Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7q0WrWMejy7wbR787YAaoWGbJFQ.roa
File: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (raw, json)
Hash identifier: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=
Subject key identifier: EE:AD:16:AD:63:1E:8F:2E:F0:6D:1E:FC:ED:80:1A:A1:61:9B:24:54
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 0196E55191BD81F00B6A206696F0498F355C
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7q0WrWMejy7wbR787YAaoWGbJFQ.roa
Signing time: Sun 18 May 2025 21:34:10 +0000
ROA not before: Sun 18 May 2025 21:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3302
IP address blocks: 62.100.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e5:51:91:bd:81:f0:0b:6a:20:66:96:f0:49:8f:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: May 18 21:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eead16ad631e8f2ef06d1efced801aa1619b2454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8f:97:06:a7:82:77:bb:1a:a6:33:f8:47:19:
b4:ca:67:14:05:81:20:6f:8c:1c:8f:2a:48:bb:74:
f3:f8:5b:51:a0:bc:ee:68:9d:ac:b4:e1:29:e8:20:
9f:b9:2c:60:fa:a0:78:26:38:8f:22:5f:48:86:2d:
7a:af:9e:ca:62:5c:83:3a:20:e9:93:f9:c5:d9:cd:
0d:70:bd:00:1f:47:53:a3:4e:5b:a2:aa:43:70:22:
ac:5a:01:5d:69:1a:32:d0:9a:0f:0c:36:b5:96:1d:
7c:7d:76:cc:87:1b:cc:d4:4e:5f:ed:5c:63:93:4a:
c9:0d:50:91:77:25:60:8d:83:8e:db:db:fa:53:02:
b9:7e:b9:b6:bf:30:32:b4:43:76:30:58:7e:58:ee:
08:10:6f:8f:06:ec:45:fc:c4:fa:a5:a8:14:87:db:
0d:0a:40:71:fa:20:b1:11:2c:a5:29:f1:d7:e5:87:
f5:2b:41:7a:c5:b5:7d:54:48:5d:e8:d3:87:bf:e6:
95:66:5d:d7:55:44:a7:4a:be:39:80:b7:da:70:8d:
e3:cb:75:ea:da:5c:1d:8c:c5:8e:7c:53:38:0e:01:
67:6f:10:3b:2a:2c:0d:78:a9:e0:63:91:b7:6a:e3:
07:3f:cf:dc:eb:df:8b:91:45:d0:aa:47:67:d6:c3:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AD:16:AD:63:1E:8F:2E:F0:6D:1E:FC:ED:80:1A:A1:61:9B:24:54
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/7q0WrWMejy7wbR787YAaoWGbJFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.76.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ce:9d:67:a4:f1:6c:68:b8:45:76:5b:1a:cf:12:3c:70:1a:
34:37:ef:d1:ee:f9:dd:eb:43:59:cd:fd:05:be:fb:83:46:11:
60:49:d6:67:c5:3a:1e:bc:b1:7e:36:33:dd:e5:01:a4:6c:14:
27:db:cc:86:71:62:a3:3f:47:24:0d:cf:95:48:62:6e:5d:cf:
54:d5:c2:89:dd:4a:b1:d4:c9:b9:00:b9:cb:e6:3f:29:48:17:
27:1b:9e:bd:5d:aa:5c:ae:3b:bf:92:94:b3:e4:cb:b2:a0:67:
bc:75:09:8e:e3:c8:75:3a:3e:49:44:e3:64:88:fe:8b:5d:15:
a1:92:9f:c3:65:e9:96:60:df:81:bd:b3:94:4f:8c:ec:26:f1:
1c:b2:f9:01:60:75:77:5a:29:42:15:96:eb:c2:7a:38:83:57:
fe:17:3e:94:23:b4:96:2e:be:2d:81:99:4c:38:79:a8:3d:2c:
74:6d:22:7d:d9:bd:7c:27:20:fc:d3:3a:c6:11:3c:e5:dd:72:
c3:8c:d3:97:7b:1a:64:0a:77:c9:05:47:8a:d3:2b:74:72:39:
f0:cb:d3:17:f7:85:98:80:41:f6:7c:40:ed:d7:bd:6b:9e:a2:
b6:31:e3:2f:f8:9b:d4:82:50:96:c8:97:c4:e8:1f:bc:d3:70:
8f:9e:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:39:53 2025 by rpki-client