Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa
File: h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa (raw, json)
Hash identifier: 6G/ihHpZFbWryvRuqI72FYSOZMMwREr3wb5GAXO7F4Q=
Subject key identifier: 87:C8:93:CF:C0:1C:3C:DA:25:B8:D7:9A:79:6D:57:79:9D:99:35:35
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: 019425FD7B736FD40DB428CB0205885FB5D1
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 158.233.228.0/24 maxlen: 24
158.233.229.0/24 maxlen: 24
158.233.242.0/24 maxlen: 24
158.233.243.0/24 maxlen: 24
158.233.244.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.246.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
158.233.248.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.250.0/24 maxlen: 24
158.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7b:73:6f:d4:0d:b4:28:cb:02:05:88:5f:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87c893cfc01c3cda25b8d79a796d57799d993535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:74:dd:42:a0:bb:07:3b:36:3d:b7:bb:18:
85:6a:5e:eb:c5:e4:e8:8f:d5:5a:e2:d9:0d:f0:72:
e8:18:d1:61:2e:50:89:78:5b:89:6b:68:99:ff:44:
dd:d9:b5:83:e3:a4:e6:d6:9b:43:47:bd:b4:2d:81:
59:93:30:d9:f2:10:aa:a5:1f:67:90:aa:59:25:b1:
52:f1:39:c3:e7:d0:a7:fa:3b:b3:96:4b:71:86:45:
82:1f:63:e3:7e:e4:5f:ae:52:f6:98:db:02:ee:fa:
5d:93:f5:c5:9f:87:3e:d2:75:e2:8c:3d:25:cf:16:
84:e0:01:e1:13:9a:9c:cd:fa:0a:34:83:65:78:c6:
b6:24:3c:4c:79:0f:40:3a:4b:82:bd:fd:fb:ef:57:
46:6c:2b:2a:ef:e8:47:3c:c5:43:1b:04:3f:2e:ee:
cb:0c:48:97:81:7c:88:e2:9e:4b:e0:9d:28:a7:b1:
20:15:d2:ae:7b:03:05:2f:0a:f4:16:79:43:63:d0:
ea:b3:64:79:ba:fc:1c:a5:66:9f:0f:38:21:7c:22:
52:fd:e3:a9:d9:11:05:d1:6a:5e:26:ce:34:1b:dd:
f0:f2:78:93:a6:4d:c5:8a:e2:89:fb:12:1a:90:bb:
05:d6:dc:38:0e:97:a2:78:2e:75:8e:24:c7:73:aa:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:93:CF:C0:1C:3C:DA:25:B8:D7:9A:79:6D:57:79:9D:99:35:35
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.228.0/23
158.233.242.0-158.233.251.255
Signature Algorithm: sha256WithRSAEncryption
ab:69:bb:c7:2e:48:29:44:ea:2c:bc:a4:27:1e:b0:64:3d:87:
72:97:ed:fd:53:7d:f0:c7:46:ed:82:7f:7d:eb:bf:94:45:53:
f4:ea:2c:62:c2:1c:bb:56:57:06:cc:ca:6e:58:e8:ee:ee:91:
3c:c7:72:ea:f5:49:e9:b8:5e:ac:53:18:b6:0f:79:6d:1e:d6:
8d:91:c4:77:2a:30:c2:43:44:f9:8b:51:ed:e9:11:ef:a1:58:
c0:5c:4c:9f:16:d6:b4:ae:ed:1b:3f:95:23:e4:3d:eb:3f:75:
65:66:47:38:e5:2f:2f:8e:43:b0:65:b4:f2:46:93:bc:de:a8:
e9:0d:8b:f2:14:a7:73:a3:b7:7b:2d:b3:51:14:72:93:44:fb:
30:a0:26:b1:31:c5:47:20:58:12:bc:c7:ea:db:f1:70:a8:dc:
b6:96:6d:7a:97:9c:c7:19:a5:9c:a9:3e:31:6e:d1:0f:fd:b4:
c3:8f:bd:62:6e:e1:b7:6d:c8:9e:c2:ae:f7:69:38:40:a2:1d:
06:a8:ec:e6:e7:ed:5b:78:db:74:49:80:90:e3:2e:b0:f0:e3:
91:90:17:1c:97:cb:a0:84:9f:c4:39:db:1e:9a:2d:7d:4b:1f:
4a:32:61:ef:28:60:4a:79:c0:ff:6c:79:8d:af:45:04:d6:dd:
0d:77:a3:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:32:53 2025 by rpki-client