Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D2GCLRC5baxYDpScKL9vyCzt5As.roa
File: D2GCLRC5baxYDpScKL9vyCzt5As.roa (raw, json)
Hash identifier: j4sUnD+peRQEmv63gPAoKY4K4H4SA7cLSf8bgNjwb+4=
Subject key identifier: 0F:61:82:2D:10:B9:6D:AC:58:0E:94:9C:28:BF:6F:C8:2C:ED:E4:0B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F2B0F2ED9DFAD65E2168DF6C62F2
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D2GCLRC5baxYDpScKL9vyCzt5As.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51987
IP address blocks: 62.73.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f2:b0:f2:ed:9d:fa:d6:5e:21:68:df:6c:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f61822d10b96dac580e949c28bf6fc82cede40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:b9:87:27:f7:ac:9f:47:e0:02:f5:aa:5a:
40:0c:b8:63:d5:58:44:e6:51:f3:17:33:31:70:cf:
8d:6e:f7:3f:53:dc:9f:a6:60:98:ff:dd:cd:be:b4:
0d:58:65:e6:bc:59:98:88:cf:be:8a:3c:25:4f:e0:
4c:bb:f7:4c:0a:f1:87:51:49:ab:b1:35:66:3f:db:
78:59:eb:db:a8:42:35:bc:3c:cf:f0:26:6e:60:d3:
1d:3c:16:89:ca:76:95:e1:1e:fe:a1:51:78:aa:2a:
e1:cf:27:98:d1:9c:24:8b:1b:8b:3a:f1:fe:50:5e:
66:c4:09:6e:96:42:32:c2:79:aa:6e:4b:27:63:44:
c5:a2:3e:d3:53:25:0a:46:9f:83:99:04:7d:18:59:
e7:50:34:e7:56:5f:8d:9f:51:b0:b9:28:a6:32:c1:
ba:6a:a3:c5:c6:dc:91:24:43:48:63:91:96:60:5c:
fe:94:85:7a:6c:c4:45:bb:36:70:c4:79:81:18:52:
d5:84:92:f9:9f:52:cb:c0:ce:dc:2d:12:ab:6f:d3:
6e:28:6a:bd:ae:70:9d:3c:8e:f1:5b:b4:73:5e:9c:
73:04:72:78:11:63:2d:46:ea:d9:59:d1:2e:aa:29:
07:fe:28:35:a5:e0:e1:81:49:3c:0a:30:eb:66:b5:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:82:2D:10:B9:6D:AC:58:0E:94:9C:28:BF:6F:C8:2C:ED:E4:0B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D2GCLRC5baxYDpScKL9vyCzt5As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.95.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b3:37:e6:cd:c9:bf:fd:15:68:97:20:6a:1f:fb:52:43:00:
bb:0f:da:92:0b:3b:56:9e:68:d1:95:6d:9e:df:84:fc:f9:a5:
6e:e6:21:b8:3d:28:e6:20:7f:b6:2e:31:65:94:d6:ed:af:bd:
d1:5e:43:72:2d:60:4b:a3:fa:31:7a:2d:3c:d2:29:11:6f:49:
71:12:b0:6f:3a:c2:de:30:c7:6c:d6:d3:09:ea:d1:18:31:c2:
8e:de:28:7e:df:ca:ed:92:80:7d:45:ad:9d:17:d7:d8:ce:3a:
b8:c6:af:b1:ee:92:3a:f2:6c:96:49:75:c1:27:38:19:ce:59:
9e:3c:f4:fd:23:07:c8:4a:a6:cf:e0:ff:a9:92:2a:13:aa:1c:
8e:37:87:86:a2:74:f4:81:08:b7:00:9f:8e:a6:f2:d6:1e:05:
e8:02:3b:02:cb:81:31:98:c3:27:99:99:78:df:23:04:4b:ab:
ba:d4:19:41:3b:2c:ca:47:57:be:99:c3:78:d0:e3:fe:a5:41:
ae:ff:3d:ee:6a:92:6b:54:6b:08:75:53:e7:b3:8e:aa:1e:e8:
00:eb:f7:01:63:43:65:2b:83:4d:f3:93:6b:24:e7:55:b8:0b:
67:4b:00:92:29:8b:b1:59:47:d1:08:26:25:72:5b:ff:fc:2a:
89:97:f5:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/Kw8u2d+tZeIWjfbGLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjYxODIyZDEwYjk2ZGFjNTgwZTk0OWMyOGJmNmZjODJjZWRlNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+S5hyf3rJ9H4AL1qlpADLhj1VhE
5lHzFzMxcM+Nbvc/U9yfpmCY/93NvrQNWGXmvFmYiM++ijwlT+BMu/dMCvGHUUmr
sTVmP9t4WevbqEI1vDzP8CZuYNMdPBaJynaV4R7+oVF4qirhzyeY0ZwkixuLOvH+
UF5mxAlulkIywnmqbksnY0TFoj7TUyUKRp+DmQR9GFnnUDTnVl+Nn1GwuSimMsG6
aqPFxtyRJENIY5GWYFz+lIV6bMRFuzZwxHmBGFLVhJL5n1LLwM7cLRKrb9NuKGq9
rnCdPI7xW7RzXpxzBHJ4EWMtRurZWdEuqikH/ig1peDhgUk8CjDrZrWIwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9hgi0QuW2sWA6UnCi/b8gs7eQLMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvRDJHQ0xSQzViYXhZRHBTY0tMOXZ5Q3p0NUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPklfMA0G
CSqGSIb3DQEBCwUAA4IBAQCCszfmzcm//RVolyBqH/tSQwC7D9qSCztWnmjRlW2e
34T8+aVu5iG4PSjmIH+2LjFllNbtr73RXkNyLWBLo/oxei080ikRb0lxErBvOsLe
MMds1tMJ6tEYMcKO3ih+38rtkoB9Ra2dF9fYzjq4xq+x7pI68myWSXXBJzgZzlme
PPT9IwfISqbP4P+pkioTqhyON4eGonT0gQi3AJ+OpvLWHgXoAjsCy4ExmMMnmZl4
3yMES6u61BlBOyzKR1e+mcN40OP+pUGu/z3uapJrVGsIdVPns46qHugA6/cBY0Nl
K4NN85NrJOdVuAtnSwCSKYuxWUfRCCYlclv//CqJl/Xd
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:27 2025 by rpki-client