Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xZspKoejgkzY79WxqyOa_5Gj0vs.roa
File: xZspKoejgkzY79WxqyOa_5Gj0vs.roa (raw, json)
Hash identifier: KKwwGRk4revCt8WRi3sFdIqHlyy/0hAiIA7lJPvm4fk=
Subject key identifier: C5:9B:29:2A:87:A3:82:4C:D8:EF:D5:B1:AB:23:9A:FF:91:A3:D2:FB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424450F5002314BEDC806B018F353CC8E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xZspKoejgkzY79WxqyOa_5Gj0vs.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 62.68.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0f:50:02:31:4b:ed:c8:06:b0:18:f3:53:cc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c59b292a87a3824cd8efd5b1ab239aff91a3d2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:af:ae:70:91:7a:f4:19:3d:be:b6:00:8f:
fe:9a:af:3d:22:14:c5:93:7d:98:5c:01:e9:a3:01:
8e:e7:bd:d3:58:15:76:a6:2d:4d:54:ac:b6:b9:c6:
08:a5:92:02:d1:4c:3e:5a:c5:ab:aa:24:ca:fc:e3:
95:7b:54:ec:08:85:1c:fb:a2:b1:65:57:be:c4:70:
c0:e7:11:5d:52:1c:0d:9a:45:fd:77:f0:24:b7:24:
2b:85:f7:09:67:ab:c1:7e:c2:8e:61:2a:3b:49:42:
db:40:f8:e7:4c:6f:9d:f5:15:51:03:01:49:b7:a5:
6d:95:ff:a7:2b:14:a6:92:32:5a:06:9c:54:18:eb:
4d:af:be:76:37:f4:b8:eb:e5:47:0f:83:b2:7b:e6:
26:a9:06:c9:af:ff:4d:07:6c:ff:17:6e:29:da:bc:
09:f7:19:e4:fe:8c:24:56:16:28:e2:e6:6c:74:df:
63:3c:6f:3a:81:13:1f:e9:b8:7d:f2:3b:1d:bc:be:
bf:a5:70:1f:91:50:54:e8:11:c4:03:0f:fa:65:64:
54:53:89:ea:63:f4:7e:d4:bc:41:88:3a:78:72:3e:
d7:60:ae:b0:be:bd:fa:88:23:e5:6c:b9:38:31:42:
15:9b:b2:04:0b:90:56:7f:20:2b:c6:5f:01:70:4d:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:29:2A:87:A3:82:4C:D8:EF:D5:B1:AB:23:9A:FF:91:A3:D2:FB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xZspKoejgkzY79WxqyOa_5Gj0vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:37:25:8d:0e:a9:a5:f3:01:a1:40:de:2c:29:a8:62:4c:32:
95:05:17:06:86:75:c5:d1:9a:87:cf:e2:35:bb:4e:16:5e:f6:
4d:06:66:1f:a4:7c:cd:46:d2:d6:e5:83:e0:0d:ed:ae:b3:9d:
09:56:ad:6f:fb:d8:9f:53:60:b4:cd:87:cc:84:ab:0c:61:ea:
3f:22:f0:ba:a0:4e:7e:9c:04:1c:0b:fa:66:39:d4:5b:35:59:
d6:d1:c7:ac:b9:bb:31:cc:7d:2b:a3:34:44:1a:db:df:95:e1:
f4:f2:9e:8c:44:8b:92:cc:5d:97:af:d2:6c:d6:32:2e:2a:1d:
b3:58:44:59:fb:8f:b8:a6:52:4c:9d:2e:9b:7f:f9:cf:64:0b:
c7:d8:f1:21:28:70:a6:d3:bb:39:d7:c2:8f:b8:9a:e6:ab:0f:
f0:65:a2:95:36:ea:86:b6:95:38:b9:30:f8:5e:49:db:fd:9e:
a9:5c:e1:a5:46:a9:07:4d:00:66:fc:06:de:8e:eb:27:d8:f3:
ee:4f:cd:ec:6d:55:4b:7a:01:9c:97:af:f5:40:50:11:d7:f2:
37:83:da:62:e4:75:51:2f:14:26:c1:7d:39:f7:41:ad:5c:21:
4e:7f:5a:77:9c:31:59:3e:ce:c2:f9:5b:82:c4:75:19:76:88:
fc:79:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:54 2025 by rpki-client