Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qtbsagNO9zLKKZT5oqRn9IYh09Y.roa
File: qtbsagNO9zLKKZT5oqRn9IYh09Y.roa (raw, json)
Hash identifier: mDKuYhEoqOCqBEWYgTehT7TTAIPG1YbxB3YuCT8IlNM=
Subject key identifier: AA:D6:EC:6A:03:4E:F7:32:CA:29:94:F9:A2:A4:67:F4:86:21:D3:D6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0196803E071D61E8DB082446EE1CBF51F493
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qtbsagNO9zLKKZT5oqRn9IYh09Y.roa
Signing time: Tue 29 Apr 2025 06:31:10 +0000
ROA not before: Tue 29 Apr 2025 06:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 62.72.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:3e:07:1d:61:e8:db:08:24:46:ee:1c:bf:51:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 29 06:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aad6ec6a034ef732ca2994f9a2a467f48621d3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:10:34:33:fd:2f:30:69:dd:29:8c:4b:36:
cc:6d:0d:c1:f8:49:cb:56:96:a2:31:91:af:30:a3:
73:b4:ee:61:ef:df:7e:50:4f:f5:be:33:fe:dc:fe:
2b:17:5f:08:94:50:3e:1f:28:cb:1d:87:23:90:09:
20:1c:a1:a6:33:12:a9:ba:1e:f5:79:89:d3:c0:1b:
1f:2b:1d:fe:67:be:db:3e:5f:cd:d4:5b:3e:ea:a7:
19:d2:fc:67:37:9e:5a:8a:f8:40:6b:d4:db:a4:9c:
15:f0:6b:8d:f2:83:15:5d:1b:a6:7c:d3:d1:5e:28:
6e:eb:7e:aa:39:ff:6c:64:f2:94:35:19:6e:c8:87:
a1:2b:a0:a8:77:40:5b:8e:3f:de:67:2a:6d:79:0e:
04:4a:30:46:46:92:4e:72:ba:75:d0:02:5b:12:af:
bf:b8:c7:2d:03:87:26:7c:b9:ce:11:b0:3b:19:5b:
ec:93:d6:f8:f3:6d:94:3f:9f:90:e6:cc:07:0b:4c:
54:d8:d9:08:dd:99:db:08:d4:7a:ba:07:a1:81:47:
39:3d:be:10:f0:2b:45:ba:55:92:7c:5d:5f:b9:9f:
d9:0a:65:70:b1:5b:d5:84:ca:e8:97:b7:d8:ce:b1:
35:9c:38:f1:f1:21:5e:05:e1:18:44:7d:fe:cf:3e:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:EC:6A:03:4E:F7:32:CA:29:94:F9:A2:A4:67:F4:86:21:D3:D6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qtbsagNO9zLKKZT5oqRn9IYh09Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:78:f4:cc:ad:cb:9a:e8:45:c7:6f:11:78:a3:91:2c:b9:81:
dd:9f:29:27:c3:69:b0:c1:e2:36:a1:db:a7:d1:77:c7:6e:d4:
c7:75:9e:36:d6:b5:df:6f:66:69:76:0b:b5:ae:f5:c5:d4:8e:
9d:a9:94:4a:46:2d:c7:6d:7b:0d:36:64:df:07:07:9c:69:71:
d8:48:bd:b1:4e:ea:36:7a:e0:2e:52:88:d8:c4:9c:6b:53:c7:
7f:c8:07:fe:23:c8:61:02:6c:31:9d:5e:b5:83:57:75:76:59:
57:fb:76:4d:68:e8:2a:ba:83:f4:14:eb:19:45:49:55:f6:a8:
ab:bf:0a:f2:ca:a8:7a:49:e2:2d:39:e8:66:17:d7:c8:eb:62:
f8:cd:9e:35:de:c3:7e:99:57:7a:88:dc:7b:7b:3a:82:5c:36:
f7:a1:70:81:74:6a:85:2d:a9:73:c3:77:4f:c7:63:94:18:e9:
38:cf:aa:d8:c7:49:d7:5c:b4:12:4a:ca:c1:d1:d8:8d:43:e9:
21:70:03:af:9c:96:ce:49:20:4c:4f:18:1e:0f:96:72:bc:ee:
c7:50:ba:21:e2:ad:4d:8c:02:d5:c8:c2:37:9a:74:52:4c:7a:
51:c6:65:4a:35:5f:2f:c3:a9:b9:19:5b:a4:94:d8:f8:c4:4e:
8b:50:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:27:46 2025 by rpki-client