Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jHRs2CdaoDudTKV1UxeprvvPaJs.roa
File: jHRs2CdaoDudTKV1UxeprvvPaJs.roa (raw, json)
Hash identifier: 1WGZ/i/Wlhh6+utA+tb7JAVK7IH3dTYaxIkabtzpM/w=
Subject key identifier: 8C:74:6C:D8:27:5A:A0:3B:9D:4C:A5:75:53:17:A9:AE:FB:CF:68:9B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0195B29F768637DD15382543A3003F2EE6D2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jHRs2CdaoDudTKV1UxeprvvPaJs.roa
Signing time: Thu 20 Mar 2025 08:15:49 +0000
ROA not before: Thu 20 Mar 2025 08:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 62.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:9f:76:86:37:dd:15:38:25:43:a3:00:3f:2e:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 20 08:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c746cd8275aa03b9d4ca5755317a9aefbcf689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:f3:c3:dc:66:ff:61:d5:d3:68:e1:fc:35:
c1:da:a9:65:07:24:bd:24:6f:93:49:f8:88:56:0a:
63:01:da:ce:10:69:85:76:78:3a:d6:1c:7a:a9:a3:
e6:b5:df:46:5a:df:f4:4c:dd:4f:2f:bf:3f:97:5c:
aa:50:f7:b2:94:dd:81:ce:43:32:e6:1c:5e:7f:b8:
13:72:d4:e1:8d:29:f4:3e:16:42:21:d9:72:3e:06:
43:ca:e9:e7:3f:34:a9:2f:99:b0:d0:71:09:b7:d3:
7d:a3:bc:ef:4a:1c:86:d4:3c:ad:d7:e1:d6:a7:2b:
1f:36:b6:fb:77:0b:b5:c9:15:72:28:de:ff:4f:f7:
56:b8:20:69:d0:44:4b:60:54:e6:71:e3:a8:41:db:
bb:17:fa:a5:9b:9d:64:23:86:fd:43:22:2e:5e:3b:
f0:91:95:58:40:26:f2:1c:ea:28:3d:87:58:12:99:
97:d8:9d:28:3f:5c:4f:58:78:28:0a:30:65:a5:33:
ae:19:74:bc:6e:c6:3f:a3:cd:f2:2e:19:bc:e5:ef:
9a:75:45:89:3f:3f:3a:ff:05:19:b1:e8:a8:6c:e5:
95:92:47:fa:aa:d7:25:1b:b6:17:37:f7:5b:40:cf:
11:65:dc:7f:cb:6f:c5:09:98:0f:93:9b:f8:e4:35:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:6C:D8:27:5A:A0:3B:9D:4C:A5:75:53:17:A9:AE:FB:CF:68:9B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jHRs2CdaoDudTKV1UxeprvvPaJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f9:66:10:8e:bb:96:62:1b:96:f9:70:1c:81:a7:65:bc:bd:
40:fa:8c:e7:ba:c0:8e:ef:60:a5:ee:6a:24:05:40:4f:da:35:
60:e2:40:b5:43:5c:96:45:fb:1f:ef:c8:be:02:45:b7:64:2c:
29:85:f8:b3:0e:b0:5a:b2:ae:d0:5e:44:3a:9b:fb:33:d6:13:
cd:b8:07:ca:a9:b6:f8:f0:fa:7a:8c:e1:8c:27:00:54:03:d5:
a1:93:57:bf:e8:bc:a9:71:b2:db:df:58:f0:e7:04:d0:0d:51:
c1:d1:31:88:2a:68:6f:25:ab:b4:52:bd:d8:4a:7b:21:3c:7a:
20:d5:90:82:db:0d:73:77:9f:e4:e4:34:5b:c0:fe:fa:74:2d:
de:08:aa:da:3d:0c:d0:53:01:10:44:8e:cf:22:91:32:2c:4a:
99:95:0a:56:54:be:34:06:b2:b6:28:7c:6a:a8:bc:6d:a9:0b:
eb:63:96:0f:24:d2:aa:76:8d:b3:d1:5e:72:5e:91:19:63:a4:
44:09:88:58:97:b7:9b:99:d9:27:1a:e4:96:24:3c:65:a7:6a:
a3:10:fb:bf:e6:d5:0c:1a:d1:a0:ea:2e:d6:3a:32:aa:c6:d3:
84:ca:4a:38:dd:54:64:37:11:6d:fc:30:8c:33:65:0b:06:b2:
09:71:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:31 2025 by rpki-client