Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/jtloUH3GHj6agPnwXpuohh661-Y.roa
File: jtloUH3GHj6agPnwXpuohh661-Y.roa (raw, json)
Hash identifier: KrxUqRlvQiFZKDH37ecvZbfFbOWCQq6UJlz8kh7LUL8=
Subject key identifier: 8E:D9:68:50:7D:C6:1E:3E:9A:80:F9:F0:5E:9B:A8:86:1E:BA:D7:E6
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 01941F8C9612628BE7318A02342AD3B0775D
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/jtloUH3GHj6agPnwXpuohh661-Y.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47282
IP address blocks: 62.140.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:12:62:8b:e7:31:8a:02:34:2a:d3:b0:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed968507dc61e3e9a80f9f05e9ba8861ebad7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:9f:11:84:0c:3b:c0:f0:d2:54:4a:64:cb:
1b:f8:52:16:3a:ad:d1:53:7c:87:87:04:e8:5e:09:
3d:ff:29:df:6d:94:ee:6f:2a:4f:da:46:2d:7d:34:
42:29:62:22:2b:3b:f6:f1:b4:a5:11:97:bc:ac:1d:
f0:ba:4f:58:35:24:76:18:43:cb:76:94:c9:70:47:
f1:d8:a6:ca:d0:dc:f6:2a:4c:99:98:bc:0d:20:80:
20:fb:fc:e9:4c:b9:5a:37:71:cf:3f:ea:22:24:57:
1a:1f:89:f1:84:95:63:d1:48:18:ac:72:93:b2:69:
15:1d:39:bd:81:ef:96:c9:12:0e:92:4b:20:d0:0f:
f7:7d:3b:6d:18:da:3f:c1:b9:7f:8a:09:d2:f2:4f:
e3:4e:4c:71:9a:09:2f:23:78:d9:30:81:6a:6f:59:
40:56:af:75:b1:b5:53:68:1f:3d:72:9a:8b:a4:dd:
6c:95:ad:0e:14:68:11:41:66:47:da:51:2d:37:5e:
d7:1f:94:90:c5:87:e9:5f:20:80:19:99:29:c8:14:
5d:f6:b7:ac:d9:43:96:cc:17:76:eb:12:81:77:15:
c5:29:00:fa:d9:2a:90:49:72:a2:34:88:c0:52:2a:
8f:13:f1:fc:90:cd:d0:9c:2f:ca:92:29:31:b3:7a:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D9:68:50:7D:C6:1E:3E:9A:80:F9:F0:5E:9B:A8:86:1E:BA:D7:E6
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/jtloUH3GHj6agPnwXpuohh661-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:b8:5f:88:d4:de:12:51:f6:a2:e9:4f:8b:2c:86:59:2b:88:
f5:57:e0:0d:53:9d:87:4a:f7:0e:1a:c1:8e:4a:1c:36:8f:03:
0e:a8:07:1e:17:59:ac:cc:e1:80:f2:63:bb:da:2f:cc:f7:db:
a2:fd:c7:99:7b:32:26:a8:f1:cf:b3:8f:03:df:0f:fc:90:7c:
8c:3c:a7:94:ed:e6:97:b0:8b:38:2f:15:af:6c:8a:b9:8a:8a:
18:02:f9:5d:bf:18:0e:90:db:72:ed:89:84:d8:0f:3b:6e:3c:
df:55:a6:b0:0e:b7:b7:6a:e4:c2:19:f6:dc:6a:6a:fa:e0:7e:
71:61:58:ee:f3:e5:14:60:55:f8:81:c6:38:26:09:43:23:d9:
f4:e4:78:21:17:4e:70:5a:4d:cb:2a:74:8e:21:91:f3:51:a1:
8d:d2:9b:fb:ec:11:ca:97:d8:be:33:99:5f:49:b4:7e:c1:eb:
35:f9:3b:da:a9:9f:89:7d:14:23:9f:ce:a1:2e:46:d7:d8:63:
af:62:5f:62:76:8a:02:8d:c9:e2:0e:10:a1:b3:48:62:ed:e1:
f1:46:34:e2:a4:7f:05:b9:6b:ed:0d:3c:8f:a0:8c:2f:6e:f5:
e4:c2:06:ce:65:00:9e:c2:77:80:6f:49:4a:84:b0:00:18:df:
46:37:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:28 2025 by rpki-client