Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Uh0hQO0kRo4YQ_XIZEqqoOZrCSI.roa
File: Uh0hQO0kRo4YQ_XIZEqqoOZrCSI.roa (raw, json)
Hash identifier: Gj6q+1p4cewBEZ9AUhWEQWip81Rwt2rylYZ/cgBxu1o=
Subject key identifier: 52:1D:21:40:ED:24:46:8E:18:43:F5:C8:64:4A:AA:A0:E6:6B:09:22
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019483B2E3E9CF0059F7BE8979D1A8626200
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Uh0hQO0kRo4YQ_XIZEqqoOZrCSI.roa
Signing time: Mon 20 Jan 2025 12:32:06 +0000
ROA not before: Mon 20 Jan 2025 12:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31786
IP address blocks: 62.72.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:b2:e3:e9:cf:00:59:f7:be:89:79:d1:a8:62:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 20 12:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521d2140ed24468e1843f5c8644aaaa0e66b0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:01:75:df:5a:38:b4:c9:e1:e2:16:bb:f2:
05:16:02:41:10:7f:d1:69:23:df:92:8f:0c:e5:4a:
7a:36:56:8e:15:80:9e:40:cf:e0:89:7d:9a:ab:55:
a6:f0:7e:ff:a4:60:85:82:a1:64:ec:df:0a:6b:f0:
c5:1a:c4:52:c3:b9:be:96:20:5d:6f:ef:48:3c:c8:
c6:d9:7a:84:90:95:53:d3:42:9d:44:ae:c6:a6:cb:
fa:04:f7:c0:94:94:15:e7:cc:92:c8:95:aa:c6:5b:
3d:5a:3e:36:2e:a9:31:d5:1c:80:64:08:94:1b:b0:
80:10:99:80:55:39:f5:20:f3:5e:b5:f9:95:39:c3:
6c:72:d3:9e:ad:67:f7:1d:9c:a9:90:16:0c:5a:4c:
24:a9:e1:6b:71:18:1c:78:c2:e4:6e:37:c3:67:e2:
c7:2f:5b:5e:6a:ca:c8:32:d9:89:04:fd:75:47:c0:
58:9f:b6:53:b6:9d:09:f5:b2:e8:ac:05:1d:40:12:
fd:a3:e3:36:33:1e:91:df:83:75:29:e3:fc:5a:cb:
7c:69:0e:41:c3:0f:95:d1:39:2e:2c:62:40:8a:13:
61:57:42:33:34:56:56:21:57:3d:d9:13:01:b8:7c:
5c:58:57:5a:d6:f8:70:af:67:f7:fd:0a:c9:d9:13:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:21:40:ED:24:46:8E:18:43:F5:C8:64:4A:AA:A0:E6:6B:09:22
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Uh0hQO0kRo4YQ_XIZEqqoOZrCSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
27:26:34:97:c6:d6:b2:bd:86:2b:02:24:5c:2f:39:92:df:11:
ac:5e:e1:2f:64:e1:16:57:48:3a:35:82:2c:cb:8a:e0:75:24:
ec:f4:1d:93:ec:af:40:80:d2:c4:a3:11:f8:18:91:78:72:d5:
23:ac:f2:95:5e:49:a7:ef:74:7d:79:8c:85:23:8c:db:cf:df:
8b:cb:73:30:04:f8:ea:50:9a:12:1d:3c:3f:87:15:2e:c2:99:
fc:ee:82:34:6b:e7:10:50:fe:25:f3:0c:57:8e:82:01:c5:48:
af:5b:2e:a6:5c:98:a2:8e:2e:17:f6:2b:2d:c6:0b:96:34:f8:
60:23:95:f1:bf:18:e7:99:c2:a0:4e:4f:43:0e:d2:26:c7:13:
87:5b:28:71:88:6e:09:e0:c5:d9:1b:46:ea:ee:2e:3e:f1:4f:
76:88:a2:3d:d4:7f:c9:ce:a5:1f:a1:d7:66:8e:d1:78:dd:cf:
52:7d:36:7d:ff:f5:b1:fd:5c:34:91:5d:92:44:5c:8a:f0:b5:
3c:5b:1a:30:d7:3c:8e:a1:81:2a:2b:9e:73:f3:fa:91:9b:13:
92:3d:4c:5a:17:bf:58:2c:de:aa:ee:71:95:c6:ba:17:6f:4f:
03:ac:99:33:34:ec:5b:5a:91:4a:fa:0b:b0:74:fc:1f:8a:8a:
ce:5c:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 19:52:10 2025 by rpki-client