Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/J2vDIE39ML2dQIioX-84LBq6-7M.roa
File: J2vDIE39ML2dQIioX-84LBq6-7M.roa (raw, json)
Hash identifier: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=
Subject key identifier: 27:6B:C3:20:4D:FD:30:BD:9D:40:88:A8:5F:EF:38:2C:1A:BA:FB:B3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0194266BDE03800E81BB2488B86AAD582AB2
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/J2vDIE39ML2dQIioX-84LBq6-7M.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49160
IP address blocks: 62.122.208.0/22 maxlen: 22
62.122.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:de:03:80:0e:81:bb:24:88:b8:6a:ad:58:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=276bc3204dfd30bd9d4088a85fef382c1abafbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:ca:50:0f:c0:18:82:81:bd:81:14:ab:e8:
28:f7:4c:12:24:dd:39:de:0e:af:42:06:e3:ad:42:
30:6b:89:78:04:ab:c5:b4:91:31:93:3b:99:ec:02:
bf:0d:7f:50:83:22:95:1a:5e:ec:fe:d3:fd:86:0b:
42:23:86:65:25:3a:70:ac:24:13:f6:ac:68:5a:c4:
8b:e7:84:c9:2b:b2:32:da:37:f5:70:f6:be:3e:35:
7c:90:a5:a6:81:ce:4b:88:69:0a:cb:84:bc:04:38:
92:13:34:2c:9b:da:51:b5:64:b7:bd:72:4c:92:93:
50:a6:33:a5:07:fa:81:7a:ed:bc:c7:87:eb:e1:37:
4e:50:3a:99:43:47:a7:78:4c:7a:79:8d:84:dc:67:
12:e4:fc:76:5a:cc:cf:52:47:a5:36:6e:7f:79:68:
24:94:06:0b:d0:65:bd:02:45:bc:c4:99:08:e6:f0:
16:37:05:37:44:12:f7:83:cf:f7:8e:54:9d:f4:77:
89:e4:9c:a3:c4:13:05:88:de:6a:9e:ce:19:d8:f4:
18:82:69:65:7c:42:da:af:9c:ec:e9:13:88:50:f9:
29:d4:ff:cc:e7:66:76:8f:aa:ee:07:8a:f4:50:56:
db:3a:36:ba:70:fd:b5:1e:c8:76:af:b1:dc:b4:f5:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6B:C3:20:4D:FD:30:BD:9D:40:88:A8:5F:EF:38:2C:1A:BA:FB:B3
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/J2vDIE39ML2dQIioX-84LBq6-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.208.0-62.122.212.255
Signature Algorithm: sha256WithRSAEncryption
7e:bd:b8:ee:32:66:e7:f7:cd:86:b2:cd:90:04:c2:79:be:2a:
0d:ba:58:c7:a2:e4:fb:4b:3e:0a:ef:40:e0:b9:16:1f:d4:ce:
48:a3:0a:ed:ba:99:80:9e:58:60:bf:d4:fe:33:be:20:51:b8:
ce:c9:6a:0a:e5:bb:c7:64:79:36:eb:3b:21:8b:6d:08:ed:1b:
69:55:44:54:ff:06:e0:60:e3:0c:09:59:da:2a:08:04:dc:e0:
63:b7:c1:84:0e:f2:05:b3:cb:70:f6:24:7e:01:64:1f:be:f5:
35:b2:82:f0:e2:c4:e9:95:15:12:96:dd:63:67:b5:9c:f1:ca:
23:02:11:a6:09:3e:de:e9:16:52:5c:2a:e7:90:f9:85:e3:11:
ca:9c:30:e3:e3:8e:5d:24:e3:b0:34:fa:4e:63:ce:b6:db:84:
dd:ba:f3:61:a8:83:34:20:86:ad:de:29:ce:f0:a3:92:ca:4b:
85:d4:8c:9c:50:df:52:e2:0e:ca:93:2e:b3:0f:41:4e:3f:ca:
43:75:57:b4:01:eb:65:f5:89:c6:51:48:58:5b:6d:e8:63:b5:
17:82:d1:27:d8:37:15:e5:22:18:a5:82:6e:0a:23:d1:d2:e3:
27:f2:48:a9:5d:f1:2e:91:80:42:d8:16:36:7f:b5:34:b8:f1:
8b:d5:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:44 2025 by rpki-client