Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c9mjRKIiIhveB8hpl4lJgX61pz0.roa
File: c9mjRKIiIhveB8hpl4lJgX61pz0.roa (raw, json)
Hash identifier: ePmlGQCFU1GYCtfOlxI9naN4sv+47lFMcBkkM1EOqVc=
Subject key identifier: 73:D9:A3:44:A2:22:22:1B:DE:07:C8:69:97:89:49:81:7E:B5:A7:3D
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B849E16C3C095663488F44DB73836
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c9mjRKIiIhveB8hpl4lJgX61pz0.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:84:9e:16:c3:c0:95:66:34:88:f4:4d:b7:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d9a344a222221bde07c869978949817eb5a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:21:b6:91:4c:f7:f2:7d:ed:aa:bc:09:94:
e5:a3:c5:ef:96:f9:cd:45:8a:fe:47:ca:cb:43:f3:
f7:8f:b1:da:f9:d9:b8:de:5b:73:68:95:84:a1:dd:
34:59:ed:ef:ac:1b:6b:ee:63:9c:f1:4c:e8:88:9d:
b3:73:97:68:f6:3e:91:d5:10:d8:ce:4f:94:e0:0d:
14:22:bf:f1:cc:40:b6:86:77:3a:44:fd:45:79:66:
09:95:a8:49:47:9c:e4:89:e1:a6:d2:42:8d:0c:6d:
5f:64:4a:ae:40:d4:ac:27:7e:50:3d:fd:39:da:70:
ae:b5:9f:0c:3e:f9:34:94:02:ff:3b:78:aa:e0:23:
a3:fb:ad:e6:1c:d1:21:ee:da:23:32:03:e0:c0:6c:
3e:47:0b:af:85:fd:07:a5:79:c1:68:16:0a:3a:35:
ad:0e:3b:ed:cb:b5:e6:df:57:2f:71:52:0b:b9:ed:
07:8d:d6:c0:b7:5a:05:40:c1:a3:07:cf:68:02:3a:
0c:8c:92:7c:bc:5f:1f:cc:4e:2b:02:46:a9:5e:6c:
eb:59:31:c1:61:b5:3b:bf:ab:b6:8c:9c:cb:34:2f:
fe:25:ff:c7:43:83:b9:8d:68:cd:5a:ab:ac:27:f9:
3f:53:c0:49:a6:4d:e7:f8:9d:1a:86:ce:54:6c:b0:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:A3:44:A2:22:22:1B:DE:07:C8:69:97:89:49:81:7E:B5:A7:3D
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c9mjRKIiIhveB8hpl4lJgX61pz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9b:a2:a1:ef:02:61:c5:21:08:3f:49:71:6c:3a:53:1a:ef:
98:41:e5:d6:c5:b7:40:f1:07:9e:1f:89:ef:46:01:41:ae:0d:
69:f8:78:6a:a5:b2:9c:80:8e:61:84:a3:6e:05:91:27:6b:81:
a2:42:ed:82:d9:b6:6a:b1:57:05:60:b3:0b:79:6d:75:2c:13:
07:c1:b8:57:d3:02:e3:56:a1:0c:f6:fc:42:50:b5:a0:68:ac:
79:03:9d:f5:ac:8b:1d:42:9a:1e:b0:bf:55:33:fb:47:31:a0:
ae:2d:2b:dd:17:a1:b2:ef:d4:b0:fc:f0:da:dc:73:bb:85:f1:
ac:c3:07:d9:be:b3:39:70:14:b6:37:5b:78:b5:8b:b8:9a:31:
0c:52:a5:c8:15:6e:7f:24:01:f0:17:11:2a:ae:d9:73:70:3b:
a0:26:60:da:53:19:57:7a:da:70:34:ab:0a:f1:18:ea:9a:29:
e3:9f:f8:6f:ed:3a:8e:63:34:d0:52:84:d4:13:4c:d6:c2:10:
42:5a:a8:c8:6a:7e:65:67:0e:5c:30:b6:8d:c8:42:52:02:81:
a4:f4:03:ef:4f:69:ec:d2:dc:a9:d1:d8:bf:08:09:b1:69:8d:
1b:b9:a0:33:21:27:e2:64:d3:ba:c8:78:f9:6b:a1:0b:cc:8b:
26:10:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:53:55 2025 by rpki-client