Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/hNIAp98aMKo8_sMHQg1HRKY3DlY.roa
File: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (raw, json)
Hash identifier: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=
Subject key identifier: 84:D2:00:A7:DF:1A:30:AA:3C:FE:C3:07:42:0D:47:44:A6:37:0E:56
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0194228E3024BDCE57A2F7C889A4AE7CC253
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/hNIAp98aMKo8_sMHQg1HRKY3DlY.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44517
IP address blocks: 62.68.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:30:24:bd:ce:57:a2:f7:c8:89:a4:ae:7c:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d200a7df1a30aa3cfec307420d4744a6370e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:72:36:6b:f7:c3:eb:1c:25:6b:e7:36:36:
f2:99:96:e1:bb:db:57:53:61:77:72:68:2d:54:60:
9b:95:7b:a6:62:c7:c5:71:61:55:83:5a:fb:f5:46:
03:15:2b:cf:d8:8e:48:60:37:b3:d8:a5:a4:9f:2a:
af:74:cf:1d:12:1c:76:13:5d:d0:8d:1b:5d:67:9a:
87:d4:4d:69:49:a6:c9:a5:74:80:61:d1:5c:87:6d:
81:d4:f9:0b:c5:f4:e3:47:55:f9:b2:1e:f6:1a:08:
26:90:32:96:b8:96:68:d5:d7:46:30:6d:6d:fc:bf:
1f:84:83:80:1e:69:78:d4:6d:15:26:f9:c1:1d:74:
96:b1:04:4d:de:bd:04:38:df:af:e3:3e:36:33:06:
98:45:36:e0:fc:93:8b:1b:62:ab:b2:e3:58:cc:83:
37:e6:5f:e7:c4:29:74:94:b6:a7:72:6a:24:9b:e4:
f3:06:08:77:94:27:04:03:e1:17:0a:bb:e9:32:ec:
c2:05:75:92:2e:86:93:24:14:55:84:c9:ee:69:41:
47:22:2e:85:87:67:53:12:f6:28:a7:4a:f1:3b:58:
37:89:c9:af:d6:13:87:87:d2:44:56:6b:34:e8:82:
13:bb:c8:96:59:9f:a1:38:4d:8b:2e:2f:b8:e3:ce:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:00:A7:DF:1A:30:AA:3C:FE:C3:07:42:0D:47:44:A6:37:0E:56
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/hNIAp98aMKo8_sMHQg1HRKY3DlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:36:93:90:32:49:fa:1e:0c:9b:90:08:9a:33:04:61:dc:c1:
9e:a0:b5:e6:c7:8a:88:fd:fe:58:b3:76:92:a9:2e:97:bb:a0:
7a:e5:68:c0:20:ef:c0:52:73:58:8e:47:ca:33:88:37:da:44:
16:22:91:76:77:ad:09:08:ff:f9:87:de:ef:26:f3:99:52:24:
56:9f:13:0d:eb:d1:f6:86:23:33:bd:72:3b:22:bc:40:29:dc:
5e:9b:e3:94:ee:40:c7:cf:5a:01:b8:72:ba:a0:b9:a7:9d:31:
93:f3:b2:04:56:ff:c1:70:80:33:a3:c4:e6:a3:a0:1c:88:43:
cb:f7:ac:95:9e:55:54:01:7d:41:58:a9:dc:6b:bb:ab:76:80:
d3:8c:e5:55:f9:e0:05:61:8f:f5:70:61:a8:bb:29:ff:3a:ae:
a3:2d:22:05:4c:0e:6d:29:e7:aa:67:bc:f8:d6:41:6d:4a:f6:
f8:6b:18:72:4c:33:8a:b6:da:16:53:b4:90:64:40:c8:98:bb:
a7:56:fa:aa:d7:1e:cb:ec:e8:fe:98:cd:11:5b:f4:9c:1e:76:
0e:9d:9e:4c:5a:e9:87:74:d5:44:a0:e4:ba:bd:59:49:bc:0f:
80:0e:44:ad:18:68:9d:2d:58:c2:32:4c:9b:1a:cc:8c:b7:e4:
3f:89:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:52 2025 by rpki-client