Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa
File: NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa (raw, json)
Hash identifier: eLBB/ryFtyh0U5kDNzJU01/rb6XqOa1SNpNvfukI4VM=
Subject key identifier: 37:24:8F:56:C7:71:85:9F:02:1B:57:22:3D:CC:AB:83:96:34:D0:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01973490DBE5696EC1304E5DA203486B2DC2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa
Signing time: Tue 03 Jun 2025 06:53:18 +0000
ROA not before: Tue 03 Jun 2025 06:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 62.72.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:90:db:e5:69:6e:c1:30:4e:5d:a2:03:48:6b:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 3 06:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37248f56c771859f021b57223dccab839634d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:c9:9b:f8:7f:4d:5d:20:0b:de:67:7f:22:
eb:d3:79:84:0e:42:95:6b:a6:56:6f:76:87:40:c7:
c3:5b:4b:36:17:6c:1c:bd:6a:8e:46:e1:ed:d8:47:
be:f3:c4:0b:3c:d8:12:76:4d:08:3a:8e:7b:4d:9b:
bf:8e:38:09:c0:f0:81:52:3b:84:c1:41:ab:3d:1e:
c8:1c:0b:4a:c8:5e:04:c0:ba:d9:ca:4a:9b:8f:83:
37:05:96:db:dd:f0:ff:d9:21:40:b3:a4:c0:35:80:
48:ea:3a:1a:48:da:b6:ef:3b:4a:02:ee:0c:d1:95:
1a:11:fd:13:ca:1c:af:44:90:82:d0:3e:aa:33:8b:
18:d6:ea:71:24:0d:a9:5e:c4:ab:a2:63:02:c3:0e:
0d:58:51:4a:fc:5b:06:f5:bf:66:86:3a:f3:38:4f:
66:5d:74:b8:39:02:89:76:15:9b:12:07:1b:bb:54:
cb:6a:96:34:d3:ee:24:b1:04:bb:5f:89:68:ed:35:
12:e6:d4:c6:28:f0:67:2f:47:21:bc:9c:ec:36:82:
55:94:cd:95:3a:83:a7:e4:1b:a6:e8:fc:65:f7:0e:
41:77:b0:ff:c0:62:ed:be:6f:79:14:3f:87:69:a4:
ce:8d:c4:3a:d1:70:0a:d8:ff:f8:80:b0:f8:9d:58:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:8F:56:C7:71:85:9F:02:1B:57:22:3D:CC:AB:83:96:34:D0:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.174.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4a:7f:55:e8:9d:99:f3:db:f4:e3:43:7e:64:0f:4c:1c:ac:
d7:96:1f:2c:c9:25:18:fa:b7:ba:26:af:c7:1b:77:a0:70:b6:
56:98:66:f1:6e:28:e5:68:38:e0:0c:7b:29:b6:b5:dc:00:3b:
34:1b:15:31:4f:5f:b9:ae:f4:43:02:e5:2b:56:dc:61:23:7e:
e0:ca:ce:c8:e8:33:78:73:ab:68:06:10:f0:51:2d:d4:3b:36:
8f:6c:2a:89:e1:a2:fb:b5:29:35:e1:36:09:5b:61:65:a7:6a:
37:e0:97:2f:86:0c:b7:b6:4d:53:a2:7d:c0:2b:59:1a:1b:70:
75:77:fb:7a:23:2c:9b:46:04:1d:00:4b:29:a9:b5:df:fe:27:
21:f3:d2:cc:4e:15:2f:a1:63:e4:57:db:ad:8d:35:7f:71:90:
dd:a3:b2:d7:cd:b7:73:11:90:81:52:57:82:f0:66:9d:ff:6e:
8c:2b:84:a0:9f:a5:3a:6d:ec:13:f3:62:bf:26:d8:e1:07:97:
a7:70:a6:6c:6d:ec:66:a5:8e:7d:17:9b:de:5a:c3:13:7f:61:
e2:10:44:cb:d6:f2:07:02:7d:d1:a9:5e:26:ff:bb:c5:c9:ba:
10:83:77:2b:6f:67:14:ab:c0:4e:04:44:76:6d:ab:b8:cf:3e:
8e:54:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:22 2025 by rpki-client