Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7D86KP-TMsbam8_lLT2JJcb4SW8.roa
File: 7D86KP-TMsbam8_lLT2JJcb4SW8.roa (raw, json)
Hash identifier: obH4dQt/Oli63a0jpBviDAMO3/OUG4X9389knU++zyk=
Subject key identifier: EC:3F:3A:28:FF:93:32:C6:DA:9B:CF:E5:2D:3D:89:25:C6:F8:49:6F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A9836E2ECC21AAF52B732853BD04
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7D86KP-TMsbam8_lLT2JJcb4SW8.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60849
IP address blocks: 62.72.165.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a9:83:6e:2e:cc:21:aa:f5:2b:73:28:53:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec3f3a28ff9332c6da9bcfe52d3d8925c6f8496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:1d:e2:bc:43:25:dd:f8:64:da:48:24:0c:
d5:51:35:75:73:5c:e2:bc:e3:cb:05:21:b7:c7:bb:
38:3c:74:9c:4a:b1:ad:1e:65:1a:35:ff:b1:9b:5f:
d7:ce:cf:71:88:d6:05:60:3d:59:17:54:ae:c7:59:
01:bb:76:3d:a6:8b:bf:2f:93:24:2b:13:26:07:7e:
7a:1e:9a:9a:50:e5:8e:44:92:f0:1f:f3:ea:91:13:
4a:8b:90:d3:61:92:c9:0b:a9:10:33:5d:91:e9:16:
0f:7c:81:a4:f1:51:ed:01:d3:63:e9:8b:61:0f:db:
34:cc:23:53:ac:d1:b4:57:3e:68:3d:e1:8a:d4:70:
60:67:c9:04:c8:bf:e8:ab:64:82:4e:51:75:7e:47:
eb:54:ae:1e:b5:79:a1:3c:ed:0f:41:7d:77:27:44:
24:c4:4c:2e:f1:16:7b:3c:80:39:18:f3:07:1e:83:
88:68:22:1e:af:3c:83:ef:b2:92:c8:e6:d2:75:ef:
55:68:24:fa:63:48:90:7e:64:74:01:1c:16:96:86:
5c:53:8f:f1:36:36:ee:5b:4c:d0:44:f4:ab:04:ed:
06:55:7f:19:ac:dd:43:fd:09:98:03:90:a4:dc:89:
88:9f:da:82:24:f0:65:5f:49:ac:26:bb:a4:05:88:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:3A:28:FF:93:32:C6:DA:9B:CF:E5:2D:3D:89:25:C6:F8:49:6F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7D86KP-TMsbam8_lLT2JJcb4SW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0/24
62.72.167.0/24
62.72.169.0/24
62.72.179.0/24
62.72.186.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0a:fd:70:15:9a:d1:08:61:77:1d:67:db:6e:48:5c:5a:28:
e2:d7:ae:5e:60:2c:6f:70:26:9e:0e:96:6b:76:3f:7c:75:6e:
52:6c:73:28:0a:e1:6e:7d:ce:14:bf:f3:66:da:6d:c4:84:93:
79:b7:ec:ee:aa:ed:25:08:69:a5:7e:9a:ba:76:17:f6:fd:1c:
12:a7:6a:19:3c:1d:e2:36:cb:ca:5d:18:2c:fc:42:ba:3d:98:
80:fe:5e:8d:2e:16:fd:13:ba:8f:eb:ab:db:b2:87:c2:9d:3d:
88:78:85:4c:c8:c1:ae:92:2a:34:bc:b4:46:55:c1:81:50:d4:
98:01:99:cd:ae:2d:d0:e2:47:02:3c:ac:a5:33:1e:fb:df:9a:
16:40:0f:d9:c7:37:4c:c9:7f:46:df:0a:44:c7:f4:00:33:0e:
01:0a:57:98:9e:2b:d6:27:11:38:9c:74:51:1a:c9:e0:0b:73:
96:d7:60:ad:0f:2a:58:9e:98:b9:2e:d4:d0:9a:d2:17:bf:94:
eb:1d:d5:67:cf:cd:08:dd:93:d7:86:58:bc:71:4d:9c:cf:22:
43:c7:35:93:08:e5:f1:f4:8f:10:b3:9c:ec:ba:6a:2d:f5:f6:
46:df:7f:a2:59:8a:70:9f:5a:cc:7f:f5:ef:b3:2f:db:f9:32:
de:58:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:58 2025 by rpki-client