Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pcqqevXAthwv3P-WoufnBPWJaRE.roa
File: pcqqevXAthwv3P-WoufnBPWJaRE.roa (raw, json)
Hash identifier: 7nvC+/+3VO3mfOuCXbDt2+XqJ32zrEYBfDXqNhmkNMA=
Subject key identifier: A5:CA:AA:7A:F5:C0:B6:1C:2F:DC:FF:96:A2:E7:E7:04:F5:89:69:11
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B8937B20BD65DED533FE625465253
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pcqqevXAthwv3P-WoufnBPWJaRE.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208601
IP address blocks: 62.228.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:89:37:b2:0b:d6:5d:ed:53:3f:e6:25:46:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5caaa7af5c0b61c2fdcff96a2e7e704f5896911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:07:4d:59:41:76:89:10:51:81:dd:28:c6:
6e:6e:ba:7d:ac:81:0f:8d:b6:5c:fa:fe:2f:31:7e:
c6:90:c6:bd:2d:32:5f:e3:60:cd:a0:0f:0e:bd:be:
8e:7f:b8:fd:e5:15:16:1e:83:31:5e:f4:82:08:c1:
de:5d:28:9c:a4:e4:fd:0c:e2:b8:92:dd:2c:b4:69:
db:5b:89:02:c8:c0:47:e7:41:55:59:1e:f6:49:4a:
2e:fc:62:f3:f3:4b:68:ac:df:48:6d:e7:11:b2:38:
56:31:89:06:3b:0a:66:92:03:7a:87:36:36:42:47:
62:d8:19:5c:17:f2:8e:19:16:87:30:8b:18:41:c1:
cc:e0:51:40:f1:9f:a6:17:99:b4:8e:02:48:0e:89:
03:e2:ea:99:1b:15:72:97:92:9d:d9:f6:f2:59:65:
7d:5f:80:a0:be:d6:3d:c4:b4:2f:28:4a:aa:79:d4:
e9:c0:98:9e:11:4a:c3:8d:55:e5:d2:ca:7b:b8:3c:
46:2a:2b:fd:8d:36:ff:7a:b2:0b:ea:eb:bb:99:48:
20:9a:d7:cd:66:95:00:ef:20:86:57:7a:3a:f6:24:
81:21:ad:f2:60:6c:68:fa:ba:3c:40:2f:66:fa:67:
ef:be:b0:2b:dd:6a:d5:7f:62:0a:1b:66:06:9d:8b:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:AA:7A:F5:C0:B6:1C:2F:DC:FF:96:A2:E7:E7:04:F5:89:69:11
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pcqqevXAthwv3P-WoufnBPWJaRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:58:b0:fd:af:db:c2:3e:7a:7f:de:c5:5c:e8:73:67:13:30:
11:00:13:9e:4f:ec:9d:16:aa:12:9a:73:34:cb:2c:b8:7f:31:
43:10:e4:d9:f2:06:1a:3b:bb:ad:45:50:7b:9f:bc:e9:1f:3d:
73:55:1e:94:ae:7e:3e:6e:69:8f:fb:59:bf:43:8e:67:06:44:
2b:06:c3:e3:fc:85:eb:03:d9:19:85:40:48:bc:fd:7a:03:d6:
55:ab:fc:da:21:59:66:20:4a:b8:b2:43:20:b6:6e:9e:f7:8b:
c1:19:1e:97:41:57:7d:8d:f8:36:a6:37:16:78:f6:12:7e:cf:
14:b3:c7:41:0a:9a:2d:d4:13:b0:71:0d:14:3c:8a:fe:f9:93:
04:46:68:9a:e0:cf:b5:4f:ff:54:72:06:d4:ec:13:97:17:9f:
f0:4b:a4:d9:81:0c:f8:ae:51:d8:28:84:7a:38:a7:d2:19:93:
9a:19:df:3f:4e:ae:a3:89:60:f9:a4:f1:03:90:d0:ad:45:f5:
36:05:c6:22:1c:fb:02:6e:39:5b:5c:0c:a2:51:18:d6:b6:b5:
82:4c:cb:75:e4:ba:81:c1:9d:cf:d8:fd:c1:70:39:66:d2:8f:
80:cb:0e:c1:f8:b7:2c:fc:89:42:5a:ab:a5:33:dc:8d:d4:0d:
0f:ba:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:33 2025 by rpki-client