Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa
File: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (raw, json)
Hash identifier: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=
Subject key identifier: EE:2D:C4:94:3E:48:70:EB:70:47:B3:79:C1:7C:D1:D6:65:65:36:CC
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 019423D6DED362D186A050E245E90C2C7249
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47641
IP address blocks: 139.28.60.0/22 maxlen: 24
2a09:f580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:de:d3:62:d1:86:a0:50:e2:45:e9:0c:2c:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee2dc4943e4870eb7047b379c17cd1d6656536cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:24:1b:97:24:9d:3d:60:ed:48:8f:d4:43:
49:cb:e8:b0:18:0c:dc:8f:0e:c3:ef:cf:f8:6f:33:
5f:6d:cd:57:d3:e8:59:02:28:43:13:a3:ea:56:2e:
b6:3a:fe:73:0f:3f:a1:52:b2:f8:82:b9:1c:3e:04:
43:97:d8:b4:ca:cf:58:25:97:d2:4a:80:46:27:52:
c4:4e:a9:86:7a:41:54:c1:ee:0c:fe:8e:f0:4d:af:
ec:1a:69:8b:80:fa:30:6e:6c:ac:8b:3b:9f:2e:fc:
ed:c6:fb:07:2d:00:95:11:93:99:1d:11:92:63:8b:
70:67:6e:b3:53:7b:09:a1:41:67:ce:47:d1:fb:f7:
a2:de:da:72:ad:fe:b8:0f:36:09:c2:99:5a:55:d9:
b8:a7:6b:7a:a0:ef:1a:fb:27:92:ee:f9:21:1a:69:
c5:9c:24:f9:d6:7e:c4:a5:34:b9:89:b2:42:2a:35:
4d:29:63:28:fd:56:77:4e:fb:7d:11:2f:25:29:9d:
fa:25:7e:54:2c:a6:ba:3e:2b:1a:58:f8:f4:ec:81:
89:eb:da:b6:cf:91:ba:5c:cd:be:8e:3a:28:e8:c8:
cc:01:db:bf:0e:f6:73:1e:55:e0:ae:89:d0:ce:f2:
7a:7a:4a:79:ff:08:66:c6:90:23:0b:3c:37:1b:73:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:C4:94:3E:48:70:EB:70:47:B3:79:C1:7C:D1:D6:65:65:36:CC
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.60.0/22
IPv6:
2a09:f580::/29
Signature Algorithm: sha256WithRSAEncryption
47:3d:55:3c:e6:be:c9:51:13:85:d0:f4:c6:fa:ac:b6:ff:88:
48:ec:56:ba:e8:df:00:9d:c3:02:bc:5d:1d:ab:c2:7e:2d:9d:
4a:46:0e:8e:59:bf:0d:f5:46:e8:c6:56:fe:59:ec:dc:43:22:
9d:ea:6d:74:04:73:a4:46:48:d0:c7:08:bb:3e:b4:43:ac:3b:
72:cb:b2:1b:9a:b9:1b:4f:4b:b2:e1:f4:0e:f3:bc:29:7e:27:
15:73:d5:64:18:63:50:18:2c:b7:99:e8:3d:70:ca:e7:6b:5c:
bd:c5:04:cb:73:f7:19:33:18:6e:67:9f:17:b4:7a:75:c0:4f:
1e:49:16:c4:1e:97:cc:07:8e:fd:1e:5d:45:36:96:68:da:25:
ec:1f:96:94:30:0d:44:25:81:62:9d:b7:f2:f4:0b:08:92:88:
e7:f6:90:19:e0:21:69:5c:2d:5f:ac:90:13:a4:f1:11:a4:6a:
fa:b2:db:c7:09:61:4c:5a:71:c2:3e:35:31:61:e9:a9:2b:e9:
d9:cf:c9:8a:63:f7:34:06:db:6e:b8:fa:34:1d:da:f8:15:22:
43:01:1f:49:20:99:37:bb:aa:4e:ef:6d:83:60:9a:a9:3c:ee:
8d:19:14:9a:c1:7e:cc:64:80:d0:22:49:c5:be:0c:35:b3:a6:
0e:7b:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:41 2025 by rpki-client