Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/067eNclGefF3m0OGTTUCn5XCP1g.roa
File: 067eNclGefF3m0OGTTUCn5XCP1g.roa (raw, json)
Hash identifier: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=
Subject key identifier: D3:AE:DE:35:C9:46:79:F1:77:9B:43:86:4D:35:02:9F:95:C2:3F:58
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0196EC7237F4C7CE4A0DFA0732D734767AC7
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/067eNclGefF3m0OGTTUCn5XCP1g.roa
Signing time: Tue 20 May 2025 06:47:10 +0000
ROA not before: Tue 20 May 2025 06:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206505
IP address blocks: 62.3.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:72:37:f4:c7:ce:4a:0d:fa:07:32:d7:34:76:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: May 20 06:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3aede35c94679f1779b43864d35029f95c23f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:e4:07:90:5c:07:4f:b3:15:47:96:11:16:
30:e5:93:3c:99:e5:83:a6:6e:7e:14:7e:3d:4f:bc:
94:0f:d6:87:e5:e8:52:e4:5d:20:5d:1d:94:13:d6:
91:dd:e2:49:62:8f:0a:4e:ed:e2:5a:05:41:8a:80:
83:2c:e1:02:d9:7b:72:58:11:c9:ab:7c:26:3c:8e:
d9:56:36:ea:5b:09:61:43:6e:bd:eb:43:3c:aa:5e:
a5:50:47:eb:8c:81:db:0f:c8:e6:d8:9c:f9:6c:ed:
64:73:56:06:40:fd:37:46:a9:e7:0b:a9:50:64:95:
a0:64:b4:59:ae:a2:f5:aa:26:53:e6:d2:09:42:19:
2d:8f:3d:b9:33:3a:c2:b4:5e:d0:5b:ae:d8:63:c4:
76:34:02:5e:e7:07:41:4a:0b:b3:a1:33:1c:58:72:
c2:49:41:f4:5c:ba:6e:47:67:f6:e4:fe:41:1b:03:
85:79:5a:51:9c:ae:e4:23:c0:86:47:5b:ff:0c:57:
f9:3b:d5:e1:8c:29:63:b0:58:7b:92:cd:c6:c5:bb:
b9:22:c0:30:62:fb:96:1b:80:90:10:2c:06:32:b3:
24:e5:a6:02:f4:f5:a0:51:01:f7:6c:70:6e:0f:9c:
dd:e0:13:17:f4:39:59:29:79:cf:e9:4c:ac:9e:cc:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:DE:35:C9:46:79:F1:77:9B:43:86:4D:35:02:9F:95:C2:3F:58
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/067eNclGefF3m0OGTTUCn5XCP1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.35.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:09:7a:05:84:c1:fc:9c:40:60:97:a1:95:c7:b7:95:ab:5d:
6b:4e:b0:d3:ba:45:41:67:9f:07:94:b7:c2:11:8e:df:8f:51:
88:ae:da:4b:99:44:36:1d:c6:5e:7c:52:ba:fe:d7:48:91:96:
db:d9:66:bf:17:88:6a:30:62:45:64:9a:09:a8:7c:69:ab:df:
15:9f:11:1b:6f:d9:6f:b3:48:7c:18:7f:e5:e5:ad:43:3b:34:
26:95:34:28:f2:8a:77:0c:69:db:12:f8:75:a5:a6:a6:3d:05:
cf:e2:e4:65:fc:e0:8e:04:66:7e:ef:e8:d4:d5:50:49:64:ff:
d2:07:79:d8:7b:6d:c3:0d:3f:97:d7:bb:c3:1e:96:75:bf:4f:
68:df:80:1e:10:10:c7:51:43:b7:1f:14:ac:4b:16:76:dc:87:
07:71:81:46:aa:72:d3:52:8e:18:18:5e:5a:cc:ad:b0:0f:2d:
88:73:76:e4:10:e7:a5:77:81:44:1a:bd:3b:01:24:66:c8:67:
fd:ef:24:3f:8d:4f:db:55:0e:04:4a:db:11:4b:65:b0:6d:9a:
10:cd:4e:2c:2a:44:d1:77:77:7c:59:68:79:66:12:09:5d:2c:
a2:0d:2a:3c:9e:99:e8:37:8e:a1:ec:29:db:6c:98:fb:fb:4d:
51:52:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:11:46 2025 by rpki-client