:50:2b:af:91:03:8b:
62:49:e2:1a:78:aa:c7:15:37:b3:cd:39:e0:2c:a6:dd:db:27:
a8:ef:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:14 2025 by rpki-client