Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/w_62FGoWXxTvmN6szlTNF_DQpao.roa
File: w_62FGoWXxTvmN6szlTNF_DQpao.roa (raw, json)
Hash identifier: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=
Subject key identifier: C3:FE:B6:14:6A:16:5F:14:EF:98:DE:AC:CE:54:CD:17:F0:D0:A5:AA
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CAC5557277D32955F3EBD19210E9
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/w_62FGoWXxTvmN6szlTNF_DQpao.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209096
IP address blocks: 80.249.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ca:c5:55:72:77:d3:29:55:f3:eb:d1:92:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3feb6146a165f14ef98deacce54cd17f0d0a5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:c5:c8:90:20:a2:4b:d6:e6:94:dd:bf:ec:
51:df:4b:29:c0:25:5b:9e:f9:65:6a:40:55:c3:30:
83:56:bd:15:2c:c3:71:7a:03:1f:28:ed:50:89:96:
4d:d7:99:44:45:1c:49:d9:db:00:f7:01:31:1e:39:
ee:8b:40:ac:a1:96:84:d7:b7:94:06:18:06:45:11:
66:ec:9b:00:e5:03:06:23:d1:e4:a5:fb:70:94:de:
1f:a8:40:94:c4:4e:2c:7f:bc:24:9b:5d:10:a4:6e:
3e:fa:19:ce:52:f1:db:87:8a:51:60:0c:32:eb:6a:
5a:f1:e1:6a:1f:4e:6f:5c:0e:d4:2d:7f:73:21:46:
5a:83:34:13:f2:e2:05:1f:3c:34:19:5f:bd:45:82:
bc:de:55:21:e3:d6:dd:f7:4c:2d:89:13:cf:73:b8:
f1:e4:92:45:12:99:33:04:47:2b:14:41:49:17:31:
53:c2:40:8e:38:fb:f6:54:c3:b2:38:71:32:fb:c5:
0b:62:31:8a:ec:e8:cc:bc:8f:ba:5b:e2:9f:e4:df:
33:76:0a:b0:a5:cc:36:81:f7:74:61:fc:77:53:19:
38:da:ff:38:e7:80:88:61:f9:7b:88:3e:5c:f6:8e:
a5:c5:84:13:ac:00:c6:07:cf:8c:77:9c:98:c6:61:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:B6:14:6A:16:5F:14:EF:98:DE:AC:CE:54:CD:17:F0:D0:A5:AA
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/w_62FGoWXxTvmN6szlTNF_DQpao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ca:4b:1e:1c:e3:d6:4c:3f:3a:b7:11:ae:7c:12:4d:50:05:
6e:2a:8a:ad:a5:14:dd:7d:ee:b6:40:12:d4:81:b3:34:f2:f0:
45:57:1e:1b:36:75:d3:ce:b6:1b:4f:df:eb:f1:bf:0e:24:9f:
f6:7d:45:ec:ea:0b:d3:d7:93:f3:ba:d6:9e:3a:84:a2:51:0e:
bf:6b:01:5b:45:92:53:15:24:03:0d:e4:dd:bd:60:f9:1f:49:
3a:06:a2:69:c1:8e:38:fe:f5:ba:69:21:b1:60:4f:f8:7b:98:
7f:ac:0d:40:a2:c8:d6:fc:58:76:8d:50:cf:16:a2:92:ee:a8:
54:57:85:f3:45:ce:2c:b6:e3:79:7a:7d:10:b2:0b:33:09:7c:
a6:a5:1f:10:f7:2a:10:cc:8d:b1:e3:62:d0:86:b6:d1:64:b2:
6d:88:50:25:51:f5:72:64:84:fa:2c:ec:fd:8e:b0:59:28:f9:
49:22:80:86:ac:01:88:c6:83:fa:14:be:4d:d4:8c:85:7a:87:
97:3c:41:ec:eb:7d:9e:3b:1a:fa:f8:af:35:a6:48:25:d3:78:
08:fd:70:61:86:e7:00:a4:8d:db:27:54:58:65:dc:17:24:02:
00:3d:58:c3:db:a3:d8:06:21:8f:f1:ae:88:43:d3:b8:55:48:
2d:de:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:56 2025 by rpki-client