Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j3pUMTdtnLiViRR7FHPAKqkQk30.roa
File: j3pUMTdtnLiViRR7FHPAKqkQk30.roa (raw, json)
Hash identifier: qkzI0Lxs+SIXBuMXj8OGs4HlUdAwaN22LXfkCWuZmMA=
Subject key identifier: 8F:7A:54:31:37:6D:9C:B8:95:89:14:7B:14:73:C0:2A:A9:10:93:7D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA884BE096B6D9F82014B24E2645E6
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j3pUMTdtnLiViRR7FHPAKqkQk30.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.65.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:4b:e0:96:b6:d9:f8:20:14:b2:4e:26:45:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7a5431376d9cb89589147b1473c02aa910937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:22:2e:a7:e6:1e:2f:8f:4e:92:7d:c8:90:
2f:1c:11:1e:18:f1:d1:c3:dc:c1:87:65:2f:4e:ac:
54:c7:19:2c:b3:a5:c5:2a:d9:2e:c2:6c:bc:d3:54:
5f:fb:d4:97:9a:01:a1:bf:1c:f4:13:9f:24:4d:7a:
8b:fb:b8:2b:26:3d:63:77:ff:09:9f:6f:18:35:00:
22:8e:13:0b:d7:41:a0:0e:b4:96:23:86:ed:3d:75:
41:26:05:48:39:bf:46:8e:c0:e5:f0:3a:6a:be:73:
3d:ac:41:ff:c1:e6:7f:fd:67:d7:e5:67:d5:b4:2e:
d4:b2:4a:e8:dd:c8:49:fb:c6:4e:1a:00:22:3b:66:
42:2c:9e:eb:b4:78:88:2d:ef:34:bd:2d:d8:e9:46:
9e:d1:18:89:4e:e9:12:06:55:c4:86:e4:90:8d:c6:
ab:2c:24:82:85:4e:86:9d:72:39:8e:57:24:67:08:
83:1e:c0:66:95:e3:d5:78:ec:90:30:45:1f:74:73:
e7:22:d8:28:fa:87:74:6a:9b:68:cd:83:c7:5e:01:
6e:d9:f3:44:95:4b:fe:f2:9c:00:97:48:7a:65:fa:
3a:7e:75:d8:df:3a:0e:41:ea:ed:0c:87:13:66:55:
93:59:80:d7:0b:c4:87:13:5e:25:1d:6b:55:7b:30:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:54:31:37:6D:9C:B8:95:89:14:7B:14:73:C0:2A:A9:10:93:7D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j3pUMTdtnLiViRR7FHPAKqkQk30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
49:66:91:d1:60:19:f3:6a:91:1e:f3:69:d4:52:48:de:76:c3:
7d:bf:95:a2:6b:e3:b0:71:a0:d4:09:33:1e:77:1a:b1:71:9e:
65:87:a1:01:aa:86:c3:64:a0:2a:e1:8a:a5:06:4a:2c:d3:ca:
ad:cf:5c:bc:d0:ba:b9:f1:46:9d:90:43:fa:45:fb:0b:df:a1:
d6:1c:0e:6a:e2:68:71:7f:93:67:3e:e2:25:78:68:17:b4:63:
df:c4:5f:5b:8e:0f:55:7e:d2:50:0e:ca:37:bc:ba:a9:f1:41:
61:82:f8:e8:64:62:88:87:07:aa:7f:75:89:c1:75:e9:05:dd:
52:d7:3e:c2:ce:a0:7e:39:7e:c1:3e:a2:c8:37:a1:3c:6d:ac:
ea:07:28:6d:4b:b3:86:c8:2e:66:78:8a:cc:ce:b5:e9:d6:92:
b2:6a:cd:8d:a5:d7:75:fe:de:bd:7a:87:a3:60:4d:50:46:a0:
85:78:0f:73:11:e1:29:8a:00:c0:55:4d:f7:07:a0:8f:8a:a0:
8b:51:15:56:92:2a:cf:1a:ec:59:7f:5f:b1:cc:1e:03:6c:20:
b2:29:f7:54:e6:80:95:a8:c2:94:9e:ee:4b:4f:14:1b:5b:bb:
9d:b4:b6:2e:f7:5f:05:fb:18:8c:f0:9b:ae:95:82:e9:ed:e3:
af:e0:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:59 2025 by rpki-client