Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/zmIoOW_WysITCnVOzx8kPBAmdwQ.roa
File: zmIoOW_WysITCnVOzx8kPBAmdwQ.roa (raw, json)
Hash identifier: mCikIlOItfa1ee0rOshM9ilk6OnHdR8PgP1+31G7Ef4=
Subject key identifier: CE:62:28:39:6F:D6:CA:C2:13:0A:75:4E:CF:1F:24:3C:10:26:77:04
Certificate issuer: /CN=44e63efc9483869e40213e6d1019553a11bd1b74
Certificate serial: 019425218BB076D0BDEAE422032D84A0C9F5
Authority key identifier: 44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/zmIoOW_WysITCnVOzx8kPBAmdwQ.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59877
IP address blocks: 62.68.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:b0:76:d0:bd:ea:e4:22:03:2d:84:a0:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e63efc9483869e40213e6d1019553a11bd1b74
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce6228396fd6cac2130a754ecf1f243c10267704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:ed:38:89:d6:72:4d:8b:4d:c0:ae:c1:a1:
14:eb:2e:3b:51:01:c3:b1:17:8c:28:a4:99:72:48:
2a:05:28:52:35:a5:a2:c7:a1:2f:75:28:66:43:51:
dd:8c:81:56:dd:22:f3:16:80:1c:5f:ec:f4:74:34:
48:64:d6:58:94:2b:5d:a6:e9:37:02:64:98:25:a1:
6b:e3:58:b3:fb:6c:e8:ad:65:ab:d6:b9:80:4f:d6:
a4:17:92:f3:ec:b1:ff:ab:79:df:40:e1:36:3f:ba:
25:b4:8f:78:47:75:55:20:bc:46:f9:12:c0:65:8e:
1d:b6:48:21:91:62:4f:dc:69:0f:8d:81:30:bb:2a:
37:17:27:7b:99:ff:5a:b2:cf:40:85:a1:8f:53:09:
1d:a9:d9:b9:5d:7b:29:d9:2e:28:2f:33:f9:60:48:
1e:a0:38:23:42:97:9f:6f:7e:28:9b:e1:49:86:00:
ed:6f:02:7c:fc:e7:a9:e6:08:45:42:f3:a5:27:96:
95:e4:56:c1:84:67:7c:04:fb:2b:88:0e:02:b8:4e:
d9:e9:01:df:27:f6:11:f3:f7:9e:d7:7f:8c:b2:f6:
aa:6d:05:4b:a7:82:fa:79:7c:86:af:bb:0f:23:90:
ef:9a:29:18:16:3c:8a:6a:ff:6a:f6:96:c9:1d:56:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:62:28:39:6F:D6:CA:C2:13:0A:75:4E:CF:1F:24:3C:10:26:77:04
X509v3 Authority Key Identifier:
keyid:44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/zmIoOW_WysITCnVOzx8kPBAmdwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.65.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8e:af:bd:fd:fd:b6:fc:03:0b:da:1f:83:67:65:bb:63:16:
7b:9d:f6:8c:ae:37:8f:4c:b9:55:76:d5:73:a7:36:72:2b:39:
ab:c6:13:d8:e3:dc:ee:7c:9f:5a:79:86:53:55:78:50:ec:27:
0f:6b:5f:6a:14:1b:6d:f4:cd:f7:cc:ec:4c:be:e2:d8:b1:4c:
a3:4d:0a:7f:14:30:9d:56:06:a2:db:85:c2:c2:df:65:dd:12:
fa:c1:ae:f3:5d:63:3f:5a:bc:18:67:51:6c:85:c3:ad:e6:71:
49:15:17:4a:02:3a:4d:52:1e:89:ee:c8:d1:16:64:a4:2a:c6:
8d:58:77:85:90:67:d5:8b:a7:2d:55:95:b3:a2:02:ff:14:ef:
88:0a:b2:d8:43:ca:e7:ed:01:4f:56:6f:26:6f:7e:e3:9e:19:
1c:dc:49:45:1f:68:34:d4:41:18:e5:25:23:0b:44:19:7e:b5:
ca:26:17:22:12:97:e6:02:29:a0:35:91:21:8d:74:9f:ae:7b:
59:30:7a:bf:95:ee:41:6f:d9:3a:91:ce:68:a3:7d:50:0c:82:
7d:f2:97:0c:c7:67:cb:d9:2b:a0:a9:2b:a7:44:2f:a0:3a:0b:
e7:88:57:b3:ac:9b:7d:07:80:b0:a5:4c:dd:9c:9e:a3:96:62:
48:2e:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:46 2025 by rpki-client