Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WeiKZlrZMWBmHmFyIba_qVs-J6c.roa
File: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (raw, json)
Hash identifier: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=
Subject key identifier: 59:E8:8A:66:5A:D9:31:60:66:1E:61:72:21:B6:BF:A9:5B:3E:27:A7
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01941FFA6D2214645E5F98E6C085B787DD8F
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WeiKZlrZMWBmHmFyIba_qVs-J6c.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43358
IP address blocks: 62.102.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:22:14:64:5e:5f:98:e6:c0:85:b7:87:dd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e88a665ad93160661e617221b6bfa95b3e27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:ef:ad:06:32:9b:bb:59:b0:84:53:12:3d:
b5:b7:3a:03:15:b7:41:cb:b6:45:3b:2e:83:88:08:
94:82:8b:aa:ed:a2:cd:47:0b:29:10:6b:ea:82:94:
db:66:81:81:d3:9f:a6:a0:d8:9e:c4:45:ce:84:2a:
dd:62:10:ab:2c:d9:0d:58:99:be:8a:45:e0:b6:16:
eb:f8:c4:be:cf:05:b2:5c:ea:07:71:04:b8:80:c7:
66:72:0e:1d:28:5e:b8:67:79:03:72:13:b2:76:df:
3a:b3:8e:51:4f:1a:e6:71:54:cd:ab:c6:a1:88:fc:
ab:15:c4:c6:b3:aa:83:c6:35:a5:7e:63:85:a5:d1:
02:96:6c:12:28:1d:8e:65:0f:b7:36:c2:69:7b:92:
26:d5:f5:1a:ba:78:9a:c1:2b:87:b0:24:ae:52:54:
ab:20:86:20:87:a0:6b:db:63:e9:5a:a8:e2:5d:f6:
35:0e:ea:76:15:36:f7:4f:81:42:f8:17:d7:1d:6c:
9e:fc:d9:8b:f7:28:d1:32:a0:91:a2:6c:c1:44:d8:
c7:3b:41:7a:d4:fa:68:ba:b0:7c:ce:f6:4b:b4:10:
9b:95:7b:8c:07:34:a9:84:ff:e0:ce:ef:1b:f6:44:
5f:80:cc:94:f2:da:2c:a3:33:dd:c6:7f:5d:93:c8:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:8A:66:5A:D9:31:60:66:1E:61:72:21:B6:BF:A9:5B:3E:27:A7
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WeiKZlrZMWBmHmFyIba_qVs-J6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.140.0/22
Signature Algorithm: sha256WithRSAEncryption
42:24:29:45:00:f4:8e:43:f0:05:13:2b:29:2e:9c:61:6a:1a:
50:1e:ec:a2:a3:af:02:32:9b:2b:ac:a6:b1:c9:95:0a:f3:74:
33:6f:ba:8e:f1:de:69:6f:f2:aa:0f:35:32:53:66:01:45:a8:
45:1f:42:24:91:ea:bf:19:87:e6:05:3d:2b:54:ed:b8:99:3b:
e9:79:b4:1f:e4:60:f3:d8:0e:47:53:11:8e:d5:9d:ef:94:ba:
0c:29:1c:af:c0:a3:62:ce:c7:3f:74:6b:e6:9d:74:24:ed:9d:
ce:7d:ae:ea:cb:eb:b4:33:07:12:54:a4:f5:fc:51:e3:da:e6:
5d:ad:f4:d6:92:55:dd:7a:07:a6:cc:00:a6:75:1e:d7:25:40:
0b:ee:97:ff:e4:0d:3c:a2:ad:68:95:2f:1d:ba:a5:32:be:d5:
b8:42:1f:b9:11:9e:0a:19:46:1e:65:c4:24:94:67:85:76:e9:
0a:eb:14:29:cb:46:96:fb:80:f7:a7:72:48:c5:30:05:db:cb:
3e:8d:52:5b:66:14:b6:20:0c:24:06:fb:1b:52:bb:cc:16:d5:
97:c6:8c:5f:11:71:d2:f8:21:37:c5:7e:1d:d8:a0:81:0b:45:
4e:1c:9f:c6:ca:e5:47:3e:f2:19:7e:38:15:fc:2e:a9:9a:5d:
6a:4b:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:41 2025 by rpki-client