Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Ae-QslNU3gy3W0egozYRZj4M0_I.roa
File: Ae-QslNU3gy3W0egozYRZj4M0_I.roa (raw, json)
Hash identifier: Fot9yL7In+gwq2RwKasepUOmQgQxJF7U8tdZaL0Gl3I=
Subject key identifier: 01:EF:90:B2:53:54:DE:0C:B7:5B:47:A0:A3:36:11:66:3E:0C:D3:F2
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B8720035FDFE5489982F7588F6465
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Ae-QslNU3gy3W0egozYRZj4M0_I.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:87:20:03:5f:df:e5:48:99:82:f7:58:8f:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01ef90b25354de0cb75b47a0a33611663e0cd3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:66:84:0c:bf:15:62:c4:c4:54:b2:7d:45:
6f:c7:e3:77:6d:70:3d:bc:02:4b:08:69:b2:ac:81:
da:6b:4b:0f:be:73:6f:d4:33:09:d0:e5:c1:38:1d:
59:64:b1:33:4e:84:29:94:15:dc:7a:90:d2:d6:45:
6c:ff:21:18:4d:a6:81:aa:7f:7f:35:21:38:6f:df:
da:b5:2e:6d:23:b6:c0:76:7c:0e:08:81:37:bf:c4:
dc:38:70:12:49:26:29:fb:d9:e3:22:10:38:7b:77:
dd:86:30:69:03:91:47:18:84:77:7f:67:e3:0b:31:
19:07:f8:4b:64:a7:78:70:96:5c:34:57:3c:38:ad:
c9:bf:59:b4:1d:03:ff:fc:a5:ad:46:e3:cd:7e:93:
b4:36:c1:33:bc:0a:34:7d:18:4b:cf:88:51:9b:40:
fb:39:7b:48:ea:8d:4e:82:0a:29:0a:13:9c:9a:98:
82:ae:3f:a4:97:6a:0d:2d:82:55:e0:81:f9:ef:f6:
88:f8:ce:73:ad:49:78:2f:65:08:21:43:f0:12:fc:
98:21:c9:d6:a6:b5:9c:a9:89:7f:d6:a8:53:2c:35:
8f:5c:13:72:0b:b0:85:5f:bd:dd:36:db:7f:7c:6a:
b3:77:1a:cb:e8:fc:8f:13:37:16:54:c8:b0:51:04:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:90:B2:53:54:DE:0C:B7:5B:47:A0:A3:36:11:66:3E:0C:D3:F2
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Ae-QslNU3gy3W0egozYRZj4M0_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9d:f4:bc:0f:b9:cc:4d:c6:15:d9:8b:93:d1:5b:5b:de:33:
59:a0:b3:90:cd:9e:46:ea:7e:50:e4:5d:39:44:97:7f:42:4c:
98:a3:7f:b9:a6:21:4e:4a:ea:82:48:ef:1f:bb:5c:23:1b:b3:
0b:a7:48:06:d3:67:3b:9c:e2:78:53:6a:a2:e0:83:67:f7:39:
76:2c:80:13:c5:35:8c:0e:05:3c:b8:8f:9b:ea:94:b4:f2:77:
91:df:bd:00:7f:cc:03:97:2d:86:92:cf:64:a8:27:06:6c:61:
a7:f5:30:07:05:ff:e6:5b:8f:03:19:a8:5d:28:82:d1:f4:2e:
13:1d:ac:e1:6e:10:e1:eb:d4:5a:9e:77:c2:ca:37:1d:f6:39:
aa:e5:8a:0b:8b:20:50:bd:c6:eb:34:c0:1a:92:b0:33:4e:d4:
54:e3:2e:cf:d8:f7:50:cf:1d:e3:fd:72:b4:8a:a9:af:f4:b2:
9d:f4:01:c8:7a:1c:21:0a:2e:dd:be:cd:36:f7:3c:fd:8a:d9:
ae:bb:b8:36:1b:fb:17:f4:93:94:37:d3:4a:1a:e7:f6:d6:fd:
1c:51:eb:8c:ff:89:4b:8f:9e:dd:e9:2f:22:a1:f5:dd:94:a9:
7d:24:e9:ea:7e:d6:4d:a5:05:fe:3d:85:0b:7e:dd:b4:3d:c5:
62:ea:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:17 2025 by rpki-client