Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aHXXEqt-AbUb8jIV_-naJWkhSoA.roa
File: aHXXEqt-AbUb8jIV_-naJWkhSoA.roa (raw, json)
Hash identifier: SglCbcbZkhswc2Ob2jX638vZ0qI/O3D5mBe4sFwCShg=
Subject key identifier: 68:75:D7:12:AB:7E:01:B5:1B:F2:32:15:FF:E9:DA:25:69:21:4A:80
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244524E3F2D8ADE34E9E8A750D75492E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aHXXEqt-AbUb8jIV_-naJWkhSoA.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 217.114.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:24:e3:f2:d8:ad:e3:4e:9e:8a:75:0d:75:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6875d712ab7e01b51bf23215ffe9da2569214a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:a3:2f:1e:2b:a4:5e:bc:e8:82:af:0d:fd:
0a:50:2d:17:3d:3e:0a:29:a3:5b:5b:18:9e:16:38:
6d:f8:e0:02:77:53:e2:f7:7c:d2:ee:8f:53:07:30:
7b:11:52:ea:69:bf:f4:41:79:40:f3:c4:0b:91:95:
86:b3:31:4a:26:d1:67:1d:f4:3a:34:75:35:e8:9a:
69:2f:44:3b:fb:d2:61:bd:d0:dc:ef:4d:44:8f:63:
a8:ab:6b:8d:4f:f3:f2:14:e6:6b:c8:47:7f:86:e4:
6a:2b:a2:97:6a:74:68:1e:fa:c2:72:28:30:a1:ee:
68:21:7e:70:73:a2:66:02:48:f6:ef:7a:d4:55:f4:
41:52:93:c8:2d:51:fa:32:83:5b:d1:13:eb:f3:31:
d9:01:80:f6:19:0c:01:3f:88:0e:30:ff:24:5f:42:
82:7c:26:fc:3e:1c:6f:d6:7d:2a:2c:c4:e3:a7:98:
b3:6c:c5:a7:d3:f0:cc:fc:8c:d5:e7:87:42:c3:a9:
1f:1f:ae:c2:9c:e5:c2:f6:61:db:1e:dc:e2:18:e5:
50:6b:8d:ce:0f:9e:a1:c0:0b:5e:da:6f:79:0c:67:
72:3e:13:64:83:40:a9:bc:87:fa:4a:7f:5d:35:95:
11:eb:ba:17:e5:14:9d:5b:97:1d:3e:69:61:21:e8:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:D7:12:AB:7E:01:B5:1B:F2:32:15:FF:E9:DA:25:69:21:4A:80
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aHXXEqt-AbUb8jIV_-naJWkhSoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8e:47:c4:0b:42:f9:15:3c:86:04:7b:6c:99:60:9e:97:ac:
7e:43:77:74:17:02:58:a5:b9:01:8f:a1:0e:e5:94:d8:d5:71:
3d:39:f9:24:f4:55:f8:69:a1:b0:0a:49:57:fa:47:16:ad:6c:
14:71:05:21:f9:71:70:7c:89:3b:d1:a3:46:b8:4e:d7:bf:ed:
d8:42:db:5a:06:d2:f8:69:33:10:8a:96:23:a4:76:a7:05:0c:
02:2a:09:6a:58:98:1c:dd:c2:73:ae:d7:61:27:b7:d5:81:c6:
e6:e1:be:30:7b:44:fa:f9:d0:d4:a2:ab:64:e6:88:81:04:97:
c6:d3:de:8e:98:99:1e:cf:e6:19:6a:b0:21:b6:55:aa:1b:2e:
99:31:be:74:44:f5:10:d5:91:ba:f3:5d:7d:88:11:58:78:cb:
7f:b8:3a:c2:f3:80:0b:22:fb:c1:be:78:78:b0:68:05:83:c0:
8f:13:2d:5e:2f:03:51:4b:57:15:c3:72:c2:a5:3c:ea:b8:3a:
00:29:1f:cf:f4:02:8f:d5:84:1f:64:4b:16:00:79:4f:ac:ba:
e4:0d:0b:67:5e:4c:b4:af:c9:90:aa:71:ad:91:6e:8a:89:e9:
d0:83:63:e4:15:af:79:a1:fc:31:a4:9e:7a:1d:d2:73:c7:6c:
f5:9c:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:20 2025 by rpki-client