Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/h6hIuizM5NfGODakvbCHb0dbPy8.roa
File: h6hIuizM5NfGODakvbCHb0dbPy8.roa (raw, json)
Hash identifier: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=
Subject key identifier: 87:A8:48:BA:2C:CC:E4:D7:C6:38:36:A4:BD:B0:87:6F:47:5B:3F:2F
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9E00D51B0D44DDC68B295DECEC12C
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/h6hIuizM5NfGODakvbCHb0dbPy8.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208341
IP address blocks: 45.143.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e0:0d:51:b0:d4:4d:dc:68:b2:95:de:ce:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a848ba2ccce4d7c63836a4bdb0876f475b3f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:74:ff:cc:d4:69:87:02:b6:9d:64:bf:da:
b7:1b:ed:4a:56:7d:bd:a2:5f:4b:da:dd:35:0b:36:
77:04:f5:a8:b3:6b:20:34:9b:6d:22:3d:23:7f:7a:
52:40:9b:b8:94:01:5e:b2:b0:f0:6e:df:d8:e5:2c:
fe:4c:d6:1a:bf:8e:bf:ae:53:e9:eb:82:c5:9d:af:
35:21:2e:74:7b:ea:90:7b:da:9a:08:3d:6a:00:d8:
2b:3c:d7:99:8b:4d:10:94:db:15:73:36:45:97:a8:
e0:23:a0:c1:49:26:4d:ba:b2:9a:b1:c8:05:53:4c:
09:48:91:67:4a:ce:af:c1:1e:fe:5f:70:70:e7:70:
ff:91:75:ac:c9:81:54:fd:42:21:b8:ad:18:13:62:
b7:6b:eb:c7:c1:d7:ae:f8:93:79:51:37:62:59:9c:
f5:99:df:3f:79:14:b1:03:28:7a:65:a1:c0:ec:18:
fc:10:52:e6:26:40:3e:c6:4f:f3:51:c4:8c:bc:58:
c3:76:42:e5:65:c9:56:9f:ce:43:76:6a:ba:73:67:
b1:66:d1:e1:fc:98:3a:3d:65:e2:bc:c0:f5:3f:b2:
19:f8:5a:b7:29:0c:26:22:e0:5a:8e:87:b0:cf:70:
20:c8:ae:b5:33:b2:cc:d2:4d:da:42:f1:f5:14:e1:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:48:BA:2C:CC:E4:D7:C6:38:36:A4:BD:B0:87:6F:47:5B:3F:2F
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/h6hIuizM5NfGODakvbCHb0dbPy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7d:f9:82:1f:a1:11:c1:2a:02:cf:c3:24:4c:c5:37:2d:18:
4d:60:59:24:26:67:1f:13:8f:0c:65:a4:b6:f5:dc:9e:23:cc:
26:19:a2:77:ae:b7:68:8d:41:30:c1:c7:07:ae:29:2f:c4:1e:
44:07:c3:57:5a:08:38:90:46:ac:c4:73:61:d3:11:5f:d8:a0:
02:a1:c0:33:06:b3:5d:e6:86:5d:8e:45:68:24:bd:29:19:e8:
86:49:fe:bf:30:df:38:1c:35:5f:02:55:5f:78:19:28:f7:25:
a0:a8:39:dd:97:2f:db:74:03:fa:84:c8:d1:0d:5d:18:b0:a3:
00:cb:8b:1a:36:dc:88:4b:16:3e:cb:b9:36:36:5e:5d:49:9b:
ef:02:1a:dc:f8:f1:2e:d1:ec:fc:b2:6e:bc:04:65:cf:ca:1f:
cf:06:b5:6e:9d:72:f7:b8:80:de:2e:30:45:af:8e:53:68:e7:
87:8f:6b:ad:f1:25:5d:22:20:e5:06:50:08:68:78:46:ca:b6:
14:36:ff:36:68:27:b8:d8:7f:10:de:1a:ce:dc:9a:a6:2b:db:
35:61:0b:75:a2:83:73:91:2e:ff:ec:6c:1b:c3:cb:84:86:8f:
4e:71:b7:c9:d7:45:32:ea:17:ed:b0:bb:a5:20:ee:52:f9:1b:
9d:e4:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:23 2025 by rpki-client