Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZdvpDug3D1WvlRv-DeP0sUZlgnk.roa
File: ZdvpDug3D1WvlRv-DeP0sUZlgnk.roa (raw, json)
Hash identifier: +K6NBgvW8sE47aCX8mjMy0ek8TDXoVSjvtqdi23lVmQ=
Subject key identifier: 65:DB:E9:0E:E8:37:0F:55:AF:95:1B:FE:0D:E3:F4:B1:46:65:82:79
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451984CFE3210CA24984F842D99172
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZdvpDug3D1WvlRv-DeP0sUZlgnk.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47122
IP address blocks: 62.233.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:19:84:cf:e3:21:0c:a2:49:84:f8:42:d9:91:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65dbe90ee8370f55af951bfe0de3f4b146658279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:c9:47:45:49:91:73:74:af:0d:b8:4b:60:
60:29:96:b8:40:83:be:a5:bd:c3:14:cd:88:9c:b8:
8b:a2:39:3e:81:17:19:5c:f3:f1:cd:9f:fa:45:26:
39:0e:ef:42:77:c2:08:1e:f2:0c:ed:78:6b:51:58:
bf:67:4d:3d:3f:ec:9e:dd:e0:a4:d4:7f:a5:f3:db:
2d:af:de:df:5e:57:9c:5f:aa:8c:44:6b:32:f8:d8:
03:72:5d:96:22:aa:91:8c:2e:11:12:c9:15:2b:a3:
fe:c6:6f:79:5c:a0:2f:81:1f:5c:6a:04:d9:16:de:
ca:c4:34:b6:66:57:6b:fc:34:fa:78:5f:a5:12:94:
73:6f:61:a8:f5:17:ab:61:ec:42:58:23:dd:9d:46:
59:19:f5:08:6f:1b:ab:f0:66:76:18:d9:61:4b:c6:
fd:c1:ab:66:41:03:85:f4:91:d3:a4:1f:98:4e:5f:
a7:4c:f3:42:91:53:35:57:5f:89:bb:1c:db:15:0d:
93:83:df:cc:7f:01:ab:dd:53:2a:13:c3:c2:3f:5f:
a5:ae:54:63:e3:95:e9:61:1f:b4:c2:b8:47:7b:f7:
40:5e:01:c3:d4:0b:c2:4d:5e:76:90:a5:25:5c:5d:
37:af:0b:1e:d7:57:89:80:27:27:45:39:82:04:83:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:E9:0E:E8:37:0F:55:AF:95:1B:FE:0D:E3:F4:B1:46:65:82:79
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZdvpDug3D1WvlRv-DeP0sUZlgnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.46.0/24
Signature Algorithm: sha256WithRSAEncryption
30:75:ce:fb:38:aa:d5:50:7b:34:f5:6b:7f:21:d7:3a:03:29:
c7:ea:89:bf:71:cf:4a:2d:1c:40:c1:8c:26:5f:7a:50:06:4d:
83:7b:ea:76:b4:bc:14:7e:7a:14:c3:b9:c7:b5:f8:f6:1b:70:
d2:01:32:1f:ea:b5:c9:0d:d2:de:4e:a1:43:07:7e:48:e3:81:
ed:c1:39:90:9f:e4:19:fa:83:fb:e7:07:b8:70:fe:ff:c2:67:
d2:56:85:db:08:b7:56:c4:1c:d9:fb:3e:e2:de:48:0e:cb:b9:
21:3c:fc:cd:8e:95:7b:42:1c:11:f7:a2:d9:a1:9c:f1:5c:43:
69:ee:7d:f1:78:b4:36:c8:3a:2b:f5:a0:96:00:eb:bf:db:43:
ec:db:2f:95:4b:aa:af:8f:3f:63:97:79:93:9f:8a:f4:95:36:
f6:89:3b:88:65:f8:86:b7:3b:05:5f:d9:13:ab:3e:29:c2:2c:
fd:45:04:47:58:12:c1:a1:fa:28:99:8b:2d:b5:06:23:7e:b0:
d1:9f:9a:a4:49:a6:8e:33:03:d1:d5:65:6e:c4:9c:d1:00:dc:
41:d0:de:f4:14:26:a4:4e:21:a1:47:fb:48:49:08:9d:64:d6:
9a:ed:8d:91:13:1d:68:42:08:dc:fc:8e:40:67:42:31:1e:46:
88:8c:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:16:17 2025 by rpki-client