Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/MEDzHD9q2eGweUQdapdjXMBMfTQ.roa
File: MEDzHD9q2eGweUQdapdjXMBMfTQ.roa (raw, json)
Hash identifier: zXMAfE64URHINF27A6nJI8RqMOkKP0TBeGh/Il74bmY=
Subject key identifier: 30:40:F3:1C:3F:6A:D9:E1:B0:79:44:1D:6A:97:63:5C:C0:4C:7D:34
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019424456ED1C8A4E54BE092E95268C4E631
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/MEDzHD9q2eGweUQdapdjXMBMfTQ.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 62.122.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6e:d1:c8:a4:e5:4b:e0:92:e9:52:68:c4:e6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3040f31c3f6ad9e1b079441d6a97635cc04c7d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:b4:70:82:86:e2:05:dd:bf:b6:79:57:ef:
0f:37:30:dd:da:d0:8b:1b:af:1c:3b:52:f5:18:e8:
d6:86:85:b9:92:5c:51:68:0a:fa:4b:6c:4d:79:26:
7b:50:b8:96:83:74:8b:bc:eb:dd:06:9b:ec:70:5a:
51:15:09:b8:55:b1:ef:56:0f:cc:c2:2e:97:b7:fb:
f8:3a:6d:81:8f:aa:10:ee:75:49:a1:3b:d6:95:cb:
4a:02:aa:47:c3:25:68:03:27:1c:d3:e0:6c:71:ea:
95:18:91:3c:15:2e:63:06:5b:f9:e3:d5:5d:fc:85:
3d:7e:76:4d:c5:19:8a:15:af:6b:28:55:7b:58:37:
9b:6d:30:11:5a:fa:e6:18:6b:98:05:d4:c2:04:e0:
d2:78:4e:0b:d0:e7:e4:40:50:75:af:66:9a:cf:7b:
31:da:3c:9b:ff:76:e2:9c:46:89:60:16:73:51:0b:
8f:32:7a:5c:d3:4a:c9:f2:92:5e:34:e6:5a:0e:62:
07:fc:88:23:ea:fd:48:7b:26:12:48:52:d0:31:c9:
cd:0d:10:8a:b9:74:03:48:33:1b:18:ff:57:97:2b:
3f:40:54:aa:21:e0:5e:d4:77:e2:97:e1:fb:5c:34:
6e:9d:48:e1:ad:9d:31:f6:b7:06:58:b8:78:70:58:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:F3:1C:3F:6A:D9:E1:B0:79:44:1D:6A:97:63:5C:C0:4C:7D:34
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/MEDzHD9q2eGweUQdapdjXMBMfTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.71.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:9b:1c:e8:dd:86:58:b7:07:6b:ff:cf:bf:8b:2c:a0:e6:6f:
a3:a0:19:91:9f:2a:e2:a2:6e:aa:05:ce:23:ee:2c:c7:e9:e9:
5e:83:44:1c:58:db:4d:d5:e8:bd:5a:35:7b:f7:74:c2:5c:91:
8d:c7:82:de:34:71:49:6c:ac:e2:87:93:d4:03:54:18:4f:fd:
f4:84:6a:13:c6:d2:fb:68:e5:57:3c:d7:39:c1:31:f8:8e:5c:
21:bf:17:4b:2a:4d:d9:49:be:8a:d8:fc:f1:2c:08:c8:72:49:
52:0b:c5:07:71:f0:36:ab:c8:5f:cf:25:7e:93:ea:7d:19:f7:
48:51:d3:be:9c:4d:2f:72:b4:1a:c9:92:22:6f:41:53:25:94:
25:d4:17:e1:7d:9f:f0:21:81:62:73:9e:11:80:2c:bb:bf:79:
ea:b0:f8:f0:78:20:42:77:75:b5:5e:4a:b2:9b:e4:e5:ce:3f:
d5:6f:1d:03:b3:e8:be:cb:91:f1:83:04:0a:3c:eb:f6:44:2a:
db:ee:2c:0c:7f:06:d5:85:59:90:0d:e2:20:55:43:85:c6:78:
91:6c:7d:6b:60:2a:0e:6d:67:70:30:d7:2b:4f:23:c9:a8:89:
23:70:49:b1:07:df:be:f5:38:c4:06:56:f2:af:0c:1b:62:f9:
c1:80:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:13 2025 by rpki-client