Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/mDAtJGSElDm2O92EFy5g2Ab4svc.roa
File: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (raw, json)
Hash identifier: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=
Subject key identifier: 98:30:2D:24:64:84:94:39:B6:3B:DD:84:17:2E:60:D8:06:F8:B2:F7
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 01963352E7CFA6DF28353E03189F879064F0
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/mDAtJGSElDm2O92EFy5g2Ab4svc.roa
Signing time: Mon 14 Apr 2025 08:03:13 +0000
ROA not before: Mon 14 Apr 2025 08:03:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213479
IP address blocks: 62.113.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:52:e7:cf:a6:df:28:35:3e:03:18:9f:87:90:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Apr 14 08:03:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98302d2464849439b63bdd84172e60d806f8b2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:1b:33:36:a7:11:dd:7b:61:d2:ca:53:bf:
e7:d9:b4:86:d8:91:0f:54:16:9d:3c:a5:fd:73:5d:
c9:2a:fa:84:b3:bc:da:b0:15:33:04:09:52:cd:48:
14:3c:81:4d:2c:08:82:85:22:84:10:ce:71:02:03:
eb:d6:15:f5:48:2a:83:80:ac:8b:3c:b8:7a:56:00:
bd:56:0b:d9:7c:4e:0f:f3:9b:91:c6:53:8c:10:f7:
80:5b:27:11:f8:d4:39:a0:65:00:14:2b:9c:e9:a4:
9d:42:4e:4f:ed:d2:0e:61:61:c2:2a:82:f5:07:36:
1f:8a:b6:a1:ee:de:47:32:b4:89:c7:60:ed:16:21:
ca:0c:8c:5a:86:4e:bb:89:d2:a1:ea:44:eb:79:5b:
33:35:33:cb:fa:0c:96:de:37:42:9c:e7:1a:45:f5:
64:3e:58:be:b8:6c:78:64:d8:48:ed:3c:4d:0c:34:
e8:c2:1f:04:da:e0:45:ba:95:f1:4d:7d:a1:92:47:
97:b4:e6:90:95:18:97:e5:be:67:b3:bc:9a:cf:c8:
99:54:22:56:f2:cd:6b:26:1b:f5:ea:3d:0f:d3:70:
ce:51:29:6c:4e:9e:6a:32:f0:a0:99:a6:39:43:ac:
4a:5a:50:db:e2:b7:df:00:15:03:10:2c:a8:49:f6:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:2D:24:64:84:94:39:B6:3B:DD:84:17:2E:60:D8:06:F8:B2:F7
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/mDAtJGSElDm2O92EFy5g2Ab4svc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:c9:9a:48:d3:95:ba:fb:89:64:f4:e0:f1:f3:06:cc:9d:
41:dc:0c:8b:37:77:ef:ff:a1:a8:4f:09:44:47:51:c4:e3:8d:
9e:4f:54:d4:f4:a4:2a:56:60:4b:0e:95:89:9f:ff:c2:e8:1b:
14:29:5a:37:1d:a9:02:79:f6:fb:a4:90:ca:01:80:76:50:41:
94:d9:79:40:5c:fc:84:5f:e6:8f:00:1c:8b:f6:66:50:d2:ae:
a3:b5:de:40:c9:2a:4e:a4:91:85:5c:14:82:04:00:6b:03:c2:
a5:90:86:ff:30:3b:a9:8f:3c:5b:0d:54:43:d5:ca:c6:bc:f9:
c9:14:ec:bd:f0:8c:52:e6:84:91:b3:ef:a4:6d:1e:05:3f:85:
dd:80:5e:53:53:20:06:a7:3e:0f:72:89:01:fc:3a:92:53:3a:
57:cc:ad:c4:82:aa:3a:7b:4e:30:9e:60:99:fd:a5:b0:bd:6a:
ed:76:49:4a:77:62:b7:12:eb:a4:c6:d9:76:c7:be:61:e2:59:
f0:53:5d:b2:ff:99:e0:f4:2e:36:fa:34:a6:d5:f7:e3:7f:b9:
bc:61:bf:3b:ad:88:a5:c8:07:ff:e9:14:19:03:6d:55:37:8c:
3c:2e:08:8b:5c:78:be:25:28:5e:3b:17:e8:9f:3e:42:89:3c:
9a:ba:f8:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYzUufPpt8oNT4DGJ+HkGTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjUwNDE0MDgwMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODMwMmQyNDY0ODQ5NDM5YjYzYmRkODQxNzJlNjBkODA2ZjhiMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnYbMzanEd17YdLKU7/n2bSG2JEP
VBadPKX9c13JKvqEs7zasBUzBAlSzUgUPIFNLAiChSKEEM5xAgPr1hX1SCqDgKyL
PLh6VgC9VgvZfE4P85uRxlOMEPeAWycR+NQ5oGUAFCuc6aSdQk5P7dIOYWHCKoL1
BzYfirah7t5HMrSJx2DtFiHKDIxahk67idKh6kTreVszNTPL+gyW3jdCnOcaRfVk
Pli+uGx4ZNhI7TxNDDTowh8E2uBFupXxTX2hkkeXtOaQlRiX5b5ns7yaz8iZVCJW
8s1rJhv16j0P03DOUSlsTp5qMvCgmaY5Q6xKWlDb4rffABUDECyoSfYbnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgwLSRkhJQ5tjvdhBcuYNgG+LL3MB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvbURBdEpHU0VsRG0yTzkyRUZ5NWcyQWI0c3ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnE6MA0G
CSqGSIb3DQEBCwUAA4IBAQB+OsmaSNOVuvuJZPTg8fMGzJ1B3AyLN3fv/6GoTwlE
R1HE442eT1TU9KQqVmBLDpWJn//C6BsUKVo3HakCefb7pJDKAYB2UEGU2XlAXPyE
X+aPAByL9mZQ0q6jtd5AySpOpJGFXBSCBABrA8KlkIb/MDupjzxbDVRD1crGvPnJ
FOy98IxS5oSRs++kbR4FP4XdgF5TUyAGpz4PcokB/DqSUzpXzK3Egqo6e04wnmCZ
/aWwvWrtdklKd2K3Euukxtl2x75h4lnwU12y/5ng9C42+jSm1ffjf7m8Yb87rYil
yAf/6RQZA21VN4w8LgiLXHi+JSheOxfonz5CiTyauvgd
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:55 2025 by rpki-client