Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa
File: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (raw, json)
Hash identifier: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=
Subject key identifier: 87:FE:D9:7B:23:74:08:97:79:A5:5D:E8:78:FA:0B:32:77:C2:7E:FE
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019425FC8E1FDDC57A5DFCFE42D42EBEB369
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa
Signing time: Thu 02 Jan 2025 07:48:15 +0000
ROA not before: Thu 02 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202316
IP address blocks: 45.128.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8e:1f:dd:c5:7a:5d:fc:fe:42:d4:2e:be:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jan 2 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87fed97b2374089779a55de878fa0b3277c27efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:18:b6:a9:17:9c:b4:7a:3d:cd:5d:44:08:
af:23:54:2c:86:11:1f:11:de:8e:f2:3a:26:f6:3b:
b0:4c:8c:a0:7f:a2:1f:ae:9e:1a:f8:93:24:16:91:
ec:60:1c:b3:1e:77:f2:02:e4:79:2e:07:9b:50:d2:
e0:2f:5b:9b:66:13:91:88:ff:98:59:41:92:77:4e:
e4:30:2e:7f:95:ec:68:d4:be:21:31:90:86:81:b2:
f0:ee:36:99:ba:94:c3:b8:e5:b4:2f:5d:41:d8:d4:
b3:f9:92:34:25:8f:58:20:49:69:ee:8c:97:25:60:
37:f6:69:22:af:7d:52:18:6b:a4:a5:17:84:69:e7:
cd:dd:1c:34:51:7d:7a:d8:da:39:26:b5:25:15:61:
ad:1f:dc:3e:34:17:38:bf:c7:eb:90:9e:2e:bf:f4:
50:80:2f:09:1c:6e:64:77:b9:be:c9:4a:5a:b9:1d:
62:39:91:ba:84:30:62:e7:96:84:4a:34:66:f2:01:
22:f2:18:5e:9f:8e:0c:b3:2d:7b:e3:a6:49:a7:48:
62:dc:b7:00:27:c7:27:6f:1d:b1:5c:3f:05:ab:8b:
1f:6c:1d:68:c8:45:30:d6:c0:9a:0d:e9:3a:f3:e7:
6c:40:c2:b3:ff:ec:57:84:34:e8:64:bc:3c:cc:56:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:D9:7B:23:74:08:97:79:A5:5D:E8:78:FA:0B:32:77:C2:7E:FE
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
11:25:76:bc:5e:d6:bd:c4:7b:2d:54:6f:fc:f6:b8:ad:5a:eb:
a7:52:4a:20:16:6f:0a:60:a7:80:6c:bc:f9:fc:7c:e1:99:1b:
12:34:e5:70:4d:7e:64:f9:ae:77:97:1f:32:76:0e:2d:74:30:
43:81:78:46:b0:07:e1:1b:07:e4:de:95:f7:2f:be:f8:62:dd:
11:c6:a6:86:9a:e4:2d:18:b0:34:72:e4:1c:56:8f:e0:30:2c:
e4:51:cf:c3:47:d3:bd:14:6e:1d:ee:e6:90:7b:0d:ad:97:c9:
af:00:bc:92:58:ed:18:d9:43:c8:1c:57:24:54:37:f6:26:ef:
55:1e:63:0e:c3:9d:cf:34:8f:ae:2c:ec:d2:2c:99:db:2e:48:
85:df:8b:77:49:d8:0c:e9:3f:04:ed:3a:7b:bc:91:97:e0:3a:
2c:85:7f:51:d0:79:15:76:cf:c3:1d:a5:bf:61:6c:30:6d:c1:
49:85:01:68:6a:9f:07:1a:9e:00:73:84:97:c9:27:80:29:bd:
c9:02:71:ed:81:81:e0:26:ae:3c:2a:67:91:9c:45:f8:f6:0e:
12:86:f2:6e:dd:7e:6b:19:92:8e:51:a2:18:cc:0f:28:76:9a:
6c:d1:33:b8:cf:03:fb:b5:94:4f:fa:59:d6:85:2a:30:2a:c9:
90:a1:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:16 2025 by rpki-client