Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/N1O6PL9UFvK9gufJwrqToqlXWnM.roa
File: N1O6PL9UFvK9gufJwrqToqlXWnM.roa (raw, json)
Hash identifier: 42lFDFK45bmrsBoeSO/8+TJTW9TgvHQqbUki/a8F01w=
Subject key identifier: 37:53:BA:3C:BF:54:16:F2:BD:82:E7:C9:C2:BA:93:A2:A9:57:5A:73
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A391238071E326D0F591930267FB
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/N1O6PL9UFvK9gufJwrqToqlXWnM.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 62.72.172.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a3:91:23:80:71:e3:26:d0:f5:91:93:02:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3753ba3cbf5416f2bd82e7c9c2ba93a2a9575a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:4f:ba:38:83:ba:1c:31:a4:f4:5a:c9:ba:
93:53:7e:5b:43:60:ee:6b:1b:d0:3c:d3:cf:b7:29:
fd:77:c6:22:91:f0:64:4e:6e:ae:e7:15:c7:f6:44:
04:ff:d1:3e:f3:fa:3e:ed:1d:de:05:ae:04:01:e6:
81:68:60:01:d6:40:19:0c:1d:06:d9:20:d2:8f:72:
d7:03:7e:f3:06:b3:92:16:56:b4:42:83:42:ea:3d:
98:b5:7c:de:51:64:57:2f:ac:c4:2c:d5:10:03:f7:
9c:35:a6:1b:d7:fc:1d:c1:60:66:a2:4c:d4:8b:e5:
cb:87:3a:da:b2:d6:d9:0a:9b:41:47:77:69:1d:fa:
c1:0f:0b:ba:57:81:d5:f6:f6:d9:20:de:8b:d8:8f:
c5:8b:5b:05:b6:f8:c8:0c:64:58:2c:fb:dc:07:f5:
db:35:16:85:08:26:73:7d:82:d7:9c:38:e3:a1:9a:
00:78:1a:b8:c5:55:49:dc:0e:01:9a:4b:b4:a1:18:
98:55:d1:ec:1c:89:39:3f:da:6c:7a:6a:30:ad:e8:
a0:ad:3c:ee:01:22:78:23:6f:29:74:8b:22:45:c9:
54:da:19:cb:c2:8a:a5:ed:45:c5:30:ac:c9:a7:ff:
a7:47:67:20:40:25:86:10:55:17:85:e5:bc:a6:f4:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:BA:3C:BF:54:16:F2:BD:82:E7:C9:C2:BA:93:A2:A9:57:5A:73
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/N1O6PL9UFvK9gufJwrqToqlXWnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/24
176.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:4f:f3:8d:a6:9d:8c:11:5e:70:79:42:dd:ca:5a:63:39:
22:57:0e:1f:97:d9:ed:67:e7:50:84:c4:5e:c4:39:7c:23:8e:
82:93:ab:1e:ac:92:9d:0c:16:ce:ad:cb:06:76:94:8e:3a:15:
a9:48:44:c5:e6:4f:2a:e4:38:5b:b8:4d:11:fe:1f:15:b8:b7:
82:7e:e2:f7:b4:f9:88:0a:c9:49:f8:12:53:7c:1f:bc:f5:34:
01:e5:df:6a:3c:77:f8:8e:4c:cf:da:35:7b:6c:26:03:76:c6:
59:9f:44:17:ac:77:09:a7:fa:e0:88:43:80:ae:85:c9:ba:1f:
e2:1f:88:2a:bb:71:08:70:11:4a:70:fa:5a:95:c5:9b:d2:18:
24:d1:fe:1b:d1:f2:39:d2:16:b6:83:11:28:56:8c:bc:2a:fd:
6a:2a:f5:d6:f4:40:5e:d5:dd:07:0b:61:d8:11:86:43:d1:a5:
76:63:2a:e2:a4:38:04:12:5e:0a:73:3d:15:da:b9:bd:8e:61:
0c:fc:b6:23:9a:81:44:50:04:a1:39:37:ff:9a:ef:12:f0:5b:
8f:36:f5:ae:6a:50:01:d2:30:8c:2b:4c:87:58:9c:08:b7:68:
f9:9c:1d:39:b7:66:f5:ee:9f:70:49:4c:91:61:9a:e0:2b:cd:
f4:42:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:10 2025 by rpki-client