Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/p62St_0MRIeBUvHxqOmIuKO2S0g.roa
File: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (raw, json)
Hash identifier: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=
Subject key identifier: A7:AD:92:B7:FD:0C:44:87:81:52:F1:F1:A8:E9:88:B8:A3:B6:4B:48
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 01942444E0C8217641F95473844802DA4965
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/p62St_0MRIeBUvHxqOmIuKO2S0g.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43073
IP address blocks: 45.128.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e0:c8:21:76:41:f9:54:73:84:48:02:da:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ad92b7fd0c44878152f1f1a8e988b8a3b64b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:da:bf:a3:2f:4d:0b:77:5d:1d:5c:76:aa:
61:29:aa:23:96:e2:27:2a:e6:7d:6b:dd:3d:3a:84:
98:86:a9:e9:1b:e9:6e:86:1c:ce:69:ff:4d:42:8b:
a8:75:e8:8c:d7:f0:e3:34:26:a9:3f:a3:7e:25:ae:
d8:f8:d4:6e:58:67:ea:22:ec:94:0f:58:13:d3:04:
7a:4e:aa:b9:dd:86:6c:0b:42:16:13:4a:a4:55:ed:
cf:40:8d:c6:1c:13:a9:d1:10:c7:d6:75:c3:33:67:
dd:b6:25:5d:15:59:ed:da:86:e6:6b:f6:63:70:c4:
4b:ba:57:32:0e:93:8e:56:6d:05:d5:dc:32:54:ec:
20:77:b1:2e:f0:4d:0a:20:42:8b:86:2b:24:b0:dc:
f9:69:17:e0:bc:d3:29:08:2c:63:b8:56:22:df:95:
b0:f7:34:31:a7:c6:72:bb:c4:08:58:42:e3:8d:b9:
5f:74:21:aa:01:b1:61:93:a6:80:6c:56:32:4d:ba:
98:b6:79:84:8e:5e:4e:5a:fd:e3:2f:6f:b0:0f:00:
cd:dc:34:cc:1f:f8:c3:dc:f2:eb:ea:77:cf:cb:2a:
b4:4c:d5:58:7a:a4:4f:36:5b:07:9f:4c:c4:3e:f0:
b8:70:00:fa:87:b8:45:2c:39:8f:34:c5:3d:25:66:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:92:B7:FD:0C:44:87:81:52:F1:F1:A8:E9:88:B8:A3:B6:4B:48
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/p62St_0MRIeBUvHxqOmIuKO2S0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:f7:1b:54:11:2e:9c:12:19:8c:8e:a9:69:3e:56:41:cd:cb:
14:a8:db:16:f5:73:79:68:93:32:f8:93:2b:cb:8f:13:2d:ce:
0d:2c:0d:c5:cb:40:23:e9:a2:27:db:a7:eb:59:37:4f:88:19:
30:be:da:8a:46:e2:f4:5e:ca:87:fc:eb:36:6c:0f:87:93:2f:
cc:3a:9c:7a:c3:af:cd:fc:f7:c3:5f:91:a8:f7:10:d6:6c:38:
70:ad:2a:9a:e3:8d:c8:5d:48:f6:fc:dc:7f:ec:13:c9:38:ed:
b4:4e:b6:3b:1b:33:e2:50:a9:86:94:bc:5e:cc:11:00:9c:8a:
80:66:91:cd:db:23:63:35:27:b0:8c:9f:cc:2a:d5:1e:a1:f6:
30:31:32:b2:23:a7:5d:59:78:9f:67:45:be:32:b1:2b:3a:a0:
cb:41:65:d0:5c:92:a3:79:14:25:df:69:c0:f3:6a:4a:8d:b6:
00:ee:71:b9:77:fc:1e:18:7b:55:35:fc:5a:a8:9d:30:0b:0b:
70:a6:6b:5b:2a:ff:1d:96:63:55:3d:b1:b7:61:3d:74:5a:39:
14:35:b9:84:ac:34:81:59:0b:83:64:4f:82:f0:21:89:ab:1d:
12:b9:9e:9b:6c:1b:86:05:63:a3:c9:fb:bb:ac:14:54:4e:2e:
79:e4:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:18 2025 by rpki-client