Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa
File: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (raw, json)
Hash identifier: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=
Subject key identifier: F8:62:61:62:2B:94:52:B3:FC:46:19:81:87:45:12:BF:E5:44:05:F0
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0195F5209C81797FE1BAAF00E32FA0FD2785
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa
Signing time: Wed 02 Apr 2025 06:11:49 +0000
ROA not before: Wed 02 Apr 2025 06:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
2a02:b60:1::/48 maxlen: 48
2a02:b60:2::/48 maxlen: 48
2a02:b60:3::/48 maxlen: 48
2a02:b60:4::/48 maxlen: 48
2a02:b60:5::/48 maxlen: 48
2a02:b60:6::/48 maxlen: 48
2a02:b60:7::/48 maxlen: 48
2a02:b60:8::/48 maxlen: 48
2a02:b60:9::/48 maxlen: 48
2a02:b60:a::/48 maxlen: 48
2a02:b60:b::/48 maxlen: 48
2a02:b60:c::/48 maxlen: 48
2a02:b60:d::/48 maxlen: 48
2a02:b60:e::/48 maxlen: 48
2a02:b60:f::/48 maxlen: 48
2a02:b60:10::/48 maxlen: 48
2a02:b60:11::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:20:9c:81:79:7f:e1:ba:af:00:e3:2f:a0:fd:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Apr 2 06:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86261622b9452b3fc461981874512bfe54405f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:d1:ca:71:73:f6:39:d4:45:40:b5:0d:b0:
1c:16:f2:81:cb:f0:78:cf:ed:f5:b6:b3:06:3a:8e:
9a:21:d3:44:a3:32:5a:ee:15:aa:c0:ff:b6:3b:fd:
7f:a1:8c:4c:2d:5f:f5:80:e5:24:91:43:6d:d6:cd:
d8:e2:be:35:07:eb:d6:8c:c6:f0:72:76:7b:6a:2d:
43:db:74:46:3a:4c:04:aa:57:bf:69:86:54:fc:cd:
58:78:ad:f4:b3:9c:c4:b7:88:bd:a7:ad:9f:c6:a7:
9c:08:02:5f:e3:aa:a4:77:52:7c:60:61:5b:15:fc:
1f:65:6a:33:cf:68:ce:41:f9:53:18:98:56:d1:6c:
c2:b5:da:aa:fd:1b:bd:64:ad:3d:1a:00:08:77:7b:
a2:23:44:b0:03:54:26:16:7c:fb:63:6c:41:e8:95:
e8:20:e2:36:69:62:54:5a:d7:49:22:db:8a:46:fe:
bb:ac:53:1d:0a:4a:f3:35:6b:26:94:1f:bd:92:5e:
8b:24:84:e2:08:44:d4:84:37:1f:11:73:b4:5f:1c:
0d:ac:ab:d9:1e:7b:61:01:91:c4:da:0a:37:67:97:
46:91:30:8f:90:7c:0c:e4:cb:01:c4:80:6c:5c:72:
d4:eb:89:e2:42:0b:e6:0a:9e:91:c7:70:ea:7e:a2:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:61:62:2B:94:52:B3:FC:46:19:81:87:45:12:BF:E5:44:05:F0
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
IPv6:
2a02:b60:1::-2a02:b60:11:ffff:ffff:ffff:ffff:ffff
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
c1:a6:0a:13:2a:7f:9c:f3:dc:92:be:bc:09:19:f4:ba:17:11:
04:ca:fe:88:8e:27:b3:0a:2a:df:48:aa:3d:e4:68:85:32:77:
e2:7e:4e:61:47:2b:ed:0b:3c:7c:8b:f2:f5:b0:0d:82:4d:86:
03:55:90:bd:11:5d:70:74:68:3c:4e:d5:d4:c3:24:65:50:ce:
28:4e:fc:34:2a:91:a4:f6:bb:bb:00:eb:c7:ba:80:26:0b:17:
54:a2:45:a5:d3:3b:32:3e:45:11:bc:8e:b8:8a:b2:60:45:cc:
71:f3:63:72:e0:95:3f:90:ad:b7:3e:c4:61:fb:1b:20:d4:1d:
f5:fb:1b:8c:91:29:e9:42:6a:12:17:2e:4d:87:8f:6f:73:75:
d6:33:ed:08:80:4b:c7:e8:e7:f9:7a:36:03:96:5c:65:46:11:
9a:f2:01:2c:e3:cc:e6:96:1e:d1:58:b8:c6:04:a2:b3:71:f3:
6d:fd:bb:ba:8a:96:c8:52:3e:88:6c:25:c2:1d:0b:1b:a9:1e:
e5:c2:32:95:1b:67:5e:e9:93:ee:46:4a:a7:6b:cf:e2:88:10:
b3:37:e7:7f:67:65:49:20:10:8b:78:1d:cb:76:48:47:ca:da:
ad:b0:38:ce:4f:c7:22:af:87:78:23:e7:af:94:4c:7a:2d:ab:
4e:86:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:01:19 2025 by rpki-client