Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTj4m_wklRIyU1Gwt9kvVoXrChU.roa
File: hTj4m_wklRIyU1Gwt9kvVoXrChU.roa (raw, json)
Hash identifier: 2qEsRJTpNiqbCQGmGIIIKov5X0RX0SgFYgAZ579fszs=
Subject key identifier: 85:38:F8:9B:FC:24:95:12:32:53:51:B0:B7:D9:2F:56:85:EB:0A:15
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01949980DC70FC3F9B8394D44D1E67ED5634
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTj4m_wklRIyU1Gwt9kvVoXrChU.roa
Signing time: Fri 24 Jan 2025 18:09:06 +0000
ROA not before: Fri 24 Jan 2025 18:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33842
IP address blocks: 147.45.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:80:dc:70:fc:3f:9b:83:94:d4:4d:1e:67:ed:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 24 18:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8538f89bfc249512325351b0b7d92f5685eb0a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:b6:6d:df:45:f6:b5:b8:26:94:2e:66:14:
c4:8b:0c:5d:1e:d1:ad:88:ac:08:8a:62:33:29:bf:
a3:ce:f5:31:d9:20:29:e1:02:e7:a8:84:1c:9a:14:
b2:70:df:3b:9d:65:89:17:34:f7:88:a6:58:e9:d0:
f3:98:b5:1b:4a:94:df:af:8d:0c:0f:52:01:4d:f5:
4b:17:fa:eb:9e:53:95:13:d3:dc:5a:05:ec:c8:62:
1d:51:fc:cb:0b:ae:38:d8:fb:8e:16:ba:84:1a:2e:
4a:9c:bb:ff:a3:0b:18:e5:0b:ab:67:f2:19:92:bf:
29:08:45:6d:d9:f5:51:b4:1d:db:91:85:07:cf:b9:
96:7e:e4:65:42:49:09:a6:bf:c1:0f:b8:4a:f8:d0:
53:f9:eb:56:3f:96:4b:68:99:86:e2:e9:9c:14:94:
3d:3c:8c:3d:94:d7:02:f1:28:7e:f1:25:f0:17:17:
80:b4:8a:70:03:64:4c:b1:26:0e:56:87:df:ae:1b:
b0:73:98:0f:04:76:1c:4a:8f:59:ee:0b:fe:b0:c6:
a3:53:ff:36:38:59:28:91:05:2c:80:8f:60:38:c7:
fe:24:03:1b:65:c9:ad:bd:e6:86:5f:b5:b5:cf:b6:
8f:0e:2d:7f:e1:2f:b8:02:f1:cd:06:4c:76:c6:94:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:F8:9B:FC:24:95:12:32:53:51:B0:B7:D9:2F:56:85:EB:0A:15
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTj4m_wklRIyU1Gwt9kvVoXrChU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.219.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5f:0e:af:0b:60:f8:77:6c:31:ab:b4:04:66:ce:bb:40:c8:
7c:db:6d:c2:79:cc:20:db:bd:6c:5c:fe:98:fe:72:b8:39:5d:
58:de:4d:bf:cc:1c:6b:35:f1:e3:d7:db:05:f3:2c:9e:08:d1:
7c:78:b7:a3:b7:49:96:b4:16:7c:15:f9:35:89:1e:fa:cb:6f:
8d:2c:50:a8:76:29:df:d0:23:c5:2f:82:47:bc:de:0a:a5:e2:
15:99:6c:6c:db:65:e5:3a:37:85:a0:36:0e:c5:12:be:50:be:
70:b0:18:a5:15:d7:62:6e:6b:ef:0f:53:7f:4c:b9:4f:0f:53:
18:d4:bc:9b:67:51:97:a9:70:35:b3:f4:ae:1b:21:ea:56:c0:
4d:3d:4f:52:bb:13:72:26:4d:af:03:3c:91:a5:59:2f:0c:24:
b4:f6:fc:55:45:ca:cd:1f:43:73:7b:b6:d1:e6:a7:64:a0:5f:
ef:6f:a9:2c:71:8a:c7:9c:40:5f:9e:56:f2:95:c4:1a:3c:24:
cc:96:de:ce:f8:40:e5:4a:38:27:43:d1:8b:95:d2:cb:4a:96:
59:29:4f:10:30:a5:82:2c:92:51:96:75:fc:a1:aa:62:56:77:
2e:a0:53:dd:16:fb:5e:9d:64:59:64:eb:30:34:ee:4c:10:d1:
19:45:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:59 2025 by rpki-client