Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b9747bu6F3orHJcVTx2KhvjyqKA.roa
File: b9747bu6F3orHJcVTx2KhvjyqKA.roa (raw, json)
Hash identifier: H3wknujwm2p7sLOwETgecFsrpjupwjmW1r2yHz878yc=
Subject key identifier: 6F:DE:F8:ED:BB:BA:17:7A:2B:1C:97:15:4F:1D:8A:86:F8:F2:A8:A0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A8D66D6ADDFA81F4710595815F66
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b9747bu6F3orHJcVTx2KhvjyqKA.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 62.72.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a8:d6:6d:6a:dd:fa:81:f4:71:05:95:81:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdef8edbbba177a2b1c97154f1d8a86f8f2a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:fd:9c:ab:9e:8b:d1:45:31:c6:5e:e5:c2:
24:1a:3e:ee:74:2f:a8:84:ac:a8:1c:8b:93:0b:92:
86:72:7b:7d:de:61:c7:7e:3c:e8:ad:08:95:be:c5:
93:b4:a3:22:05:73:e3:b2:3e:16:22:0a:99:04:c7:
50:2c:d2:80:d0:d0:c6:cc:b8:48:a0:e6:15:2b:d9:
38:14:08:62:31:46:07:49:b7:6d:5a:73:55:ff:55:
7e:56:a1:71:b4:38:f6:83:86:33:46:5f:b8:a9:32:
93:f4:22:77:71:97:6b:a0:73:e1:69:d9:b7:ed:12:
c2:74:c7:20:9c:8d:0d:3e:f8:04:34:1f:5e:83:f6:
06:8c:2f:55:0e:e6:54:15:dc:f9:5c:42:ca:b0:6e:
73:c0:a4:d6:7d:6a:43:03:5c:b3:e3:af:ca:0a:62:
5c:19:c4:71:7f:13:2c:76:c9:d5:67:a5:4c:ee:ad:
17:82:4a:b1:04:3d:71:5d:7a:15:da:78:25:49:56:
4a:4b:5c:50:d2:9f:88:78:88:20:54:e1:b4:d2:90:
65:ef:a1:d1:83:2a:70:8c:a6:b0:b6:7f:23:47:47:
28:93:ee:53:12:df:8c:72:fb:e7:a7:07:f2:23:2d:
2a:e5:67:99:3a:6d:77:54:7c:01:a4:50:c1:dd:88:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DE:F8:ED:BB:BA:17:7A:2B:1C:97:15:4F:1D:8A:86:F8:F2:A8:A0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b9747bu6F3orHJcVTx2KhvjyqKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fe:79:7d:21:a8:7f:24:3b:0a:68:d4:3f:72:fc:fc:04:58:
6c:56:58:4f:29:50:94:24:87:18:40:c0:04:f2:27:af:1d:99:
db:09:e7:aa:55:73:8f:a9:24:8f:9f:72:b6:29:09:4a:af:fb:
05:55:e8:75:eb:84:46:ec:e4:de:65:35:8a:19:c1:dd:65:39:
b8:95:1a:8a:64:67:57:40:d4:8f:01:85:89:4d:9b:6a:ac:ff:
a9:0c:80:8a:f2:68:bd:9a:8e:8c:9c:c9:40:af:df:33:4b:01:
dc:4c:dd:78:57:6e:db:df:6f:d4:8d:2d:71:ae:05:33:bb:87:
cd:7a:60:62:b2:b7:e5:6a:fe:90:2e:54:3f:a3:a1:ff:7b:de:
4a:81:c4:9d:73:61:57:87:3b:68:15:d2:8a:c6:22:88:11:e1:
c8:29:b0:13:f8:51:ec:43:65:96:df:da:be:94:4e:6a:5f:62:
1d:f9:6d:24:f2:7b:9a:e0:5a:ed:1a:38:ff:45:ce:6d:9a:c8:
a9:62:d3:43:dd:26:2c:c2:a6:3f:e3:0e:55:80:0f:3f:85:65:
c8:da:e4:48:2f:22:ef:bc:46:ef:41:87:87:3b:0c:aa:ac:28:
bf:e4:90:5b:b5:15:e9:9a:0e:7b:84:e6:80:df:4a:d8:a3:06:
0c:88:6f:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsajWbWrd+oH0cQWVgV9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTAxMTE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmRlZjhlZGJiYmExNzdhMmIxYzk3MTU0ZjFkOGE4NmY4ZjJhOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhj9nKuei9FFMcZe5cIkGj7udC+o
hKyoHIuTC5KGcnt93mHHfjzorQiVvsWTtKMiBXPjsj4WIgqZBMdQLNKA0NDGzLhI
oOYVK9k4FAhiMUYHSbdtWnNV/1V+VqFxtDj2g4YzRl+4qTKT9CJ3cZdroHPhadm3
7RLCdMcgnI0NPvgENB9eg/YGjC9VDuZUFdz5XELKsG5zwKTWfWpDA1yz46/KCmJc
GcRxfxMsdsnVZ6VM7q0XgkqxBD1xXXoV2nglSVZKS1xQ0p+IeIggVOG00pBl76HR
gypwjKawtn8jR0cok+5TEt+McvvnpwfyIy0q5WeZOm13VHwBpFDB3YitdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/e+O27uhd6KxyXFU8diob48qigMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvYjk3NDdidTZGM29ySEpjVlR4Mktodmp5cUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkihMA0G
CSqGSIb3DQEBCwUAA4IBAQCA/nl9Iah/JDsKaNQ/cvz8BFhsVlhPKVCUJIcYQMAE
8ievHZnbCeeqVXOPqSSPn3K2KQlKr/sFVeh164RG7OTeZTWKGcHdZTm4lRqKZGdX
QNSPAYWJTZtqrP+pDICK8mi9mo6MnMlAr98zSwHcTN14V27b32/UjS1xrgUzu4fN
emBisrflav6QLlQ/o6H/e95KgcSdc2FXhztoFdKKxiKIEeHIKbAT+FHsQ2WW39q+
lE5qX2Id+W0k8nua4FrtGjj/Rc5tmsipYtND3SYswqY/4w5VgA8/hWXI2uRILyLv
vEbvQYeHOwyqrCi/5JBbtRXpmg57hOaA30rYowYMiG84
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:20 2025 by rpki-client