Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hRkfWek6x-vExSIgkwy_44n-0R8.roa
File: hRkfWek6x-vExSIgkwy_44n-0R8.roa (raw, json)
Hash identifier: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=
Subject key identifier: 85:19:1F:59:E9:3A:C7:EB:C4:C5:22:20:93:0C:BF:E3:89:FE:D1:1F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B14B92943FB97CC40EB5EC546534
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hRkfWek6x-vExSIgkwy_44n-0R8.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207515
IP address blocks: 62.72.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:4b:92:94:3f:b9:7c:c4:0e:b5:ec:54:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85191f59e93ac7ebc4c52220930cbfe389fed11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:65:19:f5:a7:ef:34:89:c4:91:b9:e8:d6:
9c:9b:ed:9e:99:2a:88:d9:a7:81:85:a7:c9:34:96:
87:8e:84:29:dc:72:e9:07:90:79:0a:67:e3:a6:e7:
f5:ce:4e:e4:79:6a:99:26:bd:d8:9b:e4:81:00:56:
ed:40:06:78:5e:78:e0:1d:05:03:f4:d2:b6:a0:ac:
8e:1e:8b:12:74:43:7b:54:86:61:39:cc:1f:4b:ba:
b0:8b:ae:18:78:15:99:db:1a:a2:77:8f:34:6b:c4:
96:ed:c8:78:6c:4c:cb:f2:f9:a4:9a:8d:f8:2c:4b:
f5:de:af:2c:4d:ec:7a:e3:54:79:20:77:52:db:dc:
8a:c2:6e:32:52:c1:0a:90:14:65:47:d8:12:1a:7d:
97:5c:31:5e:a8:30:14:95:f9:fc:19:a2:81:92:39:
22:c5:2d:81:33:4f:c6:8d:09:cb:c1:0a:70:22:71:
2d:b5:dd:99:bd:af:e4:3b:ec:a1:51:60:cc:35:32:
61:62:4d:55:05:e4:f0:b0:b0:0b:12:7d:98:6f:39:
b9:b6:41:42:e3:03:cb:90:67:af:f0:d5:31:b2:02:
4d:23:41:65:72:50:5a:f0:60:68:cc:03:61:f5:1c:
8f:cd:da:f7:c3:67:cf:9c:28:1d:8c:28:ff:b9:33:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:1F:59:E9:3A:C7:EB:C4:C5:22:20:93:0C:BF:E3:89:FE:D1:1F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hRkfWek6x-vExSIgkwy_44n-0R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7d:a2:3b:f4:59:b3:3f:da:d3:7b:cc:e8:37:05:b5:9f:27:
48:b0:aa:20:d2:04:2f:37:86:38:fc:42:31:d2:97:01:87:6c:
55:c9:d8:42:dd:7b:9a:e2:d0:38:2c:3b:1c:6c:a7:d1:49:d5:
3d:92:3e:4c:d5:c8:3f:83:8b:ce:91:a4:e5:e4:c8:d6:fe:2d:
2c:eb:bf:32:c6:bc:f6:ff:10:94:77:08:53:ae:fd:f6:94:44:
cd:f4:59:b9:c0:b4:f8:ae:7e:8e:25:d8:16:92:0b:43:9e:eb:
ed:ae:f2:a4:b7:c9:7e:c9:f0:e7:cf:b2:aa:21:7c:d1:45:b8:
63:da:3c:06:03:b0:e0:22:e3:85:ed:53:11:cd:2d:64:81:64:
1f:8f:0a:ec:d1:b0:00:ba:03:c7:03:7a:c2:d2:29:2f:bc:d3:
80:e8:6f:97:45:57:31:1e:58:b5:9d:22:10:6d:61:64:0d:80:
3e:60:2a:66:79:5b:62:68:d8:00:20:a8:2f:cf:9a:1b:73:4f:
64:84:32:94:b2:f8:41:d4:23:68:ac:5d:98:ad:93:58:cf:4f:
8c:ed:1e:5b:17:62:7a:76:fd:7a:30:ca:6f:97:80:91:11:27:
41:b4:d5:65:ab:98:6b:3f:ba:ba:63:f8:93:95:ef:a3:b5:2f:
05:e4:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:10 2025 by rpki-client