Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/2FnxWjtwh7KFv_hykkrSOYGbvY4.roa
File: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (raw, json)
Hash identifier: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=
Subject key identifier: D8:59:F1:5A:3B:70:87:B2:85:BF:F8:72:92:4A:D2:39:81:9B:BD:8E
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019422FC026757B37DCB66D1CA8C90E863C9
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/2FnxWjtwh7KFv_hykkrSOYGbvY4.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 62.176.192.0/19 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:02:67:57:b3:7d:cb:66:d1:ca:8c:90:e8:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d859f15a3b7087b285bff872924ad239819bbd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:31:10:14:04:6f:ca:c2:7d:2d:2b:bf:ca:
5c:e3:04:b8:80:35:4a:ad:fc:83:1c:fa:27:40:27:
98:dd:44:38:29:43:13:63:3c:5e:d6:30:ca:4f:b0:
a3:9b:a3:75:f4:41:1a:32:2b:be:56:be:f1:e5:2c:
dc:da:4e:e8:05:ba:2e:d8:f8:67:38:c8:66:3b:45:
33:c0:d4:f4:04:0c:19:71:2a:1a:dd:36:1e:82:62:
06:2c:c6:fb:b1:bf:fe:67:de:24:44:c3:03:d8:45:
96:38:58:25:2f:b8:1c:ff:1f:8c:7a:15:a4:c3:4d:
07:e8:21:d1:a8:89:a1:3d:c1:5e:02:f7:ad:4b:aa:
2d:c0:69:14:bc:6f:f5:67:d6:7c:8e:ec:d8:a8:9e:
20:2a:13:75:2a:22:64:e7:e3:9b:cc:a1:b1:ac:c2:
8a:03:5f:21:35:ca:90:f9:4c:9c:e2:82:58:6d:16:
6e:e6:d4:94:a7:71:e0:1e:ce:b9:e1:96:f6:ea:45:
b0:d4:d8:96:0b:8b:d7:84:ca:6c:23:9f:6f:75:ba:
06:46:73:95:80:a8:6a:6e:d0:3e:ed:02:2d:60:ca:
cb:bb:07:16:94:c9:54:f0:85:14:dd:71:71:6c:43:
9f:f2:fa:2d:2b:30:c5:d6:03:04:59:6d:76:3a:79:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:F1:5A:3B:70:87:B2:85:BF:F8:72:92:4A:D2:39:81:9B:BD:8E
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/2FnxWjtwh7KFv_hykkrSOYGbvY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:06:3f:85:2c:8f:92:c6:7a:90:c4:06:d5:54:d2:e6:b1:29:
af:45:23:5f:90:8d:3b:d1:5d:c3:9b:91:5e:94:c5:66:0f:45:
68:d7:13:64:fd:d4:a6:d4:8b:58:cc:32:fe:e3:f1:a0:12:d1:
0e:7b:92:75:88:97:a9:ad:20:25:e2:ac:55:5f:22:c7:ca:c7:
d8:a1:61:0b:6c:60:19:82:4e:cb:75:50:54:7d:38:84:b0:15:
98:72:f1:d3:b3:5e:bd:de:df:ac:73:49:36:e3:85:d0:ce:f4:
04:6d:89:7b:2b:8b:cc:56:0a:f5:20:27:d6:59:f7:ee:96:45:
5c:78:e4:ad:7d:3e:88:2c:67:21:89:fc:96:9e:5b:c2:de:a9:
65:18:d8:4d:74:fb:5c:99:04:4b:14:47:f1:6b:a8:b3:87:ca:
62:c5:47:36:9b:78:83:21:6b:7f:a4:8f:e1:4b:36:db:00:88:
bd:78:32:b6:2f:72:ea:34:a7:7a:41:15:39:51:f9:b0:97:80:
14:77:8c:86:18:de:c5:05:ec:64:56:be:e5:ca:d4:09:6e:48:
5e:f6:be:b2:f9:a9:5b:58:5c:50:08:b3:d9:c4:94:1c:dd:6d:
ab:15:d5:b2:c7:08:31:ad:ac:4f:96:93:31:30:2c:66:76:bf:
a9:76:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:51 2025 by rpki-client