Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa
File: g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa (raw, json)
Hash identifier: n9yM7dyLNiBrfDvEbmkvhz7bFD53KNqtuiSWk/NDtDw=
Subject key identifier: 83:B5:D2:14:CC:8E:15:D7:D4:F0:50:B2:F4:E1:9B:7F:A3:18:A1:96
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01968190C43ABF47FBA071945258EE1BE9B0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa
Signing time: Tue 29 Apr 2025 12:41:10 +0000
ROA not before: Tue 29 Apr 2025 12:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 62.72.185.0/24 maxlen: 24
176.57.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:90:c4:3a:bf:47:fb:a0:71:94:52:58:ee:1b:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 29 12:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83b5d214cc8e15d7d4f050b2f4e19b7fa318a196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:20:1e:eb:a4:c5:a4:f6:3a:02:cc:2f:92:
b3:0c:0a:14:24:d6:b3:3d:78:15:14:e6:51:c1:ed:
42:63:64:1f:0e:0f:56:a9:77:e9:81:f1:3b:1a:42:
f8:11:a7:fe:06:2d:4b:25:a1:8d:73:84:59:ef:f9:
a6:62:91:c5:af:02:4b:61:ac:2e:eb:2f:ed:97:c7:
2f:8d:14:e7:1c:61:46:b1:7a:f9:22:ec:07:2d:aa:
7a:8a:02:b9:3c:36:ad:f3:e8:94:a5:56:01:cb:ca:
74:09:d7:f2:c3:3e:e8:75:e7:2f:43:1f:6c:c4:ef:
09:1d:70:0b:4e:42:a6:f6:45:11:ab:06:d0:66:ee:
7a:74:52:28:ff:d4:45:37:cd:b8:2e:d4:f0:dc:fe:
1c:73:bf:27:21:e8:b0:81:39:e9:86:a1:e5:a0:96:
71:a7:29:a7:3f:72:79:58:8d:a4:14:ff:99:9b:41:
1f:ff:f1:32:80:d9:61:61:01:8a:21:d4:ef:11:33:
c6:2b:72:a9:31:30:23:40:3a:a1:de:ab:1b:2a:3c:
ff:37:6b:ce:8e:32:6f:c9:c3:c1:85:02:20:9a:32:
27:25:c1:98:da:ee:ba:87:33:7f:5d:04:f1:07:8e:
e1:15:77:c4:1d:9d:2c:27:9c:0e:df:1c:8e:31:3a:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:D2:14:CC:8E:15:D7:D4:F0:50:B2:F4:E1:9B:7F:A3:18:A1:96
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
176.57.55.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e8:6b:cf:ca:61:44:61:70:f1:60:46:a9:4a:ea:a4:57:39:
f6:92:2c:13:b7:9f:ff:b1:f9:fb:b3:38:8e:b8:12:6e:1a:57:
1a:de:ea:e3:f3:a4:99:1f:1e:a6:2f:60:a7:7d:6f:6f:4b:6f:
b0:b8:c6:fc:1a:11:b4:c2:78:8b:50:42:c4:3e:4f:4e:fc:bf:
8d:fd:8b:41:ce:68:01:c6:35:e7:19:fc:47:b8:6a:b6:a0:bf:
cc:4f:2d:a0:28:e6:e8:0a:99:8e:45:94:58:c9:58:46:df:de:
b4:c9:0d:4b:06:07:bf:d2:83:57:42:31:a1:6f:ea:ff:5e:7a:
35:36:15:d6:98:93:a2:0f:82:8d:14:35:54:85:a0:be:7b:c2:
57:d3:9d:64:8f:c6:0f:6f:35:de:7c:0c:54:13:37:e8:5d:b0:
7d:85:99:28:ee:8f:70:b7:e2:c5:65:03:8c:7f:6c:48:f4:32:
68:be:30:7c:53:48:9e:66:1d:4e:ad:09:db:bd:08:9f:fa:72:
64:b2:63:53:97:a8:e3:01:ff:9f:1c:d9:23:de:cb:ce:d9:06:
9f:7c:19:c5:ba:80:d1:f0:12:55:86:d3:4f:5c:07:48:ff:1e:
6c:ce:f9:e2:b2:6c:f0:67:19:73:a7:74:f8:82:2c:88:fd:22:
9f:73:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:09 2025 by rpki-client