Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/qHz8JgVyW7Y2ey-2uD49I-CkUds.roa
File: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (raw, json)
Hash identifier: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=
Subject key identifier: A8:7C:FC:26:05:72:5B:B6:36:7B:2F:B6:B8:3E:3D:23:E0:A4:51:DB
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 0194258F12EB5ECA4710BDD31DCBC382C54C
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/qHz8JgVyW7Y2ey-2uD49I-CkUds.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.84.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:12:eb:5e:ca:47:10:bd:d3:1d:cb:c3:82:c5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87cfc2605725bb6367b2fb6b83e3d23e0a451db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:f5:b4:cc:17:29:42:13:ea:4e:77:cb:54:
d8:8a:65:c6:46:d0:86:20:a4:99:28:78:dc:2f:55:
04:c8:57:a5:08:f8:14:9d:72:db:69:ef:aa:b9:59:
c4:7c:75:90:d4:80:1f:45:55:61:c9:e4:bc:09:e8:
60:7e:76:42:43:ed:c5:6d:77:13:16:fa:5c:c8:34:
6e:ab:a7:f6:15:3f:c6:cf:4f:34:9f:fd:6d:87:bd:
ca:eb:11:29:36:83:5f:cc:ec:e0:d7:5b:d5:05:a1:
0f:27:aa:67:62:11:45:ee:55:fd:40:91:4c:49:b3:
7e:01:37:90:7a:54:13:e5:74:93:21:f9:29:79:40:
90:5f:f0:f7:24:d1:c5:72:a9:01:da:0e:f9:f4:43:
c5:13:21:36:b7:1a:37:23:94:6a:8d:72:7c:4a:25:
76:35:3a:0c:71:88:ae:91:69:06:17:89:86:c0:ef:
2d:a7:3c:ec:e8:d4:5f:98:ad:4c:54:3f:16:45:ab:
8d:74:b8:71:25:81:ef:87:ab:07:02:c9:83:81:2f:
13:07:c1:30:ed:57:a3:86:50:d8:c5:7a:bf:3f:38:
fa:d5:65:52:2f:43:89:8f:88:c8:08:50:58:05:94:
42:0f:e5:b0:3d:1e:82:56:21:4c:33:a6:4e:46:47:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:FC:26:05:72:5B:B6:36:7B:2F:B6:B8:3E:3D:23:E0:A4:51:DB
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/qHz8JgVyW7Y2ey-2uD49I-CkUds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.238.0/24
Signature Algorithm: sha256WithRSAEncryption
de:f9:a6:58:fb:7c:0d:fd:74:45:84:21:b8:b4:70:f1:b5:78:
a8:11:5e:10:e7:4d:c0:58:13:19:a7:e5:16:70:4e:11:91:ae:
d9:1d:44:75:45:da:e9:9d:fc:23:2e:45:a6:92:34:40:44:c2:
a7:33:88:c4:e4:fd:1d:72:ee:f9:a6:9f:04:93:6d:d3:3f:17:
07:e5:a6:82:bf:e2:97:9f:2c:66:8b:06:2d:1f:25:9e:b5:92:
19:25:9c:03:6d:9c:3c:ac:d5:1d:3e:cb:e2:24:fd:5e:4d:31:
38:5a:06:e6:84:72:54:f4:fa:59:b8:04:bc:f5:21:98:86:df:
ff:ee:71:4f:fa:c5:70:a1:f9:e4:33:4f:05:c4:b1:5e:dd:72:
80:64:47:7d:7d:a5:bd:ff:a5:e3:19:e2:4b:e0:07:ed:1d:0a:
3c:59:01:28:53:ef:bc:b8:c3:88:bf:3e:c6:40:82:bd:19:33:
55:8f:90:ca:44:66:0a:27:a2:77:65:9f:46:c3:45:3b:c9:0d:
9f:d7:d8:b0:dc:00:9b:60:8c:66:a2:94:b4:17:84:a8:0f:6e:
96:fd:f1:4f:bc:6e:61:8f:e5:2c:31:fe:f9:fa:88:f4:30:5c:
3d:2a:73:e6:4e:47:58:63:71:53:a7:41:33:02:65:2c:99:d3:
b8:8b:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:38 2025 by rpki-client