Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hrNAsHvAiF3wM9SA462bg8ZfLa0.roa
File: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (raw, json)
Hash identifier: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=
Subject key identifier: 86:B3:40:B0:7B:C0:88:5D:F0:33:D4:80:E3:AD:9B:83:C6:5F:2D:AD
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01973F407403A716EADE32DB5833B992FA65
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hrNAsHvAiF3wM9SA462bg8ZfLa0.roa
Signing time: Thu 05 Jun 2025 08:41:18 +0000
ROA not before: Thu 05 Jun 2025 08:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206077
IP address blocks: 84.236.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:40:74:03:a7:16:ea:de:32:db:58:33:b9:92:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jun 5 08:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86b340b07bc0885df033d480e3ad9b83c65f2dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:57:53:0a:d4:99:b5:8b:e2:6e:f7:51:05:
f1:8a:03:70:5b:62:7d:bd:24:35:a1:77:f9:5f:e5:
a9:b7:c3:a1:8f:8f:8b:03:a8:99:22:db:54:85:ee:
fc:5a:14:60:d8:e7:e3:42:6c:8b:f4:29:51:46:c5:
76:ef:20:69:d0:f0:23:7c:67:0e:f6:19:c5:c6:29:
6a:9c:c2:e6:53:f2:23:72:5f:0c:d0:8b:d2:b5:2d:
92:35:04:56:2b:23:d8:d4:c0:70:0b:6e:ab:4e:48:
09:9e:38:31:20:01:8b:97:d4:9f:b4:19:29:1d:c9:
0b:d1:24:4b:2f:b1:bb:a1:c4:d7:ca:c3:9f:4e:4e:
18:b8:65:f6:bf:bb:eb:ff:9d:be:04:4a:a1:98:0b:
85:aa:43:c3:25:e1:d6:48:c3:df:69:80:18:7f:09:
2b:0f:b8:52:57:84:30:9a:0c:78:b4:1a:f2:64:e3:
d6:92:e8:47:d6:20:01:ab:05:2a:0f:4b:b9:9a:30:
15:20:06:6f:d8:f0:a2:c8:7a:4a:a1:e0:fd:b8:2c:
c4:49:85:f8:38:f2:96:05:24:96:2f:c7:ee:25:e6:
3d:34:dc:be:cc:75:90:c5:76:7f:dc:3e:28:bf:cc:
28:00:6c:a8:3a:fc:81:9a:19:85:1d:31:d3:1b:17:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B3:40:B0:7B:C0:88:5D:F0:33:D4:80:E3:AD:9B:83:C6:5F:2D:AD
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hrNAsHvAiF3wM9SA462bg8ZfLa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.245.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d0:7e:bd:a1:35:7f:fc:54:54:43:4a:a4:9d:9a:00:de:af:
98:aa:86:3d:42:3d:87:96:75:fd:5f:f1:09:f7:8b:86:6f:67:
47:20:11:e0:2b:98:8d:89:e8:3e:b5:4e:48:33:0b:ec:cf:03:
0a:b7:85:d0:ac:28:86:63:70:67:e6:a0:09:8b:e9:a4:68:53:
50:21:97:83:58:26:08:d1:01:3a:1b:42:46:98:82:2a:bc:6c:
72:e3:b0:52:8b:27:7a:2d:4c:4e:14:7c:fa:b1:7d:2f:38:4f:
bb:b9:75:38:f5:f7:ca:fa:c1:ed:94:7b:4b:ef:05:08:ee:33:
3a:03:04:fb:2b:ba:30:fd:4f:4d:4b:a3:d8:62:51:21:17:a2:
10:39:1c:20:b3:e0:e8:22:54:90:7c:0f:9c:6d:7a:81:46:1e:
a4:27:31:91:af:73:44:d0:99:51:85:b1:a3:5c:d3:58:9a:b6:
78:49:5f:c4:54:60:82:0b:39:fd:c8:20:26:1c:d0:b8:7e:39:
8e:1c:24:9f:f8:fd:ab:2e:98:38:ad:f8:a7:96:14:af:b7:65:
31:96:b7:af:b3:df:ab:28:10:a5:c0:a4:10:8e:a9:99:27:ce:
9e:e4:93:64:44:df:2d:15:ea:14:9f:ad:f7:f5:8d:b6:8c:87:
a1:5b:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:15 2025 by rpki-client