Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa
File: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (raw, json)
Hash identifier: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=
Subject key identifier: 87:31:39:2E:F7:06:D6:19:7E:FB:AC:01:87:5A:23:43:BB:5F:21:81
Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial: 01942067DED8E23408FC6646CCDA82773430
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 37.44.215.0/24 maxlen: 24
176.116.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:de:d8:e2:34:08:fc:66:46:cc:da:82:77:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8731392ef706d6197efbac01875a2343bb5f2181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:fd:d7:6f:eb:bf:07:c2:de:2f:dc:6e:cb:
39:4e:b2:1c:7f:1e:29:f8:3b:25:57:19:23:94:1a:
27:18:7f:6c:9c:64:36:0b:1e:2a:72:2b:6e:31:a2:
43:f6:d3:32:8d:12:05:cb:96:22:df:bc:2f:9d:f7:
c1:7d:7d:df:d9:4f:b7:87:ac:bd:e8:0f:e8:e6:bd:
80:5e:2c:78:fb:90:d3:a5:f4:ae:33:38:52:09:20:
12:8a:93:8f:8a:6c:13:35:05:5c:02:63:0b:f2:3e:
1d:4e:9c:0b:9a:53:ba:f0:32:33:ef:e6:0d:da:67:
a5:13:2e:61:54:fd:57:39:fc:e5:82:4b:6f:1c:6a:
aa:d1:4f:e6:54:a8:62:6e:cc:78:da:37:5a:ea:87:
25:bb:79:58:f1:19:f1:04:56:c4:d2:53:0b:8c:33:
c3:3d:b5:ab:3f:ff:92:62:87:5b:30:12:b8:2b:45:
50:95:82:f3:c3:f4:00:ad:fe:28:80:0c:66:d6:2a:
92:eb:35:77:f5:ee:5e:c5:82:b5:91:b9:11:4b:37:
7a:97:01:60:ae:a1:7f:f6:45:7c:ba:72:84:91:41:
83:23:3a:98:fb:63:da:e6:0b:a0:d1:3c:b5:9f:f2:
8c:0c:37:37:91:44:e1:37:1a:d4:87:73:6a:f7:ad:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:39:2E:F7:06:D6:19:7E:FB:AC:01:87:5A:23:43:BB:5F:21:81
X509v3 Authority Key Identifier:
keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.215.0/24
176.116.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:1d:f1:dd:e7:f5:7a:1e:af:5d:71:15:5f:cd:72:45:a7:
84:d6:ac:90:30:f4:d6:53:90:75:c9:c0:f8:d1:3d:c1:e2:8d:
20:1d:11:73:c0:c6:3a:a8:17:4c:0a:53:22:72:2e:10:7b:0c:
65:da:c0:4a:78:eb:d6:07:73:9b:9e:67:6f:c2:ec:62:03:db:
c9:0e:5c:37:ff:bc:8d:72:08:6d:83:b5:27:10:d3:db:83:29:
a2:6a:7d:ef:51:9b:8d:cf:68:7a:5b:84:8b:c9:7b:63:1d:16:
7b:88:cb:c6:5c:d1:62:91:0f:d1:1f:14:ba:92:72:e8:dc:f1:
e0:75:5b:01:b0:19:b4:bf:89:3e:a3:95:8d:7e:1c:b7:0f:0d:
8a:8c:ec:44:c8:80:ae:47:2c:ce:29:4f:0d:34:9c:3f:44:67:
85:b1:47:45:28:94:35:53:62:cd:72:4f:fe:2d:c9:b1:8a:23:
bd:65:04:30:b0:23:16:7b:6e:a5:65:98:1c:80:be:60:99:eb:
7e:47:d3:b4:91:a9:73:75:12:9d:61:e3:75:b3:d5:5f:e2:c2:
dd:3b:fd:f9:40:27:3f:88:67:13:c1:64:03:da:ca:d7:ee:70:
95:23:f2:98:66:2a:35:6f:09:12:f7:27:5b:a3:5f:8f:25:a1:
2e:90:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:08:16 2025 by rpki-client