Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/yHRWciFFOnDT7mIADGdvOTHOJRI.roa
File: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (raw, json)
Hash identifier: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=
Subject key identifier: C8:74:56:72:21:45:3A:70:D3:EE:62:00:0C:67:6F:39:31:CE:25:12
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019428267E594F70F4529F1CE1A620BDF30F
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/yHRWciFFOnDT7mIADGdvOTHOJRI.roa
Signing time: Thu 02 Jan 2025 17:53:18 +0000
ROA not before: Thu 02 Jan 2025 17:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21267
IP address blocks: 5.45.16.0/23 maxlen: 23
5.45.18.0/24 maxlen: 24
2a01:6c8:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:7e:59:4f:70:f4:52:9f:1c:e1:a6:20:bd:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jan 2 17:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c874567221453a70d3ee62000c676f3931ce2512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:78:4c:cd:99:1a:fd:25:df:4f:70:41:96:
39:c2:e9:8e:57:fc:e2:ad:9d:bd:d0:34:ed:0b:ee:
eb:91:66:73:90:93:e1:2c:36:70:0a:c9:3a:6e:fe:
3e:1c:cd:7e:c0:d6:8e:37:e1:ee:4b:5e:0f:b8:eb:
39:6e:d4:26:c2:b9:71:8f:a4:df:ab:72:00:c6:9f:
c7:9a:1a:74:30:cc:ee:70:b8:c6:a8:3d:ec:1e:74:
16:d5:75:d7:ee:ea:e8:84:54:43:8f:ce:b5:46:25:
14:f8:26:81:86:8f:d9:e4:4a:1f:c0:69:4c:63:d5:
61:c0:1a:58:bd:d4:07:c2:02:2a:0b:a2:fb:da:1d:
5b:85:04:cb:f8:1c:ca:e6:92:c8:49:b3:bf:a1:6c:
dc:d5:74:85:d9:a8:fd:01:aa:57:58:c4:23:0b:15:
89:c8:52:4d:63:c8:08:66:bb:c4:e6:af:34:3a:0d:
96:d0:f6:e5:dc:94:6d:ad:77:24:e9:80:67:da:6a:
ff:5d:20:84:5b:f2:74:36:b5:c5:2f:4b:7a:55:fc:
dc:dc:3e:f2:bd:c0:2d:3f:2f:c1:cc:dd:55:6a:25:
dd:f1:5e:8b:fc:3a:ee:50:1a:b0:54:e1:90:20:30:
2e:b9:74:25:76:58:10:f7:c3:0d:46:e8:10:cd:7b:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:56:72:21:45:3A:70:D3:EE:62:00:0C:67:6F:39:31:CE:25:12
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/yHRWciFFOnDT7mIADGdvOTHOJRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0-5.45.18.255
IPv6:
2a01:6c8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
47:ba:51:4b:37:ee:6b:3d:6e:78:89:9a:53:d6:47:09:8f:4f:
50:89:96:60:e0:db:7f:a1:d8:31:c9:32:e7:af:33:af:0f:42:
a6:c6:bd:23:55:e3:81:9b:d0:38:b1:79:cf:ba:ec:43:08:d6:
2d:8d:61:44:8f:b4:1a:e1:76:df:3b:8e:f6:ee:e3:cc:1f:20:
68:75:eb:68:a0:35:b6:fb:1b:81:7f:50:d5:da:04:cf:3a:bd:
11:3f:a9:22:48:8f:3b:6d:86:9a:dd:3b:ee:95:a4:6c:6b:97:
6b:6f:22:52:9f:de:48:d5:c2:50:e3:91:c0:7e:e6:ce:bd:6b:
a7:00:88:65:7a:10:b8:df:73:44:94:08:1e:cb:f6:15:59:60:
a1:19:1e:ad:fd:ec:2b:f8:28:fe:21:00:75:3d:e9:ca:8e:4b:
04:4c:fe:76:04:25:9f:47:3a:48:f5:ff:45:9f:a3:8e:ed:09:
53:f9:a6:48:58:67:eb:3d:8b:05:52:33:cd:9b:23:b8:22:de:
b4:bc:52:7f:c6:a6:f5:3b:f5:cd:ff:41:a5:d1:30:d1:6f:5b:
9a:22:9f:c6:d7:c8:37:6f:d3:d7:33:73:91:3d:32:6e:78:29:
25:bb:4d:88:87:ee:92:cd:21:26:6d:91:60:27:d4:61:cf:cc:
53:44:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:37 2025 by rpki-client