Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/X8AY7TE63_MLYw5qzgUDNFtz5p0.roa
File: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (raw, json)
Hash identifier: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=
Subject key identifier: 5F:C0:18:ED:31:3A:DF:F3:0B:63:0E:6A:CE:05:03:34:5B:73:E6:9D
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01942067FDCC4F2BAEF095158795B4773858
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/X8AY7TE63_MLYw5qzgUDNFtz5p0.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15472
IP address blocks: 62.100.64.0/21 maxlen: 21
62.100.72.0/23 maxlen: 23
62.100.85.0/24 maxlen: 24
62.100.88.0/21 maxlen: 21
62.100.88.0/23 maxlen: 23
62.100.91.0/24 maxlen: 24
62.100.92.0/22 maxlen: 22
185.193.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fd:cc:4f:2b:ae:f0:95:15:87:95:b4:77:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc018ed313adff30b630e6ace0503345b73e69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:94:5b:be:e8:7e:50:87:a2:8d:45:5e:1c:
da:d8:46:c0:ee:7a:e3:0e:05:b1:47:0d:c8:e0:fe:
25:98:4b:a6:74:01:1b:37:15:fe:53:b3:80:cd:29:
c5:66:87:cf:aa:a3:e0:f6:2d:f5:70:23:85:92:32:
0e:77:d0:c6:06:bd:80:f9:26:ca:f7:36:63:82:cd:
e6:b9:0d:5e:34:e5:eb:69:ed:e6:70:de:40:aa:0a:
d0:f9:27:c3:88:39:1d:f4:72:1d:e5:f6:6b:5a:88:
90:f4:d1:93:97:6e:0d:01:55:4f:ac:0e:e8:01:ee:
4c:cb:4d:2a:ac:08:1c:35:e9:43:0c:35:6e:14:5d:
a3:10:75:70:d7:73:d2:41:80:9e:5e:6d:85:db:9f:
0a:6e:30:85:fb:6b:96:de:48:8b:81:60:70:70:60:
e7:6b:5e:3a:d0:e8:f0:61:c1:9d:c8:71:bb:47:5c:
e0:ed:bd:45:4c:4d:1a:9d:d9:1c:33:41:63:7a:ed:
1f:5d:1a:89:55:68:cd:33:f5:22:b0:40:f6:75:3d:
e5:53:52:92:a8:c6:2a:83:6e:cb:f1:6f:6f:fa:0b:
12:19:62:72:95:48:d6:24:f9:de:e2:c9:6d:f3:09:
cb:fa:f7:2d:b8:bc:d7:7b:be:31:0b:23:42:ab:88:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:18:ED:31:3A:DF:F3:0B:63:0E:6A:CE:05:03:34:5B:73:E6:9D
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/X8AY7TE63_MLYw5qzgUDNFtz5p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.64.0-62.100.73.255
62.100.85.0/24
62.100.88.0/21
185.193.188.0/22
Signature Algorithm: sha256WithRSAEncryption
41:0c:51:82:95:b0:7e:ef:2c:a8:ff:fa:3e:3f:f2:53:31:f4:
74:be:55:de:5b:6d:85:ee:87:8d:3c:d6:94:e8:1b:e6:75:1e:
6a:3f:e0:eb:b7:23:41:da:c0:a3:22:13:bb:61:f6:26:0a:e4:
b4:1f:39:07:0d:51:ef:c0:86:a2:e7:d5:98:20:41:0a:a6:4f:
1d:dc:59:c0:d7:cd:c1:48:f4:d3:c5:53:7b:e2:70:79:59:12:
92:1a:9a:11:4d:e6:76:b4:3b:c3:6e:b1:da:15:fb:e1:bf:66:
b9:ff:1e:67:bf:d4:95:02:07:85:65:9b:5c:ba:4b:f6:5e:f7:
a1:64:7f:9d:51:c7:eb:5c:49:e6:67:02:f0:06:58:ae:04:50:
37:09:f5:f7:40:33:4b:15:8a:e0:93:ed:17:c4:a0:d1:3b:95:
63:72:27:c9:41:47:5c:ea:ee:33:18:7c:02:d4:a4:c7:5b:d2:
9b:82:36:aa:f2:6d:1f:cb:58:2f:c4:1e:d8:12:29:69:78:37:
9d:40:bc:91:bd:11:7d:03:a0:9f:50:f8:8b:be:a8:52:15:ff:
a6:26:95:d5:49:ea:f4:82:66:d7:22:13:bb:9b:08:df:c5:f7:
b8:e8:07:4d:b2:74:60:b1:0e:6c:2a:8a:3c:fc:45:ed:12:82:
89:0b:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:03:07 2025 by rpki-client