Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ed1jORhWSi7ng65aRGJvId8bpXw.roa
File: ed1jORhWSi7ng65aRGJvId8bpXw.roa (raw, json)
Hash identifier: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=
Subject key identifier: 79:DD:63:39:18:56:4A:2E:E7:83:AE:5A:44:62:6F:21:DF:1B:A5:7C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B1C6AB2B73EDE8F62E1E0B3CA209
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ed1jORhWSi7ng65aRGJvId8bpXw.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207994
IP address blocks: 62.72.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:c6:ab:2b:73:ed:e8:f6:2e:1e:0b:3c:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79dd633918564a2ee783ae5a44626f21df1ba57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:fe:6d:3c:82:36:00:63:95:d6:33:8d:97:
c5:51:e7:37:15:9d:d9:24:b4:a4:75:23:a1:ae:41:
64:f6:8e:b3:cc:44:ee:ab:7e:c7:f1:1f:8c:c4:95:
c4:3b:a3:bb:68:6b:b1:8a:e1:a5:27:bc:14:ee:ed:
a9:6f:20:d6:9d:77:66:45:51:0f:f6:a5:3e:7a:c1:
9f:c4:08:d0:e1:d0:dc:5b:2a:19:9a:75:62:73:49:
af:d1:47:b3:78:8c:49:95:cb:45:1c:47:1f:23:7a:
15:3c:f2:2c:c4:f3:98:e9:a8:38:59:a5:bb:1f:9a:
8e:02:a5:02:40:4c:ac:75:44:a4:a4:a1:f4:ac:1e:
9c:23:5c:83:27:77:5e:49:16:d4:57:52:62:1f:c1:
13:64:a1:53:2c:38:3b:63:ac:f3:49:98:99:76:09:
74:48:16:a7:01:c7:ff:3c:21:10:e6:23:ab:9a:26:
1b:9a:fc:f8:33:1f:f9:37:96:df:51:fa:74:bc:b2:
d8:8b:2b:e8:14:bf:e1:96:47:2f:38:9f:45:5c:08:
0b:5b:93:65:9d:0f:51:a0:a1:78:e7:e6:1f:dc:0d:
13:bc:ee:f9:b8:2e:7b:a9:58:47:1d:e9:f3:0f:6d:
7a:3a:0f:6b:f0:41:bf:b2:18:f4:ce:ad:29:18:0c:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:63:39:18:56:4A:2E:E7:83:AE:5A:44:62:6F:21:DF:1B:A5:7C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ed1jORhWSi7ng65aRGJvId8bpXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ac:e2:12:56:11:28:6b:0b:71:bd:1e:1d:c5:c3:e5:6b:08:
9a:cf:9e:3a:ca:fc:f4:37:52:87:7a:c3:ee:c5:35:99:09:99:
dc:ab:9f:9c:79:98:18:dd:bc:41:4f:9a:2e:18:73:eb:5c:db:
31:61:df:a9:1c:c0:9c:ad:b8:e2:20:a2:c9:a5:d5:19:b8:6c:
7b:5e:5b:fa:a1:0b:09:0b:bd:55:5b:0f:a0:47:43:9a:d0:00:
83:ae:5f:47:eb:91:46:df:7b:3f:af:75:94:4f:6e:ad:06:98:
67:7e:96:ed:84:a9:54:35:0e:81:4d:33:c3:f8:5e:bc:53:3e:
53:12:c1:98:00:3c:d0:43:74:dd:9a:83:39:7b:29:f3:ca:2c:
b9:8d:c3:43:9e:b8:0d:72:30:39:2a:95:d5:6f:65:b6:fc:5f:
a4:22:94:6a:c0:cf:10:ef:ba:33:78:39:b5:56:2a:0e:da:d7:
97:be:49:b1:08:a4:ab:a1:99:43:d0:e9:79:4f:17:f5:e1:12:
5c:3e:6e:2c:37:13:11:07:22:19:e9:f3:e4:c2:17:11:d0:20:
69:61:d4:43:a2:55:75:c0:f1:1d:92:63:00:4d:77:c8:4b:28:
fa:3f:0c:d6:af:db:b1:f3:0f:6e:de:e7:03:0b:4e:34:1a:21:
12:15:b7:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbHGqytz7ej2Lh4LPKIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRkNjMzOTE4NTY0YTJlZTc4M2FlNWE0NDYyNmYyMWRmMWJhNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3+bTyCNgBjldYzjZfFUec3FZ3Z
JLSkdSOhrkFk9o6zzETuq37H8R+MxJXEO6O7aGuxiuGlJ7wU7u2pbyDWnXdmRVEP
9qU+esGfxAjQ4dDcWyoZmnVic0mv0UezeIxJlctFHEcfI3oVPPIsxPOY6ag4WaW7
H5qOAqUCQEysdUSkpKH0rB6cI1yDJ3deSRbUV1JiH8ETZKFTLDg7Y6zzSZiZdgl0
SBanAcf/PCEQ5iOrmiYbmvz4Mx/5N5bfUfp0vLLYiyvoFL/hlkcvOJ9FXAgLW5Nl
nQ9RoKF45+Yf3A0TvO75uC57qVhHHenzD216Og9r8EG/shj0zq0pGAyquQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHndYzkYVkou54OuWkRibyHfG6V8MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZWQxak9SaFdTaTduZzY1YVJHSnZJZDhicFh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkixMA0G
CSqGSIb3DQEBCwUAA4IBAQAirOISVhEoawtxvR4dxcPlawiaz546yvz0N1KHesPu
xTWZCZncq5+ceZgY3bxBT5ouGHPrXNsxYd+pHMCcrbjiIKLJpdUZuGx7Xlv6oQsJ
C71VWw+gR0Oa0ACDrl9H65FG33s/r3WUT26tBphnfpbthKlUNQ6BTTPD+F68Uz5T
EsGYADzQQ3TdmoM5eynzyiy5jcNDnrgNcjA5KpXVb2W2/F+kIpRqwM8Q77ozeDm1
VioO2teXvkmxCKSroZlD0Ol5Txf14RJcPm4sNxMRByIZ6fPkwhcR0CBpYdRDolV1
wPEdkmMATXfISyj6PwzWr9ux8w9u3ucDC040GiESFbc5
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:45 2025 by rpki-client