Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-QM7lN_3l_i24PtIVM4U3b6ZVsY.roa
File: 1-QM7lN_3l_i24PtIVM4U3b6ZVsY.roa (raw, json)
Hash identifier: BVkkqGkVOZsaCvddvqk40JcxzS3yXeDtAePzl+T+34A=
Subject key identifier: F9:03:3B:94:DF:F7:97:F8:B6:E0:FB:48:54:CE:14:DD:BE:99:56:C6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019681BCB631FB3E62459405F58295B9A6D8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-QM7lN_3l_i24PtIVM4U3b6ZVsY.roa
Signing time: Tue 29 Apr 2025 13:29:10 +0000
ROA not before: Tue 29 Apr 2025 13:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199190
IP address blocks: 62.50.148.0/24 maxlen: 24
62.50.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:bc:b6:31:fb:3e:62:45:94:05:f5:82:95:b9:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 29 13:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9033b94dff797f8b6e0fb4854ce14ddbe9956c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:ff:96:31:90:db:dc:43:bc:24:ff:b3:69:
0e:2a:8f:7c:3b:1e:54:ee:43:10:98:73:53:f1:2c:
c7:5b:bb:3a:f6:3a:7c:50:45:f7:e6:16:2e:c8:5c:
49:84:64:dc:ab:69:43:dd:3d:23:df:3a:16:cc:0f:
30:27:8a:88:d6:d0:df:8d:d1:8a:a8:72:88:5f:f3:
1c:fc:ff:3c:87:15:65:e6:78:77:88:2a:de:54:08:
2e:12:3b:42:d1:ab:c7:05:e8:53:b6:b0:e6:37:4f:
2b:c5:c4:db:83:03:54:42:e8:c4:4a:dc:12:20:66:
e9:a8:95:59:03:a6:fb:11:f5:2b:18:3e:2d:fd:5d:
2b:dd:45:fa:ea:c3:06:ed:f5:0e:b5:04:dc:4f:f9:
cf:b2:3c:c3:68:3b:a5:7b:fc:cc:73:27:3f:88:73:
cf:44:57:e2:ce:fa:03:f0:88:c7:10:a5:ce:ac:c1:
05:e6:fb:74:27:a2:06:e5:7d:d7:de:ef:1c:77:e2:
aa:de:70:dd:11:68:dd:85:7f:70:4f:38:c1:8d:51:
37:f4:fd:32:ef:75:40:2b:b4:b0:5a:43:d4:46:bc:
82:e5:04:9d:14:81:e1:8e:61:98:83:08:b2:60:a3:
9b:bb:d0:95:d3:22:41:fe:2d:c6:a9:3e:d2:d5:71:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:3B:94:DF:F7:97:F8:B6:E0:FB:48:54:CE:14:DD:BE:99:56:C6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-QM7lN_3l_i24PtIVM4U3b6ZVsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.50.148.0/23
Signature Algorithm: sha256WithRSAEncryption
81:72:e5:42:41:19:d0:c8:5f:07:69:ae:64:5e:84:c7:ad:69:
2a:58:ab:73:84:63:e4:39:92:03:a7:a4:ac:13:35:3f:b9:28:
1f:ca:e7:7f:86:0a:8e:a4:e7:43:c4:07:9d:ec:65:68:2d:d9:
66:61:e4:25:19:62:5a:1e:b9:77:77:2d:ca:3d:e2:1d:6f:c6:
9b:a9:c6:f8:ff:a1:f3:0f:8d:95:a7:24:5e:68:d0:b4:be:90:
eb:4f:3b:7f:90:70:ec:11:cc:41:9f:72:ed:1c:3e:29:ff:d9:
1c:13:d5:71:12:cd:fd:75:a0:56:68:2c:1b:79:13:bc:36:98:
22:f9:28:9a:cf:1e:f5:ea:16:1c:65:26:54:46:c0:e7:6e:91:
19:7d:d2:9e:bf:96:03:e7:0c:04:f4:ec:35:6f:7d:5b:9b:fb:
07:75:87:63:cf:7a:c5:c8:13:80:41:31:e6:0e:c4:4a:7c:a1:
00:34:4f:f6:d2:32:fb:20:eb:04:c9:52:4f:2a:ae:38:43:5f:
a2:5d:d1:19:54:1c:b2:76:c2:86:2e:0b:10:36:ea:a3:83:35:
45:85:22:95:69:1d:4b:e7:08:48:d4:69:b5:83:e3:bb:55:7c:
54:02:c2:61:74:59:cd:be:5b:17:97:5b:b4:76:c8:5f:3c:89:
54:91:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:13 2025 by rpki-client