Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/_BQI9-Z6Ir5h5KACcOfrToSjkeU.roa
File: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (raw, json)
Hash identifier: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=
Subject key identifier: FC:14:08:F7:E6:7A:22:BE:61:E4:A0:02:70:E7:EB:4E:84:A3:91:E5
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019427B5FB18CDBCA4EDDA6B890DD6E9DE93
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/_BQI9-Z6Ir5h5KACcOfrToSjkeU.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
62.108.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fb:18:cd:bc:a4:ed:da:6b:89:0d:d6:e9:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1408f7e67a22be61e4a00270e7eb4e84a391e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:bf:93:9a:da:f3:30:0a:6e:86:0e:2d:bc:
57:ea:4a:79:c2:3a:d0:33:74:d3:8c:dc:fe:a9:52:
f9:6a:eb:16:33:71:4b:cd:c3:18:4e:73:55:2a:5f:
f0:6c:ed:43:85:f1:af:e1:e3:8b:51:79:c0:cf:f8:
f3:95:22:60:24:25:ff:29:76:3d:36:3f:ca:06:6c:
59:6c:9f:7d:dc:7d:6a:59:37:03:30:99:de:26:1d:
ea:3c:01:cf:14:3e:5d:fa:53:08:41:fb:62:29:ce:
d0:1a:28:97:c9:63:9e:3f:ce:c7:fe:f5:c4:93:f6:
eb:bb:fb:90:ca:d7:ba:03:ed:8f:a2:22:c2:84:d1:
fc:45:83:6b:39:bc:d0:6a:ec:d8:02:74:cf:4c:7a:
8d:07:c3:d1:8b:91:9e:82:91:30:73:c7:ac:76:60:
b3:84:81:30:64:6d:f2:b4:b2:ed:41:c2:ce:82:59:
bf:d5:ec:bb:6b:8c:20:b9:71:ac:e4:74:4d:ce:3c:
ab:b0:ad:58:e9:8d:a6:75:76:a0:c3:c3:fb:34:e8:
db:e1:df:e7:f7:76:c6:75:98:d6:b9:05:fe:df:3d:
f9:ce:85:75:16:34:48:74:8c:23:db:56:ce:75:a5:
5e:61:d8:27:54:47:0a:7e:8c:5d:c3:fd:ef:80:13:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:08:F7:E6:7A:22:BE:61:E4:A0:02:70:E7:EB:4E:84:A3:91:E5
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/_BQI9-Z6Ir5h5KACcOfrToSjkeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/20
Signature Algorithm: sha256WithRSAEncryption
34:fb:d6:7c:b4:e1:49:f5:de:cb:1d:0c:60:4e:a6:a3:04:ce:
f7:fc:1a:13:28:a6:61:cc:a6:91:1e:80:c0:19:5c:8b:3f:ff:
11:83:61:a3:a9:61:fd:9b:e2:2e:ac:a8:be:49:2d:55:60:01:
f6:76:da:d7:1d:b3:59:1f:83:26:a5:66:02:a2:63:7a:22:fb:
72:de:fd:f1:1f:c8:be:37:5e:1f:05:7a:ef:28:a7:d5:c5:94:
dd:a9:7e:11:4c:fb:7b:fb:d2:79:99:d6:db:d6:07:83:57:c3:
fa:31:92:e8:df:d6:4f:b2:ba:56:9b:cd:81:20:2e:81:89:b4:
42:45:76:ce:a3:68:24:ad:3e:ed:91:33:9e:1d:28:27:e3:df:
af:84:66:8a:3e:32:e7:01:3b:af:6b:3f:ed:b7:84:a1:e8:17:
f6:9f:f0:4b:c5:30:b7:b9:a6:8e:ff:63:ac:39:4f:87:c5:1b:
00:96:e7:6b:8a:1e:ef:e8:6a:47:f7:00:a3:1c:65:d9:f1:57:
1b:22:f6:fb:66:ac:98:34:c2:c2:39:9c:c0:4b:f3:0b:06:e2:
ae:2a:de:b9:8a:07:4c:3f:98:92:ac:3d:4d:91:83:90:fd:fd:
1f:ef:fd:7d:41:64:93:51:62:3b:85:69:7b:4d:5b:08:a0:af:
98:79:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:46 2025 by rpki-client