Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/djxHGgUqKdNcqVM8z_uuH6OIUlc.roa
File: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (raw, json)
Hash identifier: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=
Subject key identifier: 76:3C:47:1A:05:2A:29:D3:5C:A9:53:3C:CF:FB:AE:1F:A3:88:52:57
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019423D6BBC27B810E1F72FB946E7CDC8893
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/djxHGgUqKdNcqVM8z_uuH6OIUlc.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6837
IP address blocks: 62.202.0.0/15 maxlen: 32
83.76.0.0/14 maxlen: 32
85.0.0.0/13 maxlen: 32
92.104.0.0/14 maxlen: 32
176.127.0.0/16 maxlen: 32
178.192.0.0/13 maxlen: 32
188.60.0.0/14 maxlen: 32
2a02:1200::/27 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bb:c2:7b:81:0e:1f:72:fb:94:6e:7c:dc:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=763c471a052a29d35ca9533ccffbae1fa3885257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:98:ae:69:45:82:fc:d8:29:b7:3c:26:f9:
27:35:d9:fa:dd:c0:a6:de:f1:be:8d:17:00:96:da:
01:a7:88:ab:24:76:a1:cd:27:78:d4:3b:12:8a:73:
a8:cc:a1:d1:7d:e4:5c:13:37:e0:1c:05:4d:bc:dc:
f4:21:6e:cc:49:8b:3c:75:5b:4c:b6:83:a7:77:94:
13:f3:27:bd:31:cb:99:4a:5d:ef:16:3a:4d:9a:7f:
1e:8b:6e:6a:79:46:6c:ff:60:44:ce:ec:9b:95:6c:
ad:b3:12:a5:c4:c0:5d:54:98:9c:ca:f9:59:90:70:
a3:66:e8:af:18:c9:ef:45:b1:07:61:fe:19:c6:ea:
b2:79:e5:fe:9b:19:ef:70:c3:13:47:2f:98:8c:d8:
5d:8b:0e:7f:78:db:17:00:83:14:39:9e:04:07:3d:
71:b1:35:2f:c9:76:4e:ad:e3:64:c4:07:b1:78:d7:
56:3d:26:1d:51:b0:8c:3d:9f:6e:d6:2e:75:e0:ba:
3a:3c:e4:ce:56:56:23:30:2c:5a:66:a4:1e:e6:37:
bb:70:11:1e:37:6d:58:d7:2b:8d:b5:9a:2b:24:d5:
57:58:7f:fb:14:aa:91:8b:5d:27:47:0a:2d:03:37:
c0:5b:8b:6a:4e:d3:95:09:7a:7d:21:64:16:e9:aa:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:47:1A:05:2A:29:D3:5C:A9:53:3C:CF:FB:AE:1F:A3:88:52:57
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/djxHGgUqKdNcqVM8z_uuH6OIUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.0.0/15
83.76.0.0/14
85.0.0.0/13
92.104.0.0/14
176.127.0.0/16
178.192.0.0/13
188.60.0.0/14
IPv6:
2a02:1200::/27
Signature Algorithm: sha256WithRSAEncryption
35:74:f5:01:ef:bd:c8:54:d1:cd:6f:1c:ed:cd:4f:c9:ff:c8:
5b:3a:29:17:4a:ac:e3:75:d9:57:50:a4:fb:cf:07:5c:66:e8:
a6:e5:2f:5c:bd:19:b0:db:fe:3b:6c:90:69:db:7d:46:3d:6d:
55:04:a5:af:1c:65:9e:30:a4:42:b1:37:36:c0:90:86:83:b5:
8d:18:e2:b4:aa:81:8a:90:dc:65:7c:a3:ec:ee:54:9f:3b:50:
97:98:87:fe:4b:8d:fd:7b:67:f4:15:54:4d:36:44:24:ff:0a:
7a:18:09:92:32:0a:d0:01:45:95:ab:e8:3e:24:3a:8b:fd:7f:
f4:da:a8:70:df:96:57:d5:fe:40:c9:50:f3:1c:d1:a2:06:b3:
c7:31:c4:63:a0:c3:b0:e6:1d:db:3e:bf:c6:ab:b9:9a:03:73:
7b:bc:2f:a6:55:79:7b:24:83:21:2e:80:07:82:71:40:fd:b6:
ef:4e:3a:2a:25:fd:11:dd:e1:ea:96:fa:32:67:fe:1f:44:2c:
34:a8:99:25:74:8b:55:0c:fd:8e:87:34:b9:21:25:4b:d4:eb:
85:9a:38:fb:65:11:c0:55:74:4d:4a:f5:e4:da:58:ad:af:31:
b2:2b:cd:ee:16:89:1a:ad:26:46:2b:74:db:96:c2:65:1b:a6:
0e:42:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:07 2025 by rpki-client