Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/8loW5HN3rlQsgDTApUmX4zxMYVo.roa
File: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (raw, json)
Hash identifier: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=
Subject key identifier: F2:5A:16:E4:73:77:AE:54:2C:80:34:C0:A5:49:97:E3:3C:4C:61:5A
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 01941F8C95661ACEC1566730192C06869375
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/8loW5HN3rlQsgDTApUmX4zxMYVo.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34139
IP address blocks: 62.140.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:66:1a:ce:c1:56:67:30:19:2c:06:86:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25a16e47377ae542c8034c0a54997e33c4c615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:f1:c2:c7:c9:b9:1f:3e:f1:15:32:ca:bf:
25:6d:a7:6c:38:1b:ab:cf:19:59:eb:2d:7a:86:09:
7b:cf:2e:7a:ab:36:d1:99:08:32:92:be:69:41:aa:
e9:4d:e4:fe:02:0c:06:9d:7a:e8:33:49:4b:b3:74:
49:fe:f4:cf:ff:cb:39:f7:a9:02:4e:1a:8a:d4:74:
bc:12:c9:96:af:d4:cc:0c:f1:49:41:1a:b1:be:c8:
6f:ed:50:98:3f:08:b4:bf:84:80:2b:6a:2b:ec:3b:
b0:06:a3:90:69:f4:7a:62:d5:d2:e4:f5:4a:49:47:
5d:81:a6:47:49:74:fb:87:bc:58:fe:df:27:2a:53:
38:8c:65:c5:1c:a6:f3:5c:50:cf:de:9d:fe:90:90:
2b:b6:27:2e:b5:68:52:59:40:37:9d:89:8a:bb:57:
c4:6a:85:f3:c9:9e:aa:ee:b0:f3:bf:c9:f5:c7:49:
55:a6:9c:bb:35:03:18:27:a4:5a:f3:bc:95:3e:e6:
c6:ac:4a:88:46:7d:5c:c4:f6:31:20:5a:4a:f0:b9:
84:27:7a:03:54:5f:30:02:cf:61:9f:26:1b:83:b8:
4a:28:94:5f:60:a5:28:81:05:d8:5c:14:c4:6d:4c:
ce:99:93:6e:cd:e1:9d:9d:1d:5f:31:99:56:87:23:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:16:E4:73:77:AE:54:2C:80:34:C0:A5:49:97:E3:3C:4C:61:5A
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/8loW5HN3rlQsgDTApUmX4zxMYVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.232.0/24
Signature Algorithm: sha256WithRSAEncryption
82:26:c7:83:7a:bb:04:5a:b0:80:d0:8e:1b:fa:e1:60:ea:91:
36:78:72:e3:9e:b1:5f:43:91:93:e7:cc:75:89:14:2c:20:74:
5e:8b:f8:96:fe:62:85:80:6a:8b:f9:39:32:61:d2:dd:b5:26:
99:f9:5e:3c:e5:a4:3d:83:76:46:8b:70:cc:7e:9b:e8:0a:c1:
1e:f8:57:3a:2b:3e:79:b5:ef:ee:58:25:02:c7:d6:35:dc:ab:
50:5e:35:dc:34:41:fe:74:e4:0d:5f:05:f2:dd:85:2d:df:f4:
9b:cf:b8:c2:31:aa:50:5b:1c:cd:53:b8:c4:c0:62:24:60:c1:
8e:03:c6:cc:a2:17:76:22:81:97:32:d6:92:2d:9f:0d:23:09:
2b:b8:3c:2d:17:71:e5:3a:3d:db:31:bc:4e:72:9c:dc:a7:ab:
e8:0e:92:b9:d9:c0:65:f1:e2:0d:bc:ae:30:5f:55:ac:a3:0d:
3b:66:8b:5c:29:fd:57:e3:6b:7a:80:3b:e0:07:28:f2:34:87:
ad:ea:2b:82:46:8a:c4:89:4a:3e:fc:6f:d3:56:34:5c:fd:51:
da:36:ce:64:9b:dc:bb:05:a7:17:56:b2:6f:43:da:51:77:2c:
c6:b7:d8:20:99:eb:66:92:3b:c3:b4:e9:a0:c9:a1:ed:74:26:
ed:86:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:14 2025 by rpki-client