Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o6YChZ7OP9Orr5Vw9VDf6_cAsDg.roa
File: o6YChZ7OP9Orr5Vw9VDf6_cAsDg.roa (raw, json)
Hash identifier: TVzo8v/cMtP5McZ9I3HiA36m745+Qi32MWGQIln7p4g=
Subject key identifier: A3:A6:02:85:9E:CE:3F:D3:AB:AF:95:70:F5:50:DF:EB:F7:00:B0:38
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD61FB79793094FCD5C26E3623A087
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o6YChZ7OP9Orr5Vw9VDf6_cAsDg.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 62.76.142.0/24 maxlen: 24
195.19.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:61:fb:79:79:30:94:fc:d5:c2:6e:36:23:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a602859ece3fd3abaf9570f550dfebf700b038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:69:b7:91:ef:6b:31:a3:6c:9d:ce:3a:72:
89:75:a8:62:24:4a:0a:c8:f6:6b:17:59:60:be:18:
4e:85:d2:39:25:66:25:40:0d:57:cb:c6:20:91:7f:
8c:ba:19:fc:ad:49:f1:44:c8:21:92:dd:43:33:f3:
fd:0d:64:7d:f4:f4:a6:72:a9:db:27:32:3e:ae:f2:
87:a0:84:50:2e:a0:f3:1d:fa:b4:e7:7a:81:0e:c7:
2a:3e:c3:03:f7:39:00:e5:e5:de:b1:15:16:68:a5:
d1:f8:ce:1a:68:8a:ac:6e:d2:e5:a8:48:3a:2b:51:
df:43:3d:c1:35:05:c9:a4:b8:50:a4:46:9f:88:c7:
e6:42:ce:8d:bf:61:b9:9a:67:da:70:50:31:c8:3a:
a7:26:68:5a:fc:52:27:63:41:e1:fe:cf:b5:d6:76:
98:66:9d:5b:1b:11:20:ff:93:c9:f1:2a:38:ea:1e:
55:03:a0:e1:65:41:61:9c:59:93:1b:fe:93:7f:51:
06:58:d4:f6:f3:38:4d:24:32:a3:54:d8:43:7c:99:
9c:9f:39:4d:b7:75:0a:4a:ed:44:3b:6d:32:a4:51:
42:19:18:2d:06:be:ce:38:33:33:fc:30:0c:3d:83:
ad:97:0f:27:e5:ed:05:cd:fb:0a:ce:29:71:df:87:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:02:85:9E:CE:3F:D3:AB:AF:95:70:F5:50:DF:EB:F7:00:B0:38
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o6YChZ7OP9Orr5Vw9VDf6_cAsDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.142.0/24
195.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
80:12:27:66:78:06:6d:93:d6:9b:85:8c:aa:e1:ff:b6:27:26:
fe:a7:84:43:c8:8e:e2:1e:4d:29:28:a3:ce:2f:a4:23:93:da:
18:1f:74:a1:28:20:89:e3:e9:04:61:07:34:b9:6e:6e:0e:80:
49:93:3d:58:b0:50:90:8d:87:91:2a:66:a8:05:7a:63:d6:35:
d9:17:50:30:fb:5b:c1:88:b0:41:b6:e9:3a:b5:ee:cf:32:24:
ed:55:8d:8d:1f:9e:87:5a:b5:e8:c8:15:77:1a:ac:15:d3:61:
40:33:09:7e:ac:d4:b9:12:58:be:71:96:91:9e:e4:4c:77:81:
cb:fa:b3:86:11:17:a0:14:d5:73:4a:b1:78:6c:28:27:a5:df:
7a:65:80:19:0b:6a:32:ed:85:99:6a:8c:29:4d:4f:31:c1:84:
11:7e:ee:8f:7b:4d:05:72:49:88:de:16:04:39:88:24:30:bc:
3e:a2:16:33:d0:cd:ec:6d:fe:82:6e:40:52:0c:87:5e:00:d1:
71:79:54:01:7a:aa:87:5f:a5:92:64:5e:49:bb:5b:a8:83:c5:
36:87:4f:8c:79:17:07:cf:eb:00:5a:ed:50:d9:52:9a:1b:b9:
f0:5c:f0:6c:39:93:16:5f:91:80:16:6d:d3:27:ef:aa:47:cd:
72:f6:4e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:45:02 2025 by rpki-client