Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UCe95u6GACs5-LEqrQoGtiD4Qyc.roa
File: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (raw, json)
Hash identifier: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=
Subject key identifier: 50:27:BD:E6:EE:86:00:2B:39:F8:B1:2A:AD:0A:06:B6:20:F8:43:27
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CD5261A4F28AF1137D5BDF7A7F4B
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UCe95u6GACs5-LEqrQoGtiD4Qyc.roa
Signing time: Thu 02 Jan 2025 17:50:22 +0000
ROA not before: Thu 02 Jan 2025 17:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29322
IP address blocks: 62.39.77.0/24 maxlen: 24
62.39.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:cd:52:61:a4:f2:8a:f1:13:7d:5b:df:7a:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5027bde6ee86002b39f8b12aad0a06b620f84327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:be:65:dc:1c:40:c9:6f:50:71:1c:7d:1a:
8c:30:84:9b:84:0c:d1:01:1a:8a:9d:6f:c6:64:74:
52:f0:8e:2f:28:c6:17:85:11:ef:a7:ba:0f:5a:8c:
3e:8e:47:7b:64:50:b8:c3:95:15:e1:a0:c8:73:35:
13:e7:29:dd:67:24:da:d4:a6:af:ed:37:c7:0a:36:
cb:31:da:5e:61:79:17:01:7f:0b:df:1d:cb:9d:37:
cc:b4:34:b9:60:77:b9:fe:fd:9c:31:2b:e1:d9:05:
b4:ec:f3:71:56:63:f1:5d:f3:ff:37:34:96:f1:15:
52:08:2c:c0:70:24:9d:51:80:47:01:e1:c1:c0:15:
8c:26:e2:b0:5f:9a:e0:f6:a6:14:0a:0b:06:64:0f:
9c:5f:8e:ae:e6:cb:bf:a8:48:9a:7c:d6:ec:c8:f7:
1a:57:74:f3:15:9b:04:fe:a4:11:1b:13:fc:8a:d7:
e1:86:17:f8:09:77:43:17:c3:43:98:b8:32:4d:92:
aa:a4:49:0c:c2:9c:39:2f:ea:38:6b:a0:50:0b:8a:
4b:da:f8:67:04:10:0f:0f:81:79:ed:20:a1:da:ba:
69:60:b2:32:06:2e:b6:52:77:45:26:65:2a:13:1d:
da:b7:5a:e5:44:62:18:6c:01:e6:51:4d:cc:90:df:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:BD:E6:EE:86:00:2B:39:F8:B1:2A:AD:0A:06:B6:20:F8:43:27
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/UCe95u6GACs5-LEqrQoGtiD4Qyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.39.77.0/24
62.39.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b7:7a:c2:ce:37:3f:81:db:71:07:21:9d:a4:f8:a0:46:8e:
6f:1d:b8:29:af:32:eb:22:e5:d1:0d:e3:88:2d:3e:f1:e8:b5:
b6:75:4b:41:cf:75:40:32:dc:63:ea:85:65:6f:03:66:c8:95:
d5:56:c4:e6:e7:69:3a:43:4b:15:21:05:dc:50:92:00:99:1a:
5f:98:56:fc:85:6d:6c:bb:9e:00:3a:4a:27:65:9a:82:5b:22:
6b:49:65:16:dc:73:74:68:50:1a:32:cc:59:f4:c7:23:ee:fa:
f8:1b:06:e5:11:9c:87:c9:9e:c5:43:e6:c7:04:45:79:a7:20:
e8:fc:a0:4d:e5:30:5b:48:e0:b1:1a:95:6a:02:60:12:e6:d4:
c8:bb:6c:e6:2f:b3:fd:7b:d5:97:ad:3c:21:37:f8:4e:61:dc:
c6:45:3f:ed:a9:bc:e4:60:6c:db:22:41:4a:78:88:d8:92:0f:
96:4a:fb:6a:0d:0c:79:ad:26:31:8f:09:93:6d:7d:3d:8d:da:
fe:0f:9f:30:20:a9:e0:71:bc:be:56:18:1a:9e:96:b5:04:80:
ec:d7:bd:22:86:09:c7:e5:69:2d:32:ab:d4:8f:f9:3d:61:6e:
7c:ee:4c:c6:1f:20:e8:38:2a:ed:94:d7:c8:e8:d0:22:53:f0:
ca:36:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:28:21 2025 by rpki-client