Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/xifnCCeMNH18n0eWMqga1pgyjCM.roa
File: xifnCCeMNH18n0eWMqga1pgyjCM.roa (raw, json)
Hash identifier: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=
Subject key identifier: C6:27:E7:08:27:8C:34:7D:7C:9F:47:96:32:A8:1A:D6:98:32:8C:23
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 019423D73CC9E6D6F7D022F86137197B00A6
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/xifnCCeMNH18n0eWMqga1pgyjCM.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 62.97.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3c:c9:e6:d6:f7:d0:22:f8:61:37:19:7b:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c627e708278c347d7c9f479632a81ad698328c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:40:4c:b2:65:84:9f:48:b2:58:ed:57:04:
f1:32:70:b5:2f:07:a5:72:12:51:a2:51:6d:16:5b:
85:4a:f5:bf:0a:f8:75:bc:0c:6e:0a:13:89:50:f9:
ff:ee:9d:c5:73:2d:a7:01:d4:f9:77:e1:68:d7:24:
42:80:d5:e8:3e:50:87:46:42:74:78:60:e8:a7:16:
cc:40:5e:60:c4:d8:98:6c:e2:e7:51:21:67:32:de:
c7:df:38:16:39:4c:e0:01:95:17:83:23:f1:e9:06:
2d:ca:a4:01:83:54:c5:7b:b8:bf:01:47:2c:e1:9b:
58:59:b4:cd:9b:54:e2:f3:a9:43:e0:db:e7:43:03:
88:c0:ed:99:5a:00:dc:9a:ff:a6:9a:2b:ce:b1:26:
56:68:e3:54:17:fc:d5:fd:97:b3:e2:b4:60:3a:d1:
d7:5e:30:06:b6:99:0e:a1:08:ae:a4:85:e7:8d:5f:
53:3a:64:31:f6:33:a7:9e:72:f2:ef:05:74:23:ce:
35:c6:47:33:2a:b8:c0:31:ad:dd:c8:74:bd:0e:1d:
90:90:f3:8f:ff:d1:1f:9d:11:d7:d5:dc:01:1c:e8:
37:92:4c:24:8e:d6:fb:15:da:2a:e8:e8:1c:da:49:
1b:d5:c5:a0:e8:08:e7:bd:1f:05:e0:32:17:0f:59:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:E7:08:27:8C:34:7D:7C:9F:47:96:32:A8:1A:D6:98:32:8C:23
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/xifnCCeMNH18n0eWMqga1pgyjCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.97.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:65:ce:71:3b:29:4e:d6:ae:7f:64:9a:6e:83:de:38:71:2a:
ff:c1:71:3d:c1:51:7c:65:61:b5:08:81:ea:6e:0c:71:dc:fc:
03:c8:e4:4d:7c:ac:46:ac:be:53:a0:7a:44:60:d5:36:c4:b0:
bf:df:0f:7c:0b:a7:ee:f9:ed:9c:a5:a8:a7:d4:2c:29:3c:41:
7d:6a:be:7e:42:36:91:40:9e:3a:df:db:41:5c:72:64:24:41:
e2:68:a0:35:f5:77:7a:0d:cd:e8:af:86:e3:02:5b:f1:c3:9d:
66:b0:2f:16:68:f5:35:db:cd:83:64:0d:fa:01:e1:41:00:10:
b6:50:01:75:5f:e1:a9:56:f2:09:3b:19:b1:22:05:e9:4a:0c:
06:c0:63:b1:b4:b7:ba:54:7d:59:fa:91:db:4c:93:b4:0b:59:
9d:2e:9a:65:b3:b3:79:23:b5:51:63:47:05:c5:34:fb:24:7f:
8f:9d:31:34:54:5a:25:8b:f0:20:ef:4e:76:bb:a0:ab:e9:1d:
74:fb:84:f2:dd:27:f8:2d:49:71:0a:af:3f:7c:2c:f1:d8:0a:
18:0d:3e:70:b4:a5:ea:7a:0c:08:b5:f7:47:df:32:8f:2a:09:
b9:e4:33:58:b4:57:7b:8a:2a:6c:45:bd:15:73:dc:95:4e:0a:
b3:56:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:08 2025 by rpki-client