Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa
File: iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa (raw, json)
Hash identifier: PTNjFEC+8LOf9p9/46EB/Gyud8WBITxQ3kLEIaOMY6c=
Subject key identifier: 88:D3:9C:25:5C:F6:FD:F0:77:88:53:6F:86:E9:7F:A9:EF:59:31:B4
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0194221FAC49A6274A2C23F3042BD760FFCA
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 5.62.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ac:49:a6:27:4a:2c:23:f3:04:2b:d7:60:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88d39c255cf6fdf07788536f86e97fa9ef5931b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:6c:f4:07:97:8b:9d:35:b5:65:5c:e5:d0:
65:d9:a9:c5:a7:d1:f2:45:1a:cf:74:a8:c9:7e:24:
8b:6d:8a:9f:dd:a1:8f:07:c3:20:d1:ca:00:f6:e6:
ff:30:e8:45:aa:73:53:2c:f7:e2:12:26:41:99:11:
4d:1c:b6:3c:1c:ac:3a:0c:e0:93:fe:c2:23:f0:bb:
11:d6:28:60:48:13:a7:fa:2a:74:f1:3e:1d:16:1f:
f4:a8:61:46:03:54:47:43:29:76:52:61:9c:e0:89:
2e:30:92:c5:14:f5:d4:6f:d7:a7:d8:0f:d2:f9:3f:
73:30:6d:22:d1:c1:ce:22:16:31:6d:81:bb:70:24:
d9:3a:91:aa:d7:5d:3b:a6:70:00:7f:07:fc:5c:75:
6a:e1:27:1b:6b:91:a8:56:e4:c3:0d:bd:4a:8c:b5:
90:00:6b:8b:ec:f2:dc:a3:9e:84:f7:4e:0b:9d:e1:
89:e1:c9:84:3f:ed:8b:bd:61:ab:7b:ff:b2:2d:07:
db:65:40:95:0a:8d:cd:21:80:b3:c6:6d:93:87:fc:
da:79:2c:64:81:0e:4c:b5:af:0d:60:46:e8:94:f4:
4a:67:ba:af:aa:a4:78:59:7d:6b:2a:b2:88:9d:18:
9b:71:3d:f0:00:76:e9:7f:4a:e1:c0:45:89:8f:28:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:9C:25:5C:F6:FD:F0:77:88:53:6F:86:E9:7F:A9:EF:59:31:B4
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:9f:92:6a:f3:61:ff:19:33:4a:24:07:e8:81:25:af:b7:
4b:71:92:ee:96:8f:da:6b:22:fc:d6:6f:87:67:c2:20:a5:f5:
b4:bf:2e:4b:0e:ec:ff:a4:bb:6a:8b:98:e1:0d:14:20:d2:7c:
1d:db:78:31:a6:d7:b0:a0:8b:1c:13:f7:40:8a:63:8b:fa:a4:
13:29:b6:e4:d2:58:17:0d:e7:32:3d:82:08:56:1b:8b:6b:e0:
a1:1c:f2:6b:aa:d2:62:34:cc:a8:71:5d:2c:f7:7f:0e:18:cb:
c3:9a:89:93:ff:de:50:c5:4c:b7:af:4b:a3:65:95:8d:42:ba:
47:3d:cb:5b:fc:6b:09:1c:14:29:d7:43:43:c3:82:0e:cb:93:
a1:14:cc:10:65:d7:1a:23:b3:a1:47:a8:30:03:3a:ba:18:aa:
bc:aa:29:91:01:8c:72:d6:c5:1d:d9:13:64:da:14:1b:e1:19:
eb:7a:57:e5:95:41:6e:18:ca:2f:1d:58:61:2b:b7:dd:36:fd:
74:f7:9d:ac:ad:8d:65:46:83:09:1e:c0:d9:20:c0:b6:07:92:
1c:72:3b:ca:a2:89:fb:34:da:27:8e:8d:17:66:3d:f1:94:c1:
5c:bf:d6:27:51:ea:43:d5:fa:c9:e4:4f:dc:3b:ca:4a:78:17:
47:5f:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:51:48 2025 by rpki-client