Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/f62uVetw4VLEAcyA7iUss0CmbKk.roa
File: f62uVetw4VLEAcyA7iUss0CmbKk.roa (raw, json)
Hash identifier: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=
Subject key identifier: 7F:AD:AE:55:EB:70:E1:52:C4:01:CC:80:EE:25:2C:B3:40:A6:6C:A9
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 01942143FD8B3847B6601E3435D47AB45873
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/f62uVetw4VLEAcyA7iUss0CmbKk.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49688
IP address blocks: 195.35.98.0/24 maxlen: 24
195.35.102.0/24 maxlen: 24
195.35.108.0/24 maxlen: 24
195.38.21.0/24 maxlen: 24
2a0f:b7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:8b:38:47:b6:60:1e:34:35:d4:7a:b4:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fadae55eb70e152c401cc80ee252cb340a66ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:cb:8a:b7:5e:d3:a7:10:ec:94:49:f1:bf:
7d:bb:1d:be:ec:2e:cd:65:02:1e:b9:f3:f3:73:42:
60:e2:33:6a:0a:33:3d:6e:7d:8b:de:33:f3:82:af:
7b:73:d6:00:3f:dc:1a:74:73:db:38:80:7a:ec:e8:
ec:69:50:b6:15:e9:3e:3c:77:78:f5:54:e9:d5:fd:
80:62:ad:25:e2:25:04:21:31:af:92:6b:88:00:53:
6f:26:0c:62:3d:dd:4a:a0:3a:7b:53:77:e7:89:20:
af:cf:c0:13:3b:0c:3b:34:e3:b4:bd:7a:08:b8:44:
4f:d5:9e:82:a8:4f:f0:96:51:a0:de:b0:56:7e:ad:
4c:e0:3a:52:15:a1:2b:b7:9b:63:b9:b5:be:30:2f:
9d:04:65:2f:b8:c9:d8:c6:4b:61:14:04:74:86:b3:
8c:ef:92:cf:fe:2b:59:c6:06:87:8c:31:c5:93:97:
82:ee:75:bd:68:99:4e:d0:ed:7b:d1:59:70:ba:53:
06:70:e1:77:60:46:7e:bf:23:e9:91:74:db:56:89:
09:4e:28:31:6f:60:ed:3f:62:05:a2:04:84:df:1b:
31:e5:b0:93:a0:02:bc:24:ca:25:b6:25:f6:59:cb:
44:78:f9:a1:eb:65:45:cd:3c:04:90:0e:cd:4c:85:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:AE:55:EB:70:E1:52:C4:01:CC:80:EE:25:2C:B3:40:A6:6C:A9
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/f62uVetw4VLEAcyA7iUss0CmbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.98.0/24
195.35.102.0/24
195.35.108.0/24
195.38.21.0/24
IPv6:
2a0f:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:d0:57:0d:b9:01:90:db:32:5c:fc:e5:07:f8:9e:23:dc:18:
e9:eb:c5:25:5f:be:5f:03:63:d8:39:6c:99:37:f4:7f:5b:f6:
a2:3d:63:db:b9:8e:22:a3:f8:c6:77:82:2b:07:13:13:b3:4f:
89:f0:14:88:d3:1d:99:09:cb:0e:59:00:d2:9e:0d:ca:38:85:
6d:e1:2a:46:b6:0c:e4:44:58:66:41:a6:ae:5e:91:ac:2b:fb:
30:5b:b1:a7:be:e7:7d:40:0b:a2:2e:b3:1c:26:a4:85:49:46:
c8:63:22:30:c3:4b:2a:70:7c:86:8c:f5:37:f8:09:fd:f5:af:
f2:0a:03:dd:24:1e:33:4a:1f:13:b2:58:a2:59:73:ae:37:c3:
59:e4:ef:ef:d6:55:76:35:2b:8c:68:67:79:54:5e:a0:e8:86:
92:de:08:eb:4c:26:2c:68:e7:c1:95:5d:b1:ec:73:64:5a:91:
d6:6e:9c:1c:3e:cf:7f:8e:d0:a6:e0:24:e7:e4:43:30:90:30:
a0:34:65:61:56:bf:7a:99:e7:9c:d2:70:85:b3:02:94:eb:cd:
1a:2e:55:f9:86:98:33:9d:ad:01:72:c4:ef:fd:a5:70:ed:4f:
97:90:e4:92:95:38:bd:89:45:b1:22:00:43:ac:01:4a:15:47:
da:ac:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:25 2025 by rpki-client