Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hORqWtg_cEVsGxwxAc-al_DHzHw.roa
File: hORqWtg_cEVsGxwxAc-al_DHzHw.roa (raw, json)
Hash identifier: H5jp3MuIF5u/q480AP3wVZgCLTZX102yOLFKbu9bvHg=
Subject key identifier: 84:E4:6A:5A:D8:3F:70:45:6C:1B:1C:31:01:CF:9A:97:F0:C7:CC:7C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA99F5AB446E95E4F7279A1FC48584
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hORqWtg_cEVsGxwxAc-al_DHzHw.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57489
IP address blocks: 141.101.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:f5:ab:44:6e:95:e4:f7:27:9a:1f:c4:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e46a5ad83f70456c1b1c3101cf9a97f0c7cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:cb:eb:34:e3:27:d7:1a:c9:c0:d1:ea:b8:
72:6e:08:32:08:cc:58:7d:16:b4:99:9f:e7:f0:2b:
85:76:86:94:85:5b:3a:8f:fd:eb:77:5a:49:90:06:
16:5d:23:a3:64:33:35:9f:16:1c:fa:e6:a7:ae:14:
bd:72:bb:9d:14:a3:02:f9:d8:a3:76:b3:ee:7a:5a:
b0:6c:63:0c:80:01:a4:ff:26:e1:79:37:cb:48:82:
0e:cf:a5:0d:db:ce:f4:7e:50:78:1e:26:a3:c7:38:
af:6a:ee:0e:eb:02:ee:1c:2b:a0:52:d2:b0:7b:66:
a9:73:e9:da:32:15:34:ec:3a:e3:9d:da:4b:52:74:
0b:bf:72:1d:b7:be:94:3c:d1:f5:8e:48:75:d1:9c:
ea:20:a5:d1:da:ce:35:88:6d:92:fb:b5:48:fe:97:
c1:22:5a:56:09:3f:b1:3c:4e:74:74:89:fb:5a:4d:
78:47:7d:84:c3:a5:00:91:29:23:2f:09:7e:9b:99:
22:d3:2d:4c:14:ce:8d:88:07:a3:70:3c:90:23:b0:
f8:62:45:b6:3d:21:8a:a6:6d:62:62:12:91:7a:99:
5d:8f:9e:9f:47:96:d2:f4:fe:2c:19:64:91:b8:1d:
fc:52:82:1c:74:bf:08:06:3c:81:81:8b:07:21:5a:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:6A:5A:D8:3F:70:45:6C:1B:1C:31:01:CF:9A:97:F0:C7:CC:7C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hORqWtg_cEVsGxwxAc-al_DHzHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.236.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ae:af:91:45:a3:8c:6a:fc:af:4f:25:60:7c:86:bb:34:00:
78:55:93:ff:c7:9a:84:28:71:8b:db:e2:12:f3:c2:23:98:15:
e9:0f:99:86:75:b6:b4:df:c1:01:5c:10:9c:03:9d:82:a5:88:
ae:69:48:10:4c:70:4a:68:b6:55:a0:30:a1:f0:ac:d1:b4:7c:
31:b6:88:27:ef:37:28:39:11:3b:10:26:eb:e6:a5:d3:7a:d9:
40:93:ff:3f:7a:6e:c1:fc:6c:40:22:5f:7a:e1:77:11:ff:92:
f2:57:83:fe:c0:32:96:e5:70:29:d4:6b:71:b4:43:43:4a:72:
41:3b:ec:31:de:d0:4c:ad:c5:06:65:bf:8d:52:4a:bb:d8:07:
ec:c3:d6:64:52:40:d7:1b:7f:63:0e:d6:09:ed:7a:c2:ce:38:
0d:46:2d:33:c9:9c:fd:8f:41:ba:f8:35:3b:c8:ff:1e:58:d2:
40:6e:0a:b0:5a:55:51:fd:ed:63:c5:d5:65:2a:30:3b:fe:be:
2a:7b:73:15:44:89:5a:58:1f:0d:45:a1:79:7a:61:43:69:ca:
81:71:dc:27:65:cd:01:57:b2:13:73:63:d2:8e:28:06:ea:30:
2e:f8:2d:60:6a:d4:17:a7:e4:d2:bd:50:51:09:ee:ee:d8:cb:
c6:76:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:32 2025 by rpki-client