Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/R99dYNqYsBqUsChphTk93qUHPQI.roa
File: R99dYNqYsBqUsChphTk93qUHPQI.roa (raw, json)
Hash identifier: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=
Subject key identifier: 47:DF:5D:60:DA:98:B0:1A:94:B0:28:69:85:39:3D:DE:A5:07:3D:02
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0BF8D08EC52DFC7C57E3271B0FAD
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/R99dYNqYsBqUsChphTk93qUHPQI.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 62.106.95.0/24 maxlen: 24
146.19.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:f8:d0:8e:c5:2d:fc:7c:57:e3:27:1b:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47df5d60da98b01a94b0286985393ddea5073d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:50:c2:e4:2d:cb:67:cc:0c:10:e5:35:7f:
7c:76:f5:ab:d3:2d:77:d8:25:d1:86:21:8c:66:12:
91:bd:5f:c9:97:ea:b5:46:0f:f7:7e:6d:c3:fb:f7:
c7:8e:c4:41:e2:36:0b:b2:d3:09:c7:77:2b:77:bc:
54:95:6c:f2:49:eb:32:74:f7:b0:23:81:04:4b:57:
af:0d:24:4d:55:62:d0:97:99:f3:83:32:25:3f:b6:
51:37:3f:df:a0:f2:67:92:9a:b4:91:dc:c5:4f:5d:
99:f0:2f:36:c5:0d:3a:13:26:aa:46:37:f5:bd:11:
ce:f6:97:0e:86:5f:0e:ec:7f:bd:2f:59:fe:e1:1c:
06:de:02:6f:48:32:cf:38:9c:c1:8a:82:d4:8d:cc:
4e:de:47:ca:39:48:4b:fb:b3:e0:c8:b7:5c:2b:9b:
fe:95:47:63:a7:c3:d0:45:ed:a0:8a:24:3e:97:00:
98:12:9f:12:d4:8c:c9:c7:ba:fb:2b:ec:b7:bd:51:
f1:47:3c:b2:b8:f3:2f:fa:fc:26:db:b8:ff:42:dc:
24:aa:2e:5a:ee:8e:ea:1a:aa:08:e3:f0:a6:ac:e2:
b4:e5:82:fc:21:c9:da:1c:a5:24:e0:15:89:fe:e1:
82:49:4e:e2:f0:80:3f:c3:40:9c:08:66:8b:ec:ae:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:5D:60:DA:98:B0:1A:94:B0:28:69:85:39:3D:DE:A5:07:3D:02
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/R99dYNqYsBqUsChphTk93qUHPQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.95.0/24
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
99:58:95:43:20:e0:81:34:9a:bd:09:89:5d:39:12:12:7c:12:
e1:c9:4c:39:d2:62:53:a4:b7:9f:56:ba:4f:41:2b:84:00:c2:
e9:d0:4a:db:66:96:45:29:df:88:1f:54:d2:03:4b:72:bf:bc:
7c:2e:6a:f6:69:fc:f8:35:fc:af:33:cc:8d:75:c3:53:fb:4d:
f7:10:b9:97:d3:74:36:a6:19:23:be:aa:ec:fc:85:ac:32:7f:
9c:c5:27:71:b9:77:0b:44:fe:b8:a7:0e:82:e6:36:a6:69:fa:
ea:c7:78:42:69:5c:6c:65:6d:9d:34:a6:d7:53:56:77:3e:67:
eb:45:0d:71:24:bc:56:64:aa:dc:22:66:8b:50:05:27:a6:02:
8e:2d:07:18:88:5b:04:0e:ce:b1:0c:eb:2a:23:e8:c7:f6:e1:
2f:50:5b:68:a7:37:a0:2b:d6:da:ef:be:c1:68:0e:1a:80:a0:
f4:8f:c4:2d:b4:de:bd:d2:d0:c8:f4:63:5d:20:5e:a1:6a:24:
24:10:82:75:c8:2e:ee:78:02:3d:17:88:73:70:7a:1c:00:38:
ab:94:77:37:5a:e0:54:84:9f:c3:0d:75:fb:68:67:c8:2b:57:
51:52:d3:1f:86:55:68:c3:ff:3a:75:95:b7:b8:31:65:8e:ed:
83:7d:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:39:20 2025 by rpki-client