Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FhVVLOSaxxu76faY814MnjaKzto.roa
File: FhVVLOSaxxu76faY814MnjaKzto.roa (raw, json)
Hash identifier: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=
Subject key identifier: 16:15:55:2C:E4:9A:C7:1B:BB:E9:F6:98:F3:5E:0C:9E:36:8A:CE:DA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B0FA79F1FCE27E7B6545B1E4500F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FhVVLOSaxxu76faY814MnjaKzto.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:fa:79:f1:fc:e2:7e:7b:65:45:b1:e4:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1615552ce49ac71bbbe9f698f35e0c9e368aceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:4c:90:ba:8e:87:9b:fa:58:35:55:67:79:
2f:49:e5:fe:31:33:82:fd:80:82:83:a3:1e:29:67:
35:a5:ed:65:c1:13:ae:16:21:05:ba:42:fe:be:47:
ba:ab:23:ca:06:8b:09:10:b2:d6:a1:94:24:e4:b5:
47:c2:ff:37:a8:28:2f:d3:75:4c:54:a6:7a:46:e1:
88:0a:fb:28:54:fb:fc:3c:b7:f7:cb:ae:77:9d:ae:
b0:12:13:7c:ec:11:8b:b5:19:f8:71:c8:2f:21:c2:
b3:01:60:a0:99:6d:b2:a5:04:59:09:33:1a:4a:ed:
56:3c:0c:af:e7:cf:77:0e:62:22:bc:a6:2b:09:2e:
7e:db:fc:84:2f:0c:60:81:70:b2:ff:0a:40:d1:0a:
d9:10:05:38:88:36:28:1a:df:d6:2d:b6:cd:b6:af:
10:24:d4:7e:93:32:c5:87:73:35:2b:48:f3:00:1e:
1a:8c:53:e1:1c:aa:5d:c0:03:61:24:f1:51:a7:29:
b1:73:98:42:11:cf:9e:e0:a9:59:4d:f2:aa:68:7a:
eb:68:62:9b:f4:01:d9:7a:2f:66:21:07:16:98:d4:
d7:19:e3:bc:ad:02:64:d9:b0:a9:b9:d1:6f:6a:d6:
2e:fa:61:90:f9:5c:bc:12:df:7d:a8:c5:05:e9:b4:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:55:2C:E4:9A:C7:1B:BB:E9:F6:98:F3:5E:0C:9E:36:8A:CE:DA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FhVVLOSaxxu76faY814MnjaKzto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ec:5c:12:aa:e6:3b:87:ca:5b:e6:9b:a3:1c:90:9d:1c:c2:
e6:8c:52:a3:2f:5d:2b:49:09:05:c0:78:6a:d4:34:07:1c:68:
72:02:f1:ee:3c:ab:50:ca:76:e5:64:23:bc:95:be:91:be:d7:
52:a5:18:62:6c:26:40:f1:19:ce:6a:35:c6:65:f7:7a:39:e0:
5a:64:9f:45:65:02:5e:fe:de:6d:c8:bd:36:37:03:50:77:a0:
6a:e9:71:1b:b6:f1:aa:38:16:12:af:67:4e:48:4e:ff:65:a3:
b0:37:a1:db:24:20:a4:28:df:1a:a0:37:b6:5e:cd:8f:30:20:
90:7e:ff:10:1f:4c:4c:a7:35:93:79:6a:62:5b:d4:cc:16:5d:
c1:e3:91:20:a4:bb:db:2f:78:34:3b:9a:19:76:15:54:dc:ca:
c1:6c:18:7f:57:77:f9:73:72:9d:c9:b2:f3:32:a0:b7:5c:34:
b8:a7:93:01:74:54:2f:b0:b3:d2:8f:15:42:5e:3f:ae:4b:d5:
42:63:72:12:82:3e:20:9f:e4:13:de:56:17:ad:e0:1d:05:0b:
88:13:47:73:b2:84:e1:34:c8:38:d3:c9:4c:eb:b4:e7:57:c2:
5d:ed:a6:78:cc:ba:f4:aa:70:76:ac:b7:c4:ee:0e:c2:82:36:
04:93:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:12 2025 by rpki-client