Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa
File: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (raw, json)
Hash identifier: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=
Subject key identifier: C1:19:AD:2A:1E:FF:2D:5A:99:A6:74:E4:5A:AA:7F:45:3F:8E:93:E4
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 019421B1948D881D561F73EC223BB40E90A4
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa
Signing time: Wed 01 Jan 2025 11:47:53 +0000
ROA not before: Wed 01 Jan 2025 11:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59992
IP address blocks: 185.62.132.0/24 maxlen: 24
185.62.133.0/24 maxlen: 24
2a03:3e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:94:8d:88:1d:56:1f:73:ec:22:3b:b4:0e:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c119ad2a1eff2d5a99a674e45aaa7f453f8e93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:9f:22:b4:3b:bc:22:4d:c1:fe:2d:12:0a:
8c:16:ea:d8:7f:25:23:7f:9e:42:7d:7f:d0:e9:46:
a3:26:58:a1:0c:57:9a:de:d7:c6:49:d5:ac:46:dd:
01:4b:41:b1:71:55:57:99:22:36:76:65:2e:09:da:
72:a9:f5:29:77:e0:69:15:6d:f6:74:ac:b1:ee:3f:
c9:1d:51:9e:28:43:51:ee:cc:98:de:bf:ff:fc:01:
a8:5a:49:53:37:36:a5:e8:41:b7:77:8b:be:01:df:
2d:9b:f8:9c:77:9a:4a:cb:56:d8:7c:ee:3e:f9:46:
14:6a:63:95:a3:7f:3a:e9:0f:6e:0d:ae:30:f8:e0:
a6:c4:e4:d2:8d:3d:9a:41:a9:28:40:cb:f8:33:90:
94:94:38:61:91:05:46:7d:fe:81:a3:2b:99:c2:85:
99:f1:b2:af:87:9f:b5:91:73:c2:f1:cb:a2:a9:8f:
33:88:17:3c:85:58:7c:61:d7:d0:68:41:7c:3a:21:
e6:8a:af:b5:a8:13:47:b2:64:da:f2:45:d8:04:09:
c7:57:6b:dc:22:89:49:b9:e9:c5:e4:78:bc:df:5e:
d3:ad:d3:0e:8c:44:bd:f8:82:d6:cd:dd:56:72:14:
44:cb:74:a6:fb:f6:35:db:f2:0d:d6:02:f1:dd:4e:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:AD:2A:1E:FF:2D:5A:99:A6:74:E4:5A:AA:7F:45:3F:8E:93:E4
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.132.0/23
IPv6:
2a03:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
22:cf:9e:f1:db:c2:99:a6:7d:a5:34:d9:f1:47:85:2e:33:b9:
87:66:78:3a:84:b4:0c:28:2b:44:3d:b7:e3:44:5f:d0:d9:d1:
57:c9:3a:39:db:90:66:81:0f:6a:74:e9:af:d3:30:5e:ea:2b:
34:8c:50:e3:dc:cb:83:e1:fe:70:ea:d2:17:4d:35:fb:8b:69:
e8:e2:52:d7:c3:5c:de:18:59:bc:df:e2:7c:fa:a4:87:9d:c2:
6c:07:c5:fa:c4:d7:83:5b:8b:dc:5c:0b:4b:87:b0:9c:83:cb:
fb:8e:3c:28:b1:92:15:7b:79:4b:d0:89:aa:cb:60:4a:33:0e:
94:b0:c9:8b:64:b6:4e:ee:18:1a:25:b5:f0:19:5b:a3:22:07:
28:be:2c:94:68:28:c3:3d:94:ed:a7:3f:35:33:42:90:f3:5c:
1f:5e:b6:f6:09:50:bd:76:67:58:ce:ae:68:b0:f0:63:ca:46:
a0:d1:a3:07:1c:33:a7:f4:e1:be:a4:ec:95:15:d0:c3:91:aa:
9c:e7:44:6b:c5:7a:84:e1:47:5e:6a:8d:19:7f:9e:ce:26:6f:
c9:55:75:2b:a6:bd:7e:b6:67:52:0b:5c:1a:22:e4:f8:9f:a4:
cc:d6:66:3a:d3:30:75:71:6c:db:ca:36:45:75:b5:c9:56:25:
2a:04:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:53 2025 by rpki-client