Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M17OGFxMCHXGm0t10p_mE7wR6Tc.roa
File: M17OGFxMCHXGm0t10p_mE7wR6Tc.roa (raw, json)
Hash identifier: X4vr1PuBZ/dvhmklnpBOkIGPC5MMC2CVZZ3r2SgR0KA=
Subject key identifier: 33:5E:CE:18:5C:4C:08:75:C6:9B:4B:75:D2:9F:E6:13:BC:11:E9:37
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C743125FBE3F0307DCF3EBCDEDB5
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M17OGFxMCHXGm0t10p_mE7wR6Tc.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56488
IP address blocks: 170.62.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c7:43:12:5f:be:3f:03:07:dc:f3:eb:cd:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335ece185c4c0875c69b4b75d29fe613bc11e937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:b6:ee:5b:72:c2:b2:3d:63:1c:aa:5b:5b:
f1:a6:1c:bd:fa:d3:d4:47:f6:0b:fc:b4:67:3d:c3:
7d:6a:cb:3c:b0:25:cb:eb:12:ae:cc:e9:2b:4e:d4:
f3:72:47:33:57:1b:93:fd:40:d4:33:09:af:21:5b:
1f:17:bb:25:02:61:fc:dc:02:73:11:50:4a:23:10:
e9:94:b2:2e:dc:ea:27:32:b5:59:e2:b5:ea:12:2c:
6e:d5:7e:9f:31:27:be:a8:46:09:ec:ac:f0:1e:01:
fa:89:8c:20:54:d9:6f:58:cd:9c:e9:49:c3:0f:92:
15:4c:44:68:85:5a:54:c2:be:9f:06:78:c5:dc:63:
f3:a4:2e:e4:92:49:2d:cf:84:6d:d3:ea:9d:b0:8b:
48:5d:be:17:27:ae:42:6d:ad:1a:88:26:81:5a:81:
7e:a5:09:7e:75:53:6f:51:79:c6:0b:6a:c5:32:fe:
f1:d5:ea:fd:64:ea:c7:7c:64:08:04:42:42:1e:07:
e8:a2:db:50:01:fa:a7:42:0a:a8:98:99:9c:e7:1b:
1d:02:9c:28:4b:54:a9:ed:23:94:0a:00:7c:a1:62:
86:1e:4d:97:6e:80:c1:7a:54:14:48:7f:0c:31:19:
00:a1:70:f8:56:c2:64:56:3f:ac:b3:15:df:52:0c:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:CE:18:5C:4C:08:75:C6:9B:4B:75:D2:9F:E6:13:BC:11:E9:37
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M17OGFxMCHXGm0t10p_mE7wR6Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:74:5a:c0:12:dd:4a:d1:bc:b1:c0:62:3b:c4:69:dc:50:cf:
16:af:71:44:77:7d:45:e7:32:4f:86:1b:e0:3f:d0:1c:80:3b:
a3:b6:34:df:09:10:b7:20:be:54:4f:8a:92:3e:f7:00:d1:10:
e7:48:3e:28:1b:8e:5c:7c:e2:f3:6a:dc:4b:6d:0f:84:f7:ef:
ed:ff:bc:dc:46:4a:51:65:8c:f4:b2:b0:a0:2b:fe:56:60:d0:
00:f7:3f:df:00:6b:6c:1c:3d:0c:75:7d:c6:04:dc:fb:ea:61:
c6:2d:b1:01:37:12:ae:cf:cf:66:6a:6a:31:95:f7:36:e0:a8:
4c:78:cb:3c:b5:65:38:8f:f9:df:24:b4:4b:30:e6:3a:1d:10:
d6:cb:cd:5f:6e:8d:47:8b:1c:55:96:cf:59:39:b5:2f:dd:25:
08:d6:b0:45:40:d2:2e:61:6c:8d:ac:be:88:46:7d:8c:4c:fa:
13:a8:f0:5a:ff:a4:0e:09:5a:28:c0:8c:ea:43:e8:00:77:c3:
34:20:3b:af:0e:c5:98:4e:2e:8c:61:7e:21:56:01:0e:f9:f3:
60:90:28:5f:ad:39:1a:c1:56:17:19:48:ea:d7:c5:f4:63:e0:
f3:da:72:35:6b:6b:ba:c2:36:f2:23:c0:e8:f1:9d:e2:9c:ea:
31:f1:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:34 2025 by rpki-client