Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OdqmJMoMeAI-PPuVBdGmq1f28pI.roa
File: OdqmJMoMeAI-PPuVBdGmq1f28pI.roa (raw, json)
Hash identifier: X4xZ6q+sv2Ac5s/MEmrSn1A9kgbdweNpOemU7P0RLE4=
Subject key identifier: 39:DA:A6:24:CA:0C:78:02:3E:3C:FB:95:05:D1:A6:AB:57:F6:F2:92
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019427480046DE8314475A96E3935FCAAE21
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OdqmJMoMeAI-PPuVBdGmq1f28pI.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203484
IP address blocks: 62.73.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:00:46:de:83:14:47:5a:96:e3:93:5f:ca:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39daa624ca0c78023e3cfb9505d1a6ab57f6f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:e4:16:6f:a3:8d:ea:da:fa:34:6e:8e:1e:
87:b4:4f:50:a7:9a:d0:00:28:88:5d:d5:73:59:3f:
e6:35:5e:88:5b:d3:09:06:79:45:2f:cc:77:f8:45:
7a:f6:7a:3c:33:a9:74:8e:44:70:16:7d:20:2c:54:
c0:7c:bd:91:d1:b0:7e:db:fc:de:51:d6:af:33:17:
ce:d7:d3:ca:5f:98:9d:07:6b:3c:9a:f6:8e:f2:10:
b3:9f:f5:9c:1c:8c:99:0b:6a:57:0d:ca:4e:fb:87:
08:dd:d3:70:a3:a6:3d:8e:da:2e:7a:5e:66:04:03:
0e:74:1f:b1:81:5d:50:b0:97:5d:b4:ab:15:d9:01:
a6:c0:ba:99:81:a9:92:36:78:bb:9f:76:96:1a:63:
82:4e:bb:c1:db:b4:d0:cd:e5:a8:04:a5:b5:9b:42:
f4:27:54:e6:0e:ab:a1:7b:59:70:6d:4b:ea:e1:51:
fa:d9:c2:c5:1b:fd:e2:93:ae:20:e5:2f:c2:89:81:
f5:28:fc:f8:6a:7a:53:09:ae:a0:63:8e:f7:7b:4f:
c6:02:88:aa:bf:bc:44:ed:0f:72:b6:d0:16:4a:ee:
b6:53:4f:94:13:cd:25:a0:73:8a:c9:9f:9b:2d:86:
4a:8f:ec:a2:0b:83:6f:ab:6d:24:dc:c7:5c:e8:a1:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:A6:24:CA:0C:78:02:3E:3C:FB:95:05:D1:A6:AB:57:F6:F2:92
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OdqmJMoMeAI-PPuVBdGmq1f28pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cb:50:9f:40:80:f6:1d:bc:9c:e1:89:b2:f8:dd:b8:ff:f0:
8d:af:c1:32:a2:95:02:99:23:fb:27:ff:85:af:1a:ee:0a:e3:
c1:a9:08:eb:14:65:19:93:39:c0:c2:24:57:03:d7:12:c0:00:
f5:19:cc:3b:db:a4:16:9b:ba:bd:47:ee:00:3e:bc:f4:63:aa:
e5:c6:5d:50:34:d8:b7:02:55:18:76:82:93:87:ec:7d:cd:ba:
b2:fd:a4:db:d5:c3:7f:d6:08:65:46:ca:be:b7:53:82:78:88:
64:5e:cf:e9:51:12:61:f8:4e:14:59:62:1e:81:5f:5f:1c:34:
4a:fd:4a:d3:e0:0c:7d:e9:de:45:3f:f3:67:c5:66:1b:c9:56:
8d:c4:f5:ec:76:89:fa:34:5e:0e:97:20:ae:ad:9f:95:5d:34:
75:f6:04:6d:53:7a:97:c2:6c:64:6a:05:b7:dc:15:3c:f9:dd:
16:d0:60:cc:06:52:0b:37:27:c7:0b:41:74:8f:bd:7a:41:00:
08:2c:ff:d2:84:6b:fd:a6:7b:a0:9d:17:4e:2e:c9:2c:a9:29:
be:a7:71:3c:e5:a9:0f:0f:dc:69:78:32:6e:79:37:2f:09:4e:
a1:97:8d:30:5f:ed:41:1f:c0:93:c1:df:c0:7e:66:ec:51:2c:
69:8f:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:25:41 2025 by rpki-client