Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HuW0qHW89C6aB-L5J6QislRZOtw.roa
File: HuW0qHW89C6aB-L5J6QislRZOtw.roa (raw, json)
Hash identifier: WH0XOvGJEDESShfV8BH8Hl7DRcxQhxZrLNAxHJXRPqg=
Subject key identifier: 1E:E5:B4:A8:75:BC:F4:2E:9A:07:E2:F9:27:A4:22:B2:54:59:3A:DC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244534A76D14AB1C656BDD080B345E1F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HuW0qHW89C6aB-L5J6QislRZOtw.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:34:a7:6d:14:ab:1c:65:6b:dd:08:0b:34:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee5b4a875bcf42e9a07e2f927a422b254593adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:49:32:92:64:92:90:ab:ba:4e:7e:cc:41:
f1:74:48:db:e2:6c:69:d9:8d:2e:3e:64:d1:0e:94:
71:b4:df:96:2f:f9:fd:34:ba:21:45:ce:9d:c2:99:
35:7c:05:83:d0:b5:61:a6:5d:03:a9:dd:6f:fd:81:
52:52:e7:d1:92:5d:40:de:e8:9a:9d:d2:27:84:43:
d4:46:20:83:2e:f9:4a:e0:82:cd:92:9d:c8:c8:3d:
c7:46:ff:b7:2d:34:a4:ad:30:d3:49:25:af:48:84:
07:16:ae:d8:50:ac:21:bf:25:50:5c:33:9f:98:fe:
5a:cf:db:04:fd:28:78:b5:0c:a5:eb:c8:74:7f:26:
bb:c1:a3:cf:c1:be:0d:6a:8c:c0:a4:12:2b:ce:f4:
4e:0c:84:c9:c4:8c:d5:05:67:93:cf:dd:cd:c6:fa:
ec:61:f2:dc:07:0f:e2:da:2b:75:e4:67:0c:b8:08:
2d:b1:fb:60:09:43:89:73:96:5b:ea:98:5d:92:1a:
47:8f:3b:4d:d3:ef:28:6d:1b:33:4b:5c:67:86:e3:
7e:bc:c2:25:f9:41:07:cc:0f:12:07:b9:ea:5a:bb:
95:c4:4a:9b:8a:a8:12:e1:c8:c3:d6:cd:0d:02:ca:
fe:a1:39:eb:c1:ea:76:4e:e2:47:20:16:2d:77:ec:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:B4:A8:75:BC:F4:2E:9A:07:E2:F9:27:A4:22:B2:54:59:3A:DC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HuW0qHW89C6aB-L5J6QislRZOtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1e:b4:0f:e3:3e:fb:95:50:83:fe:b4:e3:02:ff:17:fc:75:
b4:19:66:9c:e5:54:07:02:fe:f1:13:2f:1b:ec:4b:19:57:bd:
cb:c9:d4:58:a4:02:64:56:95:58:4f:72:41:8a:2b:84:d2:49:
38:ee:f3:d7:ae:d4:10:0f:f4:c4:67:09:d6:1c:f9:bd:12:d1:
a5:5b:7c:52:4b:c0:5f:69:a5:85:09:e0:ca:54:a0:70:30:bd:
16:fd:94:12:92:79:f9:59:55:21:a7:84:0b:7d:f2:d1:99:6c:
eb:be:15:22:b9:e0:4c:fd:9e:86:53:4a:86:31:a1:aa:91:37:
91:b4:2d:88:1f:aa:28:c0:b4:77:40:05:32:26:8f:73:71:1a:
1a:c9:08:34:2b:07:63:9a:53:d5:74:c7:f4:a2:4f:71:34:82:
74:fc:e0:13:b7:aa:ce:04:97:dd:34:ef:35:c0:b8:e2:e4:f7:
7f:ae:e5:07:e5:5b:0b:a4:a4:3a:a3:e9:8d:a1:b9:fa:e4:03:
e0:48:93:bb:84:e4:f3:b8:fe:e5:76:ef:8b:9f:3e:89:ab:7a:
15:8b:84:a7:fa:23:3b:43:b6:52:a5:68:fa:3b:eb:73:93:a7:
ff:8d:a0:ee:48:ea:a0:36:14:6c:92:f6:18:82:72:86:99:30:
2b:e1:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:41 2025 by rpki-client