Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/Qkkirv8lLJuTeoHE2XBshzOic18.roa
File: Qkkirv8lLJuTeoHE2XBshzOic18.roa (raw, json)
Hash identifier: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=
Subject key identifier: 42:49:22:AE:FF:25:2C:9B:93:7A:81:C4:D9:70:6C:87:33:A2:73:5F
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0194252195B8E32C2F77F49D83A09CC0C30B
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/Qkkirv8lLJuTeoHE2XBshzOic18.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35701
IP address blocks: 62.122.36.0/22 maxlen: 22
62.122.39.0/24 maxlen: 24
2a05:7300::/30 maxlen: 30
2a05:7300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:b8:e3:2c:2f:77:f4:9d:83:a0:9c:c0:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=424922aeff252c9b937a81c4d9706c8733a2735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:97:56:ec:60:71:70:b2:60:0a:6d:50:18:
a2:7b:cd:86:69:d7:b9:b9:52:ad:4a:3d:13:f8:ba:
19:06:d6:b0:fb:55:29:f2:77:3b:39:ab:63:22:4f:
0b:f2:a4:dd:d8:d0:0f:b2:ed:cb:04:b4:3d:15:cc:
89:8e:45:a1:ea:c7:84:b5:23:4d:94:74:7c:9b:ca:
fe:59:c4:c8:37:1b:10:41:60:60:8d:c4:cb:b7:26:
28:d2:f8:68:33:95:0f:20:51:1d:e1:12:6b:65:6e:
18:63:a0:9f:d1:c9:4a:fd:40:04:c2:45:e9:f4:f0:
1a:b9:1f:ab:f6:46:53:da:74:20:0e:93:7b:28:1c:
44:7d:a6:09:db:0c:af:f8:a1:6e:d6:1e:76:b0:12:
67:e6:ce:fb:f0:c2:84:e6:0c:f9:6e:a3:d4:5a:ca:
9c:0e:78:35:83:aa:e3:73:63:33:06:72:f0:34:8b:
e6:c6:7f:cb:cc:eb:94:ef:ea:3e:e2:db:f1:55:a0:
09:c8:2b:2c:29:13:c3:e4:5c:a1:4f:e3:18:b8:3f:
41:fe:fd:9d:94:ef:a3:f5:e9:bf:e8:31:79:e6:b4:
a0:0d:9e:51:ef:5f:c1:3f:78:ed:23:b3:03:53:b0:
1c:94:59:a0:7e:d7:1a:9d:4f:bd:9d:40:3f:2b:63:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:22:AE:FF:25:2C:9B:93:7A:81:C4:D9:70:6C:87:33:A2:73:5F
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/Qkkirv8lLJuTeoHE2XBshzOic18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.36.0/22
IPv6:
2a05:7300::/30
Signature Algorithm: sha256WithRSAEncryption
b9:a3:34:cd:71:d3:f4:8c:1b:98:23:af:3d:c7:f7:86:2e:4f:
05:9c:8e:7a:1f:0c:c9:e9:c4:ac:1a:25:a6:d4:83:f6:b6:a1:
3a:93:7e:28:c1:fa:a2:9d:10:b3:f8:4b:33:1f:f3:5b:45:3c:
90:23:49:c4:eb:91:27:f5:b6:a8:87:ca:06:f3:ac:f0:0f:ea:
ab:99:6c:b9:c9:cc:0b:b6:f2:14:cc:cc:00:90:cc:27:ad:48:
8a:63:ab:f4:19:8f:17:79:a3:c9:bb:fa:4e:fd:69:db:32:d0:
cc:1e:bb:f2:74:12:0a:96:2b:36:9e:f1:f0:a8:a8:44:7b:63:
14:38:eb:62:3e:2c:25:05:76:89:7e:c5:e4:19:08:00:5d:f9:
25:a6:28:b5:9b:e8:a7:77:02:87:d6:31:75:cf:21:59:12:95:
1c:00:6a:b3:1d:54:85:60:08:6b:13:0c:ac:bc:3c:9c:13:48:
79:22:17:b5:ab:09:28:27:67:0e:9b:79:33:14:24:96:31:7a:
04:f4:29:0c:82:7d:aa:d4:b8:c3:a4:1b:c8:e8:ae:dc:b7:68:
1f:93:fd:1f:ab:e7:fc:61:e2:40:81:af:e5:9b:60:3c:ab:36:
34:02:85:42:3a:26:37:d1:86:dd:69:ad:59:e2:2b:00:ef:8d:
1b:62:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:47 2025 by rpki-client