Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hkWJdgCjXB76rSfHMiQC-rYm2Sw.roa
File: hkWJdgCjXB76rSfHMiQC-rYm2Sw.roa (raw, json)
Hash identifier: 6OgLvMLjY872yAbFPdnh3gbIoEMnOy6JGCveErTz8Lw=
Subject key identifier: 86:45:89:76:00:A3:5C:1E:FA:AD:27:C7:32:24:02:FA:B6:26:D9:2C
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0194CAC948EF19DCC6767E0D4DC02349C0AA
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hkWJdgCjXB76rSfHMiQC-rYm2Sw.roa
Signing time: Mon 03 Feb 2025 07:49:36 +0000
ROA not before: Mon 03 Feb 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47440
IP address blocks: 87.247.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:c9:48:ef:19:dc:c6:76:7e:0d:4d:c0:23:49:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 3 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8645897600a35c1efaad27c7322402fab626d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:95:7b:92:b1:8b:a6:96:29:01:04:82:34:
e6:e8:0c:c9:34:49:01:4b:3c:1f:16:82:aa:b5:ee:
23:e9:d9:0b:e8:8b:a1:5f:95:c9:3e:09:39:df:c1:
54:3d:5a:82:5a:e6:b8:d6:34:53:23:8f:48:d3:01:
a3:44:57:63:45:84:cf:f9:70:5e:f8:26:f5:a6:19:
a7:9c:93:9f:7f:9d:06:3a:17:c6:a0:d0:ce:03:32:
76:46:f0:ba:10:d4:d1:54:9d:2f:9f:84:af:a0:ac:
7e:c5:9e:35:87:d6:40:bf:0a:0f:30:82:64:cf:36:
f5:21:6c:8b:c0:c1:23:51:cb:1e:1b:40:e4:30:e7:
32:0e:6a:44:14:4c:7c:bf:db:60:27:06:37:a9:5f:
3f:3a:21:89:a4:92:42:bc:aa:96:95:71:00:98:ac:
c1:7c:e2:06:09:55:78:a1:de:e9:e9:eb:6c:dc:69:
5f:08:a0:1b:d9:21:94:f0:57:77:aa:e7:88:6e:89:
c6:f9:c5:68:64:9c:16:5e:fe:22:a3:f8:78:6a:ce:
b4:f3:3b:63:a7:49:9a:d9:b3:7f:09:c2:54:01:5a:
a0:d3:67:77:3d:a9:d0:1e:9f:d2:38:19:58:43:45:
c4:3e:e8:43:4e:e9:1f:b5:92:f0:86:10:7a:0c:19:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:89:76:00:A3:5C:1E:FA:AD:27:C7:32:24:02:FA:B6:26:D9:2C
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hkWJdgCjXB76rSfHMiQC-rYm2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6d:c5:c7:ea:af:1e:13:a6:e0:c2:63:1e:5e:e3:be:eb:cf:
0e:e5:dd:d3:b1:19:3c:2c:32:e6:1b:cb:c1:ff:c9:97:e7:c2:
96:c4:16:fb:6c:f1:b3:86:76:1f:c7:42:53:39:3f:da:95:33:
e7:94:ac:36:90:c2:9c:9f:d2:82:91:56:69:c2:4a:df:1e:5a:
58:0c:6e:86:ac:63:b0:e9:b8:72:6f:0f:c2:71:a6:b5:f9:0d:
51:63:93:bc:78:97:96:3a:f5:60:f5:2f:fe:5a:47:5c:da:db:
56:ef:27:99:fe:d2:16:03:dd:28:b3:eb:87:50:ca:93:1d:ce:
bd:a5:3d:ca:4c:8a:03:d7:59:fd:1c:b8:73:1d:21:29:7b:e7:
fa:ea:4b:6a:40:28:e8:b2:ce:92:e1:e6:54:fd:2c:9a:1a:7b:
5a:4d:27:f4:12:c9:7f:0b:04:cd:e7:52:76:9c:0e:1f:0e:98:
11:98:31:b1:db:22:d4:77:f8:c8:82:5c:34:9f:ae:a7:be:5b:
c7:93:52:0d:3b:51:48:7e:49:45:11:e2:76:5a:92:61:93:46:
d7:f2:db:f5:e8:6c:5d:94:3a:1a:75:0a:c0:bf:c9:5e:d6:75:
ca:49:38:8c:69:09:3b:66:ea:76:46:73:82:29:78:5b:61:ea:
b7:fc:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:15 2025 by rpki-client