Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/hEhkAm4wvhKI8lm4TouQ913BI64.roa
File: hEhkAm4wvhKI8lm4TouQ913BI64.roa (raw, json)
Hash identifier: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=
Subject key identifier: 84:48:64:02:6E:30:BE:12:88:F2:59:B8:4E:8B:90:F7:5D:C1:23:AE
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019423D6F6040F0342373847360C8397FD10
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/hEhkAm4wvhKI8lm4TouQ913BI64.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22364
IP address blocks: 87.238.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f6:04:0f:03:42:37:38:47:36:0c:83:97:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844864026e30be1288f259b84e8b90f75dc123ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ea:de:78:36:b2:2c:7f:57:be:2d:f4:a4:47:
c8:30:00:c7:7f:52:39:92:2f:53:9d:81:c9:66:c3:
09:30:01:ef:7f:ec:7c:67:3b:c0:85:98:e4:cb:34:
34:2a:c2:c8:40:33:37:3d:04:a3:ff:1e:a7:87:66:
c0:d1:ea:f5:d1:c7:3a:5d:a7:ac:37:8c:c8:20:4a:
31:06:ed:5a:ce:45:39:69:46:cb:86:70:25:0a:6c:
b6:58:2f:0f:4b:8d:81:cd:99:2f:e9:4d:3b:f2:3a:
30:ef:01:c8:2c:7b:32:a5:5c:f8:28:aa:50:d2:0b:
1d:e6:45:9d:84:2f:5f:aa:71:81:04:2f:c1:cb:b5:
0c:4b:a6:d2:d1:4c:68:59:48:66:af:dc:d2:25:f8:
b4:53:7b:03:1e:13:0b:7f:a4:ad:82:c5:f0:f3:d9:
bf:26:8f:7e:e9:6a:60:a1:42:b7:4e:2c:43:72:e4:
a5:11:19:83:8f:7f:48:1f:ee:88:3c:6e:8f:f5:dc:
f8:8b:e1:bd:54:d8:db:b8:34:3b:14:f0:1a:4d:94:
23:69:e5:a4:1e:6b:dc:c8:ef:02:d9:e9:2f:07:a2:
f5:6f:c3:34:d2:f7:c4:8e:1c:36:be:f5:f5:53:4c:
db:9f:1f:62:f4:0c:52:2f:fe:9e:bb:cf:ca:7e:c4:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:64:02:6E:30:BE:12:88:F2:59:B8:4E:8B:90:F7:5D:C1:23:AE
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/hEhkAm4wvhKI8lm4TouQ913BI64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.243.0/24
Signature Algorithm: sha256WithRSAEncryption
64:21:71:ef:e3:8f:8c:16:98:b2:65:e2:b8:3f:99:9d:44:a5:
f4:c5:7b:8d:6b:25:bb:ce:06:fb:6d:e4:32:c2:6c:d2:dc:b3:
d8:30:42:88:c0:1f:dd:83:63:ed:72:c7:f8:34:01:05:1b:43:
6d:76:97:6e:bd:46:4c:4c:74:f4:ee:d9:dd:84:18:43:46:e9:
ac:df:db:64:5c:e4:82:a7:2d:67:06:14:4a:78:cc:53:1d:5c:
26:e8:5e:f1:d0:34:0e:a0:3b:d0:70:b0:7e:e5:63:53:68:d8:
12:9e:4f:ec:fb:a6:b4:1f:a3:79:61:8d:dd:1f:33:c8:1a:b1:
ce:4e:72:15:fa:27:c2:3f:00:28:25:b7:3d:de:7d:77:63:18:
d3:61:48:16:4f:1b:2c:24:77:3f:61:f8:73:97:41:7b:80:a1:
b2:8c:e0:ed:df:30:7f:40:4b:3f:ad:04:cb:21:5d:4a:0b:5d:
43:32:c1:e6:1c:66:fc:00:d3:97:64:ae:23:d5:78:6a:94:e3:
94:15:0e:b6:8a:a9:67:b1:b2:d2:e6:7d:a3:ac:f5:fc:50:e3:
27:59:da:87:8a:aa:a7:8a:cc:01:18:ba:6e:f4:ae:80:3e:ed:
65:5c:d0:5a:a8:50:a8:3c:91:e2:40:51:8f:53:f0:fc:52:18:
08:d9:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:48 2025 by rpki-client