Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xSeBEhK_8zoJOao939vjNtZT2qU.roa
File: xSeBEhK_8zoJOao939vjNtZT2qU.roa (raw, json)
Hash identifier: yVY9zfmoDvtn+GI7zVgJRq7TLM7kOSzTVpm0ifDjT4M=
Subject key identifier: C5:27:81:12:12:BF:F3:3A:09:39:AA:3D:DF:DB:E3:36:D6:53:DA:A5
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD603AD29E0EFBA4B025704E2009F1
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xSeBEhK_8zoJOao939vjNtZT2qU.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199009
IP address blocks: 62.76.130.0/24 maxlen: 24
62.76.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:60:3a:d2:9e:0e:fb:a4:b0:25:70:4e:20:09:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c527811212bff33a0939aa3ddfdbe336d653daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:a5:ad:22:9c:e6:fa:8c:e9:ce:34:6f:48:
b5:53:1f:20:10:f3:8a:cb:7d:fa:9e:fd:af:9f:7e:
7e:18:19:e0:e4:e2:2c:3a:94:a6:b4:21:fc:94:f5:
02:8e:9f:26:12:ee:cd:75:17:aa:df:5e:3a:ce:3f:
e0:a9:e2:43:56:7d:5e:e7:58:0c:63:bd:49:cd:e3:
a2:ac:49:93:a0:88:00:3e:be:23:47:fd:f8:b4:3c:
d8:5b:28:d3:9c:67:7f:72:60:a2:70:2a:5e:fc:21:
11:61:52:35:89:19:43:9f:38:74:8f:55:93:53:f9:
ef:26:81:4e:73:3c:f3:c4:41:50:0c:5a:d6:f3:e6:
c8:7d:a8:25:bb:04:fc:ae:aa:94:f2:84:36:6e:06:
13:20:a4:6b:2d:83:06:fe:50:e7:64:c6:35:21:ea:
47:5e:e3:fe:f9:91:8a:15:73:a2:92:02:0b:19:6a:
31:09:95:e0:c5:29:16:f3:9e:de:a8:fb:35:07:cb:
00:78:d7:e2:4b:16:b0:db:9c:56:86:03:57:93:dd:
60:1d:c2:bf:bd:1f:ae:b4:79:be:98:2e:60:61:32:
ae:26:7e:cb:86:84:c3:f7:a5:5a:1d:36:59:92:21:
8e:2b:91:c1:57:40:57:2c:73:0a:fe:66:1c:a4:f1:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:81:12:12:BF:F3:3A:09:39:AA:3D:DF:DB:E3:36:D6:53:DA:A5
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xSeBEhK_8zoJOao939vjNtZT2qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.130.0/23
Signature Algorithm: sha256WithRSAEncryption
04:61:9a:b3:b4:61:f9:b5:75:ad:07:b7:08:af:b0:f7:4b:4d:
c2:36:a3:69:90:66:7c:27:4f:22:7a:55:1d:cb:ab:a4:5d:e8:
e9:29:18:e1:11:e0:7d:ea:ef:46:0d:f8:2c:76:6d:e5:85:0a:
0d:c5:db:16:06:f6:27:27:f5:56:2a:77:41:7c:f3:2e:54:7b:
a1:3f:fa:67:0d:84:8b:eb:87:c2:bc:91:b2:6b:bd:13:c2:75:
36:22:d0:69:c2:d3:b0:c3:f5:5a:17:93:74:df:ab:29:db:f0:
77:eb:62:5d:05:8c:43:fc:b2:f0:fd:67:a8:66:45:33:0a:42:
b5:03:12:2d:82:10:73:b3:86:99:8f:5b:4c:01:aa:d8:40:92:
53:f1:1a:fb:f2:2e:98:d4:1d:e4:7a:d2:1f:12:33:fd:5c:fe:
62:51:5a:39:22:ad:65:12:50:e6:f0:8f:60:a6:6e:28:92:f0:
23:dc:e0:74:52:00:0e:ed:88:37:96:52:38:ec:4a:47:d1:02:
12:89:e0:36:fd:a1:06:7e:f2:68:c1:2b:20:79:96:36:7e:bd:
b6:be:45:24:c2:5f:a1:f1:a6:2b:54:6c:80:7f:aa:9e:4e:41:
93:20:98:ff:86:61:55:54:3f:1f:77:cc:0a:3e:d8:58:62:cd:
d2:f7:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:14 2025 by rpki-client