Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa
File: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (raw, json)
Hash identifier: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=
Subject key identifier: EB:5B:52:57:74:17:2D:B8:EC:FE:8F:F6:F4:9D:F2:D9:2C:FB:AE:04
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5AA2792ECFD8404CFC8DD800651A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41280
IP address blocks: 83.222.163.0/24 maxlen: 24
83.222.164.0/24 maxlen: 24
83.222.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5a:a2:79:2e:cf:d8:40:4c:fc:8d:d8:00:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb5b525774172db8ecfe8ff6f49df2d92cfbae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:2c:22:9e:53:23:66:21:b6:ea:19:a7:e9:
68:b3:b0:5b:a3:d6:79:24:a3:2b:a2:24:ed:bb:5c:
a4:8b:22:75:ad:a0:e5:bb:68:a3:75:6d:1b:18:1d:
85:a8:29:b1:79:ee:bc:83:2b:b3:24:17:13:a6:0b:
2a:e3:76:43:25:40:da:2d:bb:f1:d7:2e:70:92:fd:
ea:38:0d:93:1a:2d:ac:bd:4d:19:6d:2a:ee:db:9d:
d6:c9:dd:6f:36:d6:65:79:40:ea:a5:6e:7a:35:c7:
d1:e1:de:9b:18:e3:b9:9b:e2:01:eb:0d:18:51:32:
66:72:b1:04:6c:9b:24:fa:89:4c:66:ee:0a:93:db:
96:39:ee:87:0d:05:17:98:46:5f:f9:6c:10:48:5c:
44:9c:2b:c6:86:6d:a8:08:cc:25:c5:44:0d:a3:3f:
1a:23:94:dd:ca:09:5b:33:77:e2:2e:08:c7:d6:53:
7c:5c:41:9a:a7:2a:57:26:b1:7e:2e:83:78:33:db:
85:93:76:ed:35:73:47:be:d1:d8:41:03:50:db:16:
ef:93:19:1b:29:5b:b7:c2:9f:de:06:4b:b1:c5:f7:
dd:38:42:1c:67:06:af:79:01:8b:6c:4a:93:a4:20:
9d:66:c6:84:61:78:98:07:be:39:46:15:27:25:e2:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:52:57:74:17:2D:B8:EC:FE:8F:F6:F4:9D:F2:D9:2C:FB:AE:04
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.163.0-83.222.165.255
Signature Algorithm: sha256WithRSAEncryption
63:98:69:1b:ff:df:6b:4c:e3:c1:76:8e:e6:7c:01:30:53:67:
45:67:4f:9c:bc:d6:e9:69:db:d1:3a:95:59:e9:25:2f:1f:48:
c3:f9:d6:72:ec:84:ed:4d:f6:b6:37:5e:46:97:8e:e0:ca:45:
30:61:5e:d2:ad:1b:a2:ff:2e:56:7c:1a:53:05:1d:41:77:15:
27:ae:98:c7:66:81:00:35:c7:7a:86:77:0d:92:2e:d2:6a:98:
d4:c6:6c:1c:dd:b6:20:fa:83:0a:cc:d6:f7:82:26:2c:f3:f1:
a7:48:ea:3c:92:08:8d:14:3a:ce:b4:6c:ab:6a:14:7f:08:30:
c5:3a:ee:51:f9:9f:ee:b7:28:0c:a1:22:b8:8e:c0:f8:54:8b:
bb:97:94:e0:e3:fe:54:45:32:07:26:0c:24:ad:8c:77:cd:ee:
eb:7d:00:4c:c5:f9:23:f6:98:d8:09:14:87:02:29:01:14:ba:
63:bf:e7:30:d3:30:4a:7f:b5:35:50:27:40:f4:58:dd:53:d9:
1f:b1:fa:90:1e:9d:52:02:74:c1:47:84:40:26:1f:36:82:90:
36:eb:83:0f:c7:1b:74:fd:56:2b:14:21:43:7f:44:8a:ed:a0:
d2:50:1c:8b:50:1a:51:39:5c:17:55:0a:55:4f:ae:80:47:73:
20:bc:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:17:43 2025 by rpki-client