Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WYKR6EUV50sK3uCCPQQ23XGlKA.roa
File: 7WYKR6EUV50sK3uCCPQQ23XGlKA.roa (raw, json)
Hash identifier: brNaODSpLqsd8uPPOw4dvOEnHQBn2ucwW2F+k6il98E=
Subject key identifier: ED:66:0A:47:A1:14:57:9D:2C:2B:7B:82:08:F4:10:DB:75:C6:94:A0
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274805E1F311DD9BF065975333EB41D1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WYKR6EUV50sK3uCCPQQ23XGlKA.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210754
IP address blocks: 62.176.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:05:e1:f3:11:dd:9b:f0:65:97:53:33:eb:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed660a47a114579d2c2b7b8208f410db75c694a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:30:32:b8:28:8a:85:2a:7d:dd:d0:94:5a:
5a:02:6c:72:a9:e8:d9:f8:1a:f8:cf:53:1c:42:38:
f1:72:60:81:f3:3b:93:57:4d:e8:2c:67:d9:8f:3b:
b8:63:3f:b2:12:77:8f:3e:82:39:24:e4:2b:58:06:
7a:a4:3f:6f:f7:0f:57:cb:f0:d1:7d:9b:a9:40:2a:
ff:e0:99:10:f9:a3:7b:64:06:e1:4b:44:d4:72:73:
8a:64:25:bb:e5:0e:16:85:2d:3e:fb:dd:86:42:55:
d2:ae:f0:6d:c6:6a:81:ff:cd:22:4c:72:ea:27:7e:
2c:44:ab:a9:94:c9:40:35:19:95:86:69:85:97:42:
68:10:55:0f:4d:d1:16:3c:b3:a1:9a:f5:fc:fc:90:
2b:bc:be:42:aa:5d:3e:20:10:ad:aa:e2:a8:5f:ef:
2f:48:89:68:e1:14:66:fe:69:b9:2c:19:2e:df:03:
af:25:f4:89:18:24:12:e2:85:9f:54:71:9d:bb:07:
d7:92:be:02:ba:7e:80:39:b8:29:d1:24:16:96:33:
63:7f:7b:6f:7e:b3:dd:d4:40:d8:99:fe:58:c9:85:
50:42:ba:08:cc:bd:00:33:a9:1f:ae:a5:05:de:59:
0f:2c:af:1d:b2:59:c2:2f:5f:3a:a7:ae:89:6f:30:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:0A:47:A1:14:57:9D:2C:2B:7B:82:08:F4:10:DB:75:C6:94:A0
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WYKR6EUV50sK3uCCPQQ23XGlKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.98.0/24
Signature Algorithm: sha256WithRSAEncryption
38:09:7a:82:00:49:ec:0d:57:d4:2a:7f:49:c5:0a:e4:c0:4e:
f2:4f:7d:da:bc:b0:98:d6:54:8a:bd:94:68:e7:24:50:e9:2c:
d7:9b:da:0d:e5:d4:cf:3a:3b:f9:24:79:96:b7:a6:a0:b0:36:
4a:0c:bd:ae:74:2e:2d:3a:dd:4e:63:10:5a:85:33:69:aa:f9:
75:9d:c0:3f:4c:90:31:ef:06:f5:0f:bb:82:83:2d:b7:3c:23:
a1:15:3b:46:43:aa:25:14:2a:28:f5:3c:b9:5d:5f:82:05:a0:
cd:89:32:79:80:9e:08:cc:47:31:88:dc:2e:c1:d7:ed:92:3a:
f0:15:ff:4a:4b:93:fb:2b:cf:54:ec:5e:0b:61:65:29:02:8d:
b2:c9:87:49:6e:eb:a7:16:0a:a0:fc:e1:a5:58:b1:0a:56:09:
f3:48:8e:06:7e:4b:3e:9f:bd:d7:04:76:1e:b0:b7:39:dc:2b:
31:05:e3:95:4a:c0:4d:73:38:a5:d9:c5:d1:fb:7a:4b:40:2d:
7f:77:09:47:09:1c:10:6f:a3:1f:ef:0d:b5:b4:9c:52:11:3b:
fb:40:fc:82:70:1d:6c:e2:c0:57:15:4e:9c:1a:6c:3d:e6:0b:
99:c5:80:e5:71:0b:69:62:c8:fc:2d:44:54:5a:ac:37:fa:2b:
f7:09:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:47 2025 by rpki-client