Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/feQ4BVKrjP3eup1JBlD7_AKwIC4.roa
File: feQ4BVKrjP3eup1JBlD7_AKwIC4.roa (raw, json)
Hash identifier: 6wTAkZB+N8Py5E7tn1MMhiBt4Bi/jfdk+hDQnqRxzj8=
Subject key identifier: 7D:E4:38:05:52:AB:8C:FD:DE:BA:9D:49:06:50:FB:FC:02:B0:20:2E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01966D7A400A741D27379EB055060F018A7C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/feQ4BVKrjP3eup1JBlD7_AKwIC4.roa
Signing time: Fri 25 Apr 2025 15:04:10 +0000
ROA not before: Fri 25 Apr 2025 15:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:7a:40:0a:74:1d:27:37:9e:b0:55:06:0f:01:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 25 15:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de4380552ab8cfddeba9d490650fbfc02b0202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:2f:bf:30:a4:5b:75:7a:27:4e:e8:84:62:
b0:a5:2e:7e:7e:3d:36:66:db:77:7d:1a:7d:48:ac:
78:bf:b8:92:b9:d2:b8:db:a4:8a:be:0f:ce:27:17:
86:67:09:6a:f4:73:11:2e:89:49:f8:4c:f4:22:31:
30:b7:e2:a8:66:e7:a5:ac:7e:2c:07:cf:9d:cb:fe:
a8:7c:d6:bb:f5:98:f5:ad:e0:b6:58:d4:30:d7:69:
bf:5a:55:32:ce:db:f5:ac:62:5e:7b:1e:d5:e7:a4:
5e:a8:32:b6:72:d2:55:e7:96:eb:1d:51:d0:b3:f3:
25:75:db:ec:cd:4d:53:eb:55:ab:7f:dd:ef:45:1e:
ba:f7:d4:f4:4a:33:d3:61:6e:8f:20:81:63:51:05:
ee:27:50:01:1d:dc:63:fe:be:b8:99:46:f0:12:30:
7f:01:34:ca:d3:72:2d:24:3a:24:bf:64:22:34:bc:
7c:b4:c4:8f:6f:e9:10:cd:29:cf:6b:08:54:91:25:
71:c4:ca:d7:b6:c5:12:5f:3c:4b:f8:22:62:98:0e:
e3:85:d3:ae:0e:48:da:f7:75:a0:2e:94:7b:11:65:
72:0e:2c:6b:16:2d:a5:1d:8f:6d:7d:1b:69:43:ae:
5c:63:3e:c0:5e:73:91:92:12:7b:d4:b9:21:8b:98:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:38:05:52:AB:8C:FD:DE:BA:9D:49:06:50:FB:FC:02:B0:20:2E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/feQ4BVKrjP3eup1JBlD7_AKwIC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.184.0/23
62.72.187.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c3:09:d2:99:72:f3:99:cb:15:ab:e2:16:7a:8d:4b:da:ad:
fc:34:ae:88:6a:78:30:53:95:49:eb:be:69:3b:09:e6:90:1c:
00:11:9e:b6:53:cf:87:fe:61:c0:a4:f8:70:81:48:32:d3:38:
9d:06:06:44:7c:77:d9:39:a5:6e:5b:2d:6c:a6:c3:7f:84:64:
35:a6:85:94:b1:62:e5:23:8b:71:6e:9c:f2:4d:d1:4a:f4:7b:
0a:2c:c7:6a:0b:20:2b:cf:c0:36:02:b1:88:06:e7:1c:aa:03:
b3:c3:ef:d1:65:27:c6:9b:16:7d:d6:f4:50:0b:0f:64:bb:4f:
c0:82:75:2f:47:50:74:b5:33:ff:e9:4d:d6:e9:f5:6b:94:b9:
d6:a6:2e:1c:4d:92:a1:e9:ae:fa:b4:3d:d2:b8:45:99:f6:9e:
19:96:2a:b6:46:01:60:ef:1e:5f:88:dc:0a:e1:c3:50:6c:b8:
4c:a7:dc:3c:ec:62:95:85:f2:a0:a7:75:58:b4:48:8f:48:2a:
8d:de:81:08:78:5c:f8:8c:61:eb:2b:c1:31:19:a0:7c:29:84:
4c:83:d0:79:d0:82:3e:67:f3:09:64:2f:ae:1d:f7:32:1e:ed:
be:66:48:c2:7b:64:48:fe:56:ba:8a:ca:ee:c8:4b:1c:32:77:
35:9e:5b:8b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZZtekAKdB0nN56wVQYPAYp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwNDI1MTUwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGU0MzgwNTUyYWI4Y2ZkZGViYTlkNDkwNjUwZmJmYzAyYjAyMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f0vvzCkW3V6J07ohGKwpS5+fj02
Ztt3fRp9SKx4v7iSudK426SKvg/OJxeGZwlq9HMRLolJ+Ez0IjEwt+KoZuelrH4s
B8+dy/6ofNa79Zj1reC2WNQw12m/WlUyztv1rGJeex7V56ReqDK2ctJV55brHVHQ
s/MlddvszU1T61Wrf93vRR6699T0SjPTYW6PIIFjUQXuJ1ABHdxj/r64mUbwEjB/
ATTK03ItJDokv2QiNLx8tMSPb+kQzSnPawhUkSVxxMrXtsUSXzxL+CJimA7jhdOu
Dkja93WgLpR7EWVyDixrFi2lHY9tfRtpQ65cYz7AXnORkhJ71Lkhi5hIFwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFH3kOAVSq4z93rqdSQZQ+/wCsCAuMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZmVRNEJWS3JqUDNldXAxSkJsRDdfQUt3SUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAE+SKID
BAM+SKADBAE+SLgDBAA+SLsDBAA+SL8wDAMEAVEVAgMEA1EVAAMEALA5MwMEALA5
OAMEALA5PzANBgkqhkiG9w0BAQsFAAOCAQEAI8MJ0ply85nLFaviFnqNS9qt/DSu
iGp4MFOVSeu+aTsJ5pAcABGetlPPh/5hwKT4cIFIMtM4nQYGRHx32TmlblstbKbD
f4RkNaaFlLFi5SOLcW6c8k3RSvR7CizHagsgK8/ANgKxiAbnHKoDs8Pv0WUnxpsW
fdb0UAsPZLtPwIJ1L0dQdLUz/+lN1un1a5S51qYuHE2Soemu+rQ90rhFmfaeGZYq
tkYBYO8eX4jcCuHDUGy4TKfcPOxilYXyoKd1WLRIj0gqjd6BCHhc+Ixh6yvBMRmg
fCmETIPQedCCPmfzCWQvrh33Mh7tvmZIwntkSP5WuorK7shLHDJ3NZ5biw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:11 2025 by rpki-client