Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/v7McWGmC6x_jve8hO4dvjOUzDnU.roa
File: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (raw, json)
Hash identifier: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=
Subject key identifier: BF:B3:1C:58:69:82:EB:1F:E3:BD:EF:21:3B:87:6F:8C:E5:33:0E:75
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0194266BCFC2681E09FFBA69085F68A3AAFC
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/v7McWGmC6x_jve8hO4dvjOUzDnU.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 62.3.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cf:c2:68:1e:09:ff:ba:69:08:5f:68:a3:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfb31c586982eb1fe3bdef213b876f8ce5330e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:16:b4:f9:5d:3c:6e:5b:c3:37:b3:fe:0e:
aa:bf:ba:c7:32:e3:ef:e5:3f:dc:6a:c0:c1:55:57:
d8:2f:1e:e9:c1:b4:40:e8:13:9e:ad:4f:26:97:d8:
6a:3d:98:b9:e7:2b:e4:4f:2b:5f:6c:f3:17:dc:a1:
2b:da:c4:09:8a:96:7e:ec:5f:49:90:90:ac:80:b9:
a1:c6:3b:77:80:d0:a7:d3:d4:a4:9e:3b:0a:c7:80:
e0:c7:c4:e2:c8:ea:5b:40:d1:6c:66:62:f2:be:fe:
c1:d0:ff:05:06:6b:a8:10:82:1e:1f:5c:72:a6:3d:
9c:48:4a:30:6e:3e:67:b1:30:58:df:16:d4:c4:94:
42:26:a7:ea:7f:8a:34:40:7b:78:92:9b:91:9d:b3:
87:df:e8:15:64:1c:d0:ba:18:94:ac:75:14:d4:0b:
53:e9:28:73:a8:c6:00:75:18:49:d0:8c:cd:f7:cc:
8b:cd:00:8b:03:43:76:70:a8:fb:9f:cd:bd:36:cb:
bc:7a:74:78:95:06:f9:3d:b1:8b:a6:29:72:40:32:
0b:8e:fb:3f:38:11:e4:78:ba:7c:7c:a6:9d:92:9a:
ef:ce:d6:5f:d9:14:48:4e:ae:cf:18:61:0f:76:65:
5b:9c:0f:f7:73:8e:15:83:1e:c3:4c:81:c0:5a:d8:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:1C:58:69:82:EB:1F:E3:BD:EF:21:3B:87:6F:8C:E5:33:0E:75
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/v7McWGmC6x_jve8hO4dvjOUzDnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.41.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:6b:91:3a:03:1c:e6:67:97:f9:41:8f:b0:92:48:36:39:
20:47:7b:a1:8d:cc:09:fa:78:23:7a:5b:6d:fb:47:72:2a:78:
1f:3f:8f:73:c3:f4:13:fc:a9:d9:89:ed:6a:03:8c:9d:e1:c7:
49:90:9a:0d:82:6b:6a:7d:26:2f:ef:c1:cc:a0:ea:dd:18:e9:
41:e2:ab:d1:7a:47:b9:eb:fc:99:56:cd:df:fc:5c:82:db:d5:
c2:c3:fb:14:fa:a1:41:40:06:da:89:27:5e:7a:70:2c:90:91:
52:f3:f0:ac:bf:4f:a1:c2:f8:95:22:5c:d5:59:13:63:17:77:
10:0e:21:30:cc:11:88:30:9e:1f:88:b9:5f:15:0f:03:55:53:
6e:aa:a9:78:50:78:cf:af:29:aa:ea:14:b0:7d:78:46:6c:a2:
33:ba:8e:0b:c9:47:00:ba:07:d9:86:37:26:ee:e6:96:09:01:
4a:7b:e4:bf:4a:e5:33:4c:1f:f8:79:f3:5a:3b:29:e7:c4:b9:
18:d7:45:90:e8:cb:66:1f:f5:6e:e1:16:dc:f8:8b:73:93:b2:
9e:ef:d2:bd:23:b4:3b:c3:6e:5d:80:60:1f:94:d4:63:ec:4e:
cf:f5:1d:8d:56:43:7a:61:5e:f6:30:7a:b3:31:a4:1c:93:8d:
5a:f3:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:38:39 2025 by rpki-client