Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p_T9nHoPGqNNrNnR-HF70_n9iwQ.roa
File: p_T9nHoPGqNNrNnR-HF70_n9iwQ.roa (raw, json)
Hash identifier: dQ6G2OJhpBuHh/Lr5x6w9i5v0pQPfRIJFzrEAhINk60=
Subject key identifier: A7:F4:FD:9C:7A:0F:1A:A3:4D:AC:D9:D1:F8:71:7B:D3:F9:FD:8B:04
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01974459151E17D83B14E15F7F86474C1A39
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p_T9nHoPGqNNrNnR-HF70_n9iwQ.roa
Signing time: Fri 06 Jun 2025 08:26:18 +0000
ROA not before: Fri 06 Jun 2025 08:26:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
135.196.228.0/23 maxlen: 24
135.196.232.0/23 maxlen: 24
135.196.238.0/23 maxlen: 24
213.139.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:59:15:1e:17:d8:3b:14:e1:5f:7f:86:47:4c:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 6 08:26:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f4fd9c7a0f1aa34dacd9d1f8717bd3f9fd8b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:b9:3a:49:11:4a:b9:59:3d:ad:9e:ab:4b:
d2:63:91:aa:fe:cf:64:ab:1e:21:43:2f:f2:df:23:
70:b1:42:75:bf:ff:74:14:41:14:cf:44:27:36:f4:
f1:6c:d8:5c:37:83:a5:eb:0a:0f:94:5a:61:4a:25:
ed:69:76:21:5a:88:97:70:a6:6c:af:8e:16:ac:ca:
70:b7:c7:c5:7e:93:85:1f:69:d1:59:07:9f:c9:a7:
45:f5:59:17:bc:17:ef:ba:0b:2e:9b:79:2d:70:0a:
0f:b9:8c:c0:ac:17:af:d1:02:34:68:e5:d9:38:87:
1e:07:c4:18:90:7c:4b:c9:91:4f:e2:27:0b:27:42:
81:19:60:81:58:4e:05:88:f5:52:91:e8:a4:b8:8e:
8c:e2:82:88:b9:73:e9:cc:29:a7:5b:ce:a0:dc:bc:
75:c6:bf:52:41:16:dc:d1:77:40:48:68:39:40:41:
e8:59:f2:cd:fb:2f:1d:c9:53:dc:05:3c:b6:ce:ff:
1d:bb:b6:a8:33:d6:d1:7f:f9:09:0c:65:8e:95:6c:
b0:00:ef:45:45:a3:25:a3:83:91:c1:dc:47:d7:5c:
b5:00:53:aa:4a:74:40:2c:b7:42:6e:4e:87:70:ea:
93:c2:c9:c9:22:31:31:47:36:62:0d:ee:1c:3d:de:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F4:FD:9C:7A:0F:1A:A3:4D:AC:D9:D1:F8:71:7B:D3:F9:FD:8B:04
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p_T9nHoPGqNNrNnR-HF70_n9iwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
135.196.228.0/23
135.196.232.0/23
135.196.238.0/23
213.139.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:1a:f5:e5:64:0b:33:e9:b1:3a:e6:e9:2d:c0:91:20:6d:60:
4a:78:be:0a:73:d6:1e:f5:b6:8c:33:45:93:37:af:3d:cd:e4:
7c:33:46:0f:1d:58:d0:e1:f2:7a:1b:d6:d2:03:f4:d6:b1:06:
c3:33:c5:13:02:fd:a6:f1:e4:53:38:0b:f1:45:cf:02:52:03:
a9:b4:9b:51:b4:41:eb:2a:ac:ce:48:0e:af:2c:be:5a:2d:c2:
4a:1e:5b:30:f0:c4:3d:b1:29:c5:fb:85:f6:6b:f5:19:f0:f0:
15:3d:96:26:18:c5:04:a5:22:d8:4a:2a:0e:2e:c3:39:cc:b3:
18:38:12:74:01:77:56:dc:09:a8:3d:bc:25:07:35:14:50:b6:
ab:27:e7:5e:0e:c8:b4:f8:8c:46:65:be:85:61:de:31:5a:fc:
1d:c5:6c:82:32:34:fe:4f:7e:b9:3b:70:4c:54:91:06:e7:e2:
84:33:37:39:70:ec:7f:0a:3c:aa:9e:0c:c9:c4:a9:76:52:58:
3b:9a:b7:05:e3:fa:ea:c5:eb:03:06:72:45:d6:b1:b4:5e:c2:
11:a9:75:e9:da:40:f7:43:59:8c:38:52:69:55:69:29:73:66:
f3:e7:63:f2:a5:99:32:01:60:7f:cb:c1:64:a5:76:88:99:c7:
f7:e2:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:54:47 2025 by rpki-client