Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8b5XsU_ykhlua86XBDQUS1Mo7FI.roa
File: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (raw, json)
Hash identifier: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=
Subject key identifier: F1:BE:57:B1:4F:F2:92:19:6E:6B:CE:97:04:34:14:4B:53:28:EC:52
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B4230850E7D3896870E670D90BCC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8b5XsU_ykhlua86XBDQUS1Mo7FI.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 62.72.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b4:23:08:50:e7:d3:89:68:70:e6:70:d9:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1be57b14ff292196e6bce970434144b5328ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:0c:1d:ae:e4:fe:90:cf:b5:ef:9c:87:57:
17:de:aa:26:b7:55:c4:18:81:ad:41:02:74:57:83:
36:9d:12:b6:58:9a:2a:36:2d:96:e9:c9:67:67:52:
4c:10:a4:20:b2:02:5f:d3:b8:6b:94:5f:90:b7:35:
33:40:1b:92:7f:52:e8:d6:cd:20:8c:ba:c8:26:be:
ac:94:72:64:c6:0f:2f:64:dc:cf:f0:e6:6f:33:18:
dc:4f:74:19:ec:4e:5e:27:cd:bd:2a:7a:77:af:f1:
7e:54:6e:18:5f:3a:2b:7f:3f:37:48:86:8d:4a:ec:
1b:4d:fb:d8:10:3f:70:45:50:4f:29:4b:a2:1a:67:
dc:3b:d8:54:b4:97:d1:54:c2:ad:2f:75:b7:73:5f:
2b:82:62:27:43:9b:60:bd:7f:92:b3:0b:d5:8d:42:
73:b4:e5:91:f3:17:ef:36:54:a9:7f:bc:a4:3b:45:
c0:ff:e7:5c:07:2d:14:d6:14:31:cf:ef:76:c8:cc:
64:d6:a8:ee:a5:14:6b:00:0d:66:54:a4:ac:86:9f:
e3:e7:af:1e:17:53:11:3e:ad:f4:0c:62:af:58:b3:
d5:4c:5f:7b:f4:f0:28:82:76:e7:1e:91:ae:4d:2f:
c8:5f:01:fd:54:6f:dd:92:c1:19:ed:ef:39:1a:12:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BE:57:B1:4F:F2:92:19:6E:6B:CE:97:04:34:14:4B:53:28:EC:52
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8b5XsU_ykhlua86XBDQUS1Mo7FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3a:05:0d:80:80:60:e1:f0:4c:60:27:bc:0e:26:44:d5:44:
8e:b4:bf:2c:a4:a5:68:4f:81:5e:59:b2:b0:2b:64:c0:85:8a:
84:06:db:4e:1b:47:7a:98:a1:17:6c:c2:e0:b5:0d:a9:61:59:
1c:e7:eb:26:28:e1:16:15:69:e1:5f:75:e1:59:4a:52:16:0b:
5a:8f:89:57:11:ce:e5:8e:b5:7f:08:09:11:73:ec:17:a3:ac:
a2:83:fc:2d:2a:51:83:e4:33:bd:a2:9f:a5:a8:30:c7:b4:3a:
02:83:92:f8:91:e0:58:2b:e1:8a:47:86:db:75:7c:31:fd:8a:
76:34:43:cc:d5:39:b2:d2:90:07:fe:8f:1e:f0:73:4b:56:54:
e6:de:6e:4c:f9:b1:f8:74:11:a6:49:c3:40:c5:17:6c:e9:1b:
d2:04:67:93:67:22:2e:06:45:4f:3c:e4:92:95:9b:06:2a:10:
51:63:2c:1c:99:88:9e:e9:a6:1d:96:8b:fa:fc:ae:7f:6a:d2:
21:92:25:25:e3:59:a0:2e:3f:f0:4b:86:07:22:62:4f:fc:b8:
be:6c:18:a0:c7:a1:8b:77:ef:8e:dc:14:eb:43:6e:fb:01:87:
f9:63:29:ab:8f:6f:56:ca:7e:46:00:bd:c0:66:7b:5d:0d:4b:
2a:53:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:22 2025 by rpki-client