Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa
File: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (raw, json)
Hash identifier: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=
Subject key identifier: 4D:EE:D8:1E:2D:A9:7D:51:7D:CD:BA:36:33:71:54:E9:7F:50:17:0F
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01942368FCDEFF8D028CFC62237E06984D79
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.112.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
62.4.117.0/24 maxlen: 24
62.4.118.0/24 maxlen: 24
62.4.119.0/24 maxlen: 24
62.4.120.0/24 maxlen: 24
62.4.121.0/24 maxlen: 24
62.4.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fc:de:ff:8d:02:8c:fc:62:23:7e:06:98:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4deed81e2da97d517dcdba36337154e97f50170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:7a:39:27:81:a7:29:86:d0:56:61:b4:55:
43:95:a7:6d:25:ba:17:cb:36:38:a3:ea:14:02:9a:
df:37:35:87:26:54:67:17:cf:81:c1:50:93:73:df:
69:8b:3a:3b:52:b7:c6:31:35:1f:de:8e:6b:e7:29:
5a:74:dd:b3:e2:73:17:2b:57:5f:69:43:76:fd:ec:
94:38:d4:3f:02:a5:f4:13:b7:bd:dc:fa:f9:ef:b0:
ed:71:7f:dc:af:e2:49:d9:e6:f5:59:1a:9e:c2:38:
8f:90:5c:d8:b3:d4:64:b5:43:40:6b:07:5d:31:0b:
8d:31:d2:8b:18:6e:57:a7:62:a8:d6:36:26:2e:a7:
1a:f3:89:88:fc:75:27:a4:eb:4e:d0:f4:04:ca:7a:
77:e9:bc:cf:66:d8:eb:56:11:0a:41:14:15:25:ed:
60:63:fd:b2:22:7c:57:ae:85:2f:8f:b0:20:be:77:
83:48:eb:65:09:f2:00:5a:19:a9:d8:38:fd:3e:e9:
2f:e9:09:7b:53:91:c9:09:29:61:eb:4c:1a:fd:9a:
66:a9:b7:90:7e:f8:5d:57:f8:55:d6:1e:fd:99:f3:
e4:be:49:8f:5f:64:22:48:dd:ea:a7:88:f5:68:87:
34:49:95:58:2f:7f:fc:fc:f0:be:25:a0:91:40:45:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:D8:1E:2D:A9:7D:51:7D:CD:BA:36:33:71:54:E9:7F:50:17:0F
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
62.4.117.0-62.4.122.255
Signature Algorithm: sha256WithRSAEncryption
2d:2a:7a:97:6f:59:c1:3e:16:34:ff:72:e3:6c:cb:89:f7:9b:
b4:92:44:62:8e:67:b9:bb:45:6d:75:cd:44:3b:95:98:0d:5a:
0b:fd:71:56:4b:55:38:5e:e5:3b:52:bd:a9:e5:f2:3b:70:4e:
a0:16:4e:7f:91:e7:f3:c0:03:28:7b:83:de:f9:ae:4f:e0:93:
8f:bc:b4:5f:96:45:31:8c:f4:56:34:49:b6:d5:28:99:51:4d:
40:f4:f4:fe:1e:41:03:5e:51:d2:9c:ce:1a:69:06:26:68:a9:
b2:91:42:b2:99:b5:66:3f:93:5d:ff:51:e8:32:d8:97:ef:c6:
6c:59:70:1b:9a:64:51:5f:91:f8:db:b7:c5:7f:7b:03:85:68:
64:48:99:df:d1:8f:28:cd:32:90:c2:4c:31:f4:10:0e:23:29:
67:7a:9a:9b:73:42:25:1b:a4:a3:6d:ac:24:13:6d:f2:0f:90:
6a:ee:dd:cf:f5:94:6a:5d:d7:6b:06:af:66:cd:a8:92:bc:a7:
28:0b:4f:7b:e0:0d:8a:ff:05:26:93:fd:fb:ca:e8:71:2a:99:
7c:78:89:14:7a:95:60:9a:eb:b2:c8:8c:5b:d3:a1:4a:05:f3:
51:d2:b7:54:b5:d1:d1:d5:0f:cb:69:42:8a:b7:e3:56:76:00:
8d:14:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:47:14 2025 by rpki-client