Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa
File: 1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa (raw, json)
Hash identifier: Usc03D+6sIRxj8MO/R5pSlLN/4nGI6YHAGwKCty72xE=
Subject key identifier: FB:C7:41:7B:7C:1E:0C:41:F9:96:63:D4:7D:A0:93:CB:51:7F:89:0D
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 019710403D01F776A74CB16F242141EF750D
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa
Signing time: Tue 27 May 2025 05:38:54 +0000
ROA not before: Tue 27 May 2025 05:38:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 62.233.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:40:3d:01:f7:76:a7:4c:b1:6f:24:21:41:ef:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: May 27 05:38:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc7417b7c1e0c41f99663d47da093cb517f890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:a5:ef:60:6b:fa:dd:08:c2:25:7e:02:d8:
4a:c4:76:e6:b1:13:27:2d:46:07:a6:77:18:87:f2:
8d:cd:bb:31:53:75:7d:02:60:38:4d:b5:dc:4e:9d:
76:2b:73:3c:7e:ad:7c:11:47:e8:73:e0:0d:b9:e1:
75:10:18:ca:15:f1:79:ee:55:3b:6b:c0:0c:67:96:
29:d2:58:25:a4:bf:13:6d:f4:a2:84:d8:b4:f4:fc:
2b:37:11:2a:e2:39:5b:33:64:c5:09:95:fc:75:94:
55:3a:25:0f:c9:ce:5d:6a:ee:22:18:2f:e5:b8:c4:
a5:53:5b:39:a7:c1:ff:03:f5:1e:80:e3:63:ec:0a:
85:9d:39:ce:78:f2:ad:a5:46:71:85:77:34:c4:3e:
7f:38:7f:8d:ff:20:e5:19:62:f3:5c:1b:b6:94:42:
7b:c3:82:9f:4b:4d:83:73:89:f0:67:f7:18:1d:5c:
1f:0e:62:8b:51:d5:e8:24:6c:d7:ba:f2:9b:3b:9c:
04:fe:cc:c0:95:7b:02:79:00:24:8e:c0:71:86:32:
7d:35:04:6e:61:80:bc:f0:12:09:cf:37:83:4e:49:
94:3e:c7:84:8a:ca:6f:38:b2:b1:88:3a:3b:71:83:
2c:49:5f:cb:a9:39:79:d0:b1:58:ec:90:13:c4:be:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:41:7B:7C:1E:0C:41:F9:96:63:D4:7D:A0:93:CB:51:7F:89:0D
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:59:77:1a:ac:e6:c5:71:fa:8b:a4:45:57:35:e5:5b:d2:91:
ec:69:52:d0:fa:6f:28:0b:73:34:f6:8a:00:4e:f3:7e:9c:53:
64:ea:2f:fd:19:69:55:95:ba:c4:f1:0f:b2:e4:68:f2:f7:48:
d9:91:07:3d:94:99:f8:8e:32:72:43:c9:9f:e0:3e:da:db:3c:
7f:10:36:4d:f8:57:b2:ea:97:b6:cf:4c:96:b4:46:6d:a2:f0:
06:69:d3:87:45:23:fd:f5:e0:ff:dc:04:69:94:18:6f:b5:9e:
e2:6e:ec:b6:06:d1:d5:ca:c7:3c:7e:8e:5f:59:4b:b5:0e:aa:
4c:c4:5e:02:16:6e:12:8f:dc:49:0e:04:46:fe:a3:68:85:94:
18:ad:d6:04:53:4d:eb:a9:02:a4:01:8c:8f:11:5e:86:a1:4a:
77:b3:6c:1f:4e:36:2d:e3:4e:96:ca:c9:ea:2e:64:59:d1:23:
cc:c1:d3:37:f2:c3:18:87:39:44:80:3b:f0:26:61:3b:dd:98:
66:68:a2:f5:f3:c8:2c:3a:1e:bd:01:c0:23:ca:f8:c8:8c:2d:
02:7d:ad:33:d4:94:0e:92:b5:6b:a9:8a:88:f0:f7:68:9e:8e:
69:6a:5b:92:ae:70:d9:19:9f:56:d5:27:72:38:d3:f7:a5:8f:
ec:66:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:19 2025 by rpki-client