Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ttpytsJzWp3jj6cgqq8x6a7NlH0.roa
File: ttpytsJzWp3jj6cgqq8x6a7NlH0.roa (raw, json)
Hash identifier: cwJerH2noaHgS7dAEdFyfZT9jiUqLPq2Pi8/7RIfCHM=
Subject key identifier: B6:DA:72:B6:C2:73:5A:9D:E3:8F:A7:20:AA:AF:31:E9:AE:CD:94:7D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E42E2FD9D18B5D338E4F0D3A121E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ttpytsJzWp3jj6cgqq8x6a7NlH0.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29084
IP address blocks: 62.73.112.0/22 maxlen: 24
62.73.112.0/23 maxlen: 24
62.73.112.0/24 maxlen: 24
62.73.113.0/24 maxlen: 24
62.73.115.0/24 maxlen: 24
62.73.116.0/23 maxlen: 24
62.73.116.0/24 maxlen: 24
62.73.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e4:2e:2f:d9:d1:8b:5d:33:8e:4f:0d:3a:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6da72b6c2735a9de38fa720aaaf31e9aecd947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:de:59:fe:26:f2:47:d5:ce:3a:87:e8:b7:
10:5f:73:7a:7f:a7:a9:ae:a1:13:f7:c6:3c:5c:74:
2e:aa:10:83:15:ff:33:cc:14:d8:53:d6:91:5a:a0:
ba:e3:3b:6f:3a:fd:54:b8:74:e8:85:66:9e:2e:4a:
a4:a1:d3:5e:b0:8f:8b:7f:b8:b0:14:ea:37:fa:15:
80:a6:eb:1c:b8:94:60:1b:9e:c1:d0:af:11:41:60:
56:72:e4:66:74:4a:c6:f8:81:f4:9d:a0:8a:fb:0b:
7b:a8:69:78:4d:71:4d:b5:fd:99:96:e9:c7:39:e1:
db:cf:0b:f4:39:07:d0:d5:8e:ea:89:42:92:a3:a4:
31:cc:d0:72:fc:7f:3b:91:c7:88:3d:56:9f:3f:01:
c0:a0:89:1a:16:d3:81:fc:ba:f5:09:f6:4f:c8:09:
34:da:de:16:ad:64:19:76:6c:ad:c8:c4:be:0d:7d:
fd:89:81:bd:32:91:76:30:f8:2c:ba:01:67:2f:60:
03:fa:ca:d0:2c:34:f2:d7:21:e4:a4:f7:40:1f:6d:
e6:67:69:bd:0f:b5:54:05:b5:bd:cb:a2:85:b5:73:
f3:4a:92:9b:30:4f:71:28:d1:1e:41:b7:11:84:1b:
13:96:c9:b7:e8:98:17:d8:cd:fe:35:50:dd:c0:f7:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:72:B6:C2:73:5A:9D:E3:8F:A7:20:AA:AF:31:E9:AE:CD:94:7D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ttpytsJzWp3jj6cgqq8x6a7NlH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.112.0-62.73.117.255
Signature Algorithm: sha256WithRSAEncryption
94:35:57:df:3d:f0:6b:44:30:93:3f:a0:d8:a2:88:22:00:b9:
6d:41:a8:0f:42:a6:33:1c:85:9c:ca:33:91:85:5c:3d:3e:87:
6a:09:61:d5:73:99:97:bf:21:07:c2:74:0a:6d:78:b8:01:d4:
87:2f:d3:f8:77:63:40:a2:71:d0:a8:2a:5f:77:15:ec:95:93:
16:43:6c:c5:0d:5a:2d:e2:6f:99:98:84:9c:62:85:3f:2b:16:
c6:55:73:3e:cd:ad:e5:55:48:d3:2e:8d:16:75:06:8a:96:d3:
da:66:00:43:17:94:20:c3:84:6c:e3:90:e4:f3:df:51:77:b6:
6e:1a:7b:69:45:91:0d:6d:fc:fa:2b:ac:a8:76:be:b0:0f:7e:
85:61:c6:09:2d:7d:d3:f9:ef:b2:db:29:24:b3:25:87:0e:d4:
2e:d9:21:75:cd:95:ff:5e:3b:e5:64:a8:a6:99:a0:80:31:ff:
1c:9b:47:49:aa:10:0f:09:4a:24:ee:42:3a:33:94:37:a0:a1:
35:31:a5:e4:b4:ee:9e:4e:52:20:79:18:6e:c3:b5:3a:b4:5e:
2a:cd:ff:f0:62:ba:7f:50:64:17:d2:ba:43:e4:23:38:51:71:
f7:41:aa:68:a8:66:99:cd:f3:b8:77:ca:d7:f7:35:db:c5:8e:
e5:57:a4:2a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnR+QuL9nRi10zjk8NOhIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmRhNzJiNmMyNzM1YTlkZTM4ZmE3MjBhYWFmMzFlOWFlY2Q5NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnffeWf4m8kfVzjqH6LcQX3N6f6ep
rqET98Y8XHQuqhCDFf8zzBTYU9aRWqC64ztvOv1UuHTohWaeLkqkodNesI+Lf7iw
FOo3+hWApuscuJRgG57B0K8RQWBWcuRmdErG+IH0naCK+wt7qGl4TXFNtf2ZlunH
OeHbzwv0OQfQ1Y7qiUKSo6QxzNBy/H87kceIPVafPwHAoIkaFtOB/Lr1CfZPyAk0
2t4WrWQZdmytyMS+DX39iYG9MpF2MPgsugFnL2AD+srQLDTy1yHkpPdAH23mZ2m9
D7VUBbW9y6KFtXPzSpKbME9xKNEeQbcRhBsTlsm36JgX2M3+NVDdwPe+WQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLbacrbCc1qd44+nIKqvMemuzZR9MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvdHRweXRzSnpXcDNqajZjZ3FxOHg2YTdObEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQ+SXAD
BAE+SXQwDQYJKoZIhvcNAQELBQADggEBAJQ1V9898GtEMJM/oNiiiCIAuW1BqA9C
pjMchZzKM5GFXD0+h2oJYdVzmZe/IQfCdApteLgB1Icv0/h3Y0CicdCoKl93FeyV
kxZDbMUNWi3ib5mYhJxihT8rFsZVcz7NreVVSNMujRZ1BoqW09pmAEMXlCDDhGzj
kOTz31F3tm4ae2lFkQ1t/PorrKh2vrAPfoVhxgktfdP577LbKSSzJYcO1C7ZIXXN
lf9eO+VkqKaZoIAx/xybR0mqEA8JSiTuQjozlDegoTUxpeS07p5OUiB5GG7DtTq0
XirN//Biun9QZBfSukPkIzhRcfdBqmioZpnN87h3ytf3NdvFjuVXpCo=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:31 2025 by rpki-client