Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/H-w2T99zCrrlKQYxLvTqjVHNtNs.roa
File: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (raw, json)
Hash identifier: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=
Subject key identifier: 1F:EC:36:4F:DF:73:0A:BA:E5:29:06:31:2E:F4:EA:8D:51:CD:B4:DB
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 019420D63B1D28F4C7600C056710D888FDB9
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/H-w2T99zCrrlKQYxLvTqjVHNtNs.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206863
IP address blocks: 86.62.40.0/22 maxlen: 24
185.169.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3b:1d:28:f4:c7:60:0c:05:67:10:d8:88:fd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fec364fdf730abae52906312ef4ea8d51cdb4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:a6:31:6f:a8:36:5d:3d:09:f0:91:fd:17:
4a:37:92:44:b6:b9:5e:8c:8b:eb:fc:7e:b1:88:12:
dc:5c:fe:6c:b3:cb:11:8d:e4:ca:ab:66:b8:c5:6d:
b0:c5:9b:a4:b9:f1:10:d1:70:41:aa:f8:cc:e8:43:
f3:42:e5:d8:9b:b2:b6:69:21:ce:f0:8e:4e:b7:9f:
50:ba:03:48:e2:df:24:e9:7e:1f:f6:6c:c6:7d:78:
97:ee:0d:6d:f3:44:75:74:17:11:9d:98:f9:d1:7d:
d5:94:c0:b9:88:52:5a:32:ef:59:48:cf:8b:51:a7:
0f:11:ad:ee:08:21:a3:ef:33:2d:42:c9:a4:d6:ca:
2f:cf:fe:66:f4:6d:5a:fb:9c:a5:dd:cf:94:51:39:
8f:58:38:68:64:e6:48:02:eb:cb:d0:ad:f0:23:05:
10:9b:62:7b:d2:d5:57:a1:e7:85:97:54:46:4f:91:
a7:b8:83:83:f1:d5:a0:fa:eb:fe:9b:ad:9f:b3:d6:
61:f3:9b:a9:62:96:8f:9a:19:42:2f:3a:c5:07:1a:
46:6e:4c:86:12:0b:9e:34:5f:24:05:5d:34:95:a3:
73:c8:02:18:b1:e6:1e:80:dd:37:b8:ff:45:ae:64:
30:2f:f6:0f:67:c2:65:9a:78:58:47:c2:cd:53:91:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:36:4F:DF:73:0A:BA:E5:29:06:31:2E:F4:EA:8D:51:CD:B4:DB
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/H-w2T99zCrrlKQYxLvTqjVHNtNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.40.0/22
185.169.136.0/22
Signature Algorithm: sha256WithRSAEncryption
52:b8:7e:7f:15:aa:0f:bb:e1:50:07:e8:53:8a:17:6c:54:24:
bb:46:0a:a8:99:74:e5:08:42:58:69:9f:2e:74:93:e7:50:5b:
bf:60:f2:8d:c0:00:75:01:09:e6:cc:50:e4:13:4e:3c:92:94:
83:a8:89:50:8f:1b:30:7f:38:7f:14:57:d5:89:df:21:c8:c4:
9e:e4:b0:f9:1e:21:57:d5:1b:0b:37:9b:52:f6:27:24:18:8e:
af:ec:83:1c:11:d2:e1:8e:ea:08:28:ad:97:dd:b7:ec:e5:96:
35:57:6a:db:df:5d:8e:c8:cb:ab:3a:a9:4a:a4:6d:64:6c:60:
41:e7:61:75:5d:b2:ce:5b:90:a0:3d:ac:3d:ca:25:e8:cd:a1:
d9:63:3c:21:9b:2a:ac:af:c6:1f:47:14:e2:c3:48:5f:ca:98:
c4:72:f5:f7:66:f5:55:bb:28:4d:54:46:55:0d:7d:a5:cc:3b:
57:fe:6b:33:11:43:f2:a2:80:c8:a8:31:fe:8a:dd:5f:c0:f8:
e5:2a:92:7f:6b:f2:53:78:2a:2f:4b:48:69:65:64:d3:fd:6f:
47:cd:fb:d5:91:a6:41:ca:c2:d2:84:4c:8e:39:15:b7:c1:88:
82:52:cb:c0:fc:1e:56:b1:79:f4:9b:bb:fb:8c:96:a9:8b:f7:
d6:be:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:35 2025 by rpki-client