Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/6X834B5gcsNjXymrQMfROjTj6Pc.roa
File: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (raw, json)
Hash identifier: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=
Subject key identifier: E9:7F:37:E0:1E:60:72:C3:63:5F:29:AB:40:C7:D1:3A:34:E3:E8:F7
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 01942521D398F79F259B4D070C6B34DEE723
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/6X834B5gcsNjXymrQMfROjTj6Pc.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 62.122.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d3:98:f7:9f:25:9b:4d:07:0c:6b:34:de:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97f37e01e6072c3635f29ab40c7d13a34e3e8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:40:d2:70:26:93:91:d5:cd:4a:a9:92:61:
08:88:49:86:f0:25:a4:60:a8:f4:7d:83:11:0c:81:
a7:17:8c:aa:d6:0a:de:8d:65:fb:6b:c1:6d:2f:fd:
27:60:0a:d8:b0:75:a9:cd:31:cb:ea:32:dc:25:46:
96:28:11:07:91:75:65:3c:a5:8f:b2:1f:72:be:1b:
55:71:51:5d:6d:18:26:ff:84:57:7e:f1:ac:02:f2:
96:38:8c:7d:50:20:57:a5:c4:55:b0:56:a3:d3:13:
f6:9a:d9:d1:96:61:c5:f7:8c:fc:1c:64:59:95:b6:
90:13:8d:0a:1c:c4:c4:69:c5:6c:4f:64:4c:58:5e:
7a:63:5e:5e:b0:cd:c9:f6:cc:c4:1d:78:e5:62:c2:
a2:d4:eb:b3:8a:c4:11:2f:b6:2c:1a:a9:54:8f:64:
cf:63:01:40:e4:4f:1b:3d:90:1a:37:7b:d3:75:4c:
f4:a0:1a:4a:b9:de:cd:c6:4b:08:00:f2:ae:44:5f:
22:6d:0f:1a:d4:4f:3d:88:4b:28:de:b7:18:34:ce:
cd:c4:2d:fb:59:14:dc:a9:7b:f2:23:ec:b7:69:e1:
2e:92:e0:99:b8:9c:e1:46:74:bc:a7:4e:3f:32:aa:
9d:7e:94:19:e3:b2:a0:07:30:34:89:b9:d7:2f:0b:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7F:37:E0:1E:60:72:C3:63:5F:29:AB:40:C7:D1:3A:34:E3:E8:F7
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/6X834B5gcsNjXymrQMfROjTj6Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8b:8e:a8:8e:0b:2d:31:0c:ac:41:2a:11:93:d5:4e:1a:0a:
51:c2:56:b7:d6:b9:ac:38:cd:1a:f3:cb:31:e3:2a:a7:f4:82:
f5:cd:20:0f:55:58:d9:c0:fd:49:88:19:8c:63:ee:d9:68:a4:
6c:06:15:3d:a2:04:eb:23:11:42:41:9a:f9:2c:b2:52:4c:5d:
33:5e:05:9b:fc:30:b1:3b:40:81:2d:3f:00:b9:f3:98:19:00:
9f:d4:0c:63:94:da:f4:c6:95:49:03:94:ca:9c:36:67:a2:b3:
97:1a:89:d6:c9:ce:d7:e1:fb:51:df:ce:09:db:6b:d0:bf:28:
d7:d2:64:db:b1:48:73:06:53:18:55:39:75:78:98:7e:33:c5:
2f:1d:31:2f:d9:86:bf:6e:42:df:55:29:73:da:61:4b:ad:63:
ae:29:c5:02:d9:8d:b1:a6:dd:4b:e1:ea:63:d7:ca:84:23:34:
73:d7:18:54:59:1d:3e:b3:d6:53:ff:4b:8a:df:b9:a6:c9:c7:
5a:22:bc:9a:34:1d:a8:65:1c:a2:ba:7d:4c:58:cb:35:f5:8f:
14:f1:2f:e8:de:14:e8:cb:70:7c:0f:f5:9e:0e:e1:f3:0e:2a:
b9:a8:47:ef:fa:d9:8f:d8:e8:b7:6e:72:5f:ec:8d:49:16:35:
df:47:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:51 2025 by rpki-client