Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa
File: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (raw, json)
Hash identifier: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=
Subject key identifier: AC:7F:FA:41:99:95:6B:8F:F2:36:56:7F:25:5B:8D:D3:F5:64:DD:7B
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 019422FB66320315F4ACB8478882A1F1D5D2
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35120
IP address blocks: 45.8.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:66:32:03:15:f4:ac:b8:47:88:82:a1:f1:d5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7ffa4199956b8ff236567f255b8dd3f564dd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:d3:d7:6b:76:6e:2f:f1:81:49:41:df:b4:
ee:7b:3b:2c:34:b0:55:0e:48:e8:ad:e1:56:43:7e:
8e:55:92:cc:ff:c5:04:ab:30:11:ef:c6:dc:20:40:
94:27:73:fe:25:ea:9b:3d:2f:f2:0d:8b:ee:4c:bb:
0c:08:09:4b:ab:57:e8:e1:38:3d:03:8f:5b:ce:e5:
0c:19:bf:bf:47:70:21:d0:a6:96:5c:c2:10:d5:8d:
db:a0:56:f1:d4:e6:a2:02:9b:4b:1f:5f:ec:c4:ff:
1f:8f:47:82:44:f5:b5:b8:bd:ed:2e:50:5a:24:f8:
df:1b:d2:4c:34:c9:ba:53:43:69:b0:de:2c:76:7f:
b4:14:cd:74:e4:3e:ca:e3:52:1c:5a:52:cf:f5:e7:
e3:93:62:b3:53:5e:3d:2f:0e:51:35:55:d6:2a:60:
b0:93:fa:31:66:18:05:4d:78:f7:a3:04:d3:57:3e:
87:5b:f6:1e:00:bc:c4:69:fc:09:30:c3:3e:24:8a:
e0:85:e5:c3:11:99:3a:44:3f:33:7b:83:38:c0:bc:
2f:87:68:8f:51:72:40:47:17:02:ef:14:b5:0f:e1:
9b:d1:36:f3:e8:b0:88:92:3b:25:06:00:a1:6a:f8:
22:e9:56:8e:03:02:9d:5f:f6:88:eb:0d:e9:3f:bb:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:FA:41:99:95:6B:8F:F2:36:56:7F:25:5B:8D:D3:F5:64:DD:7B
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.8.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:dc:e8:33:08:29:f2:78:f6:21:13:f6:d7:e0:54:30:ce:c6:
db:1b:e6:51:1c:2c:be:ba:04:8a:47:a2:d2:e1:20:84:9c:d3:
1e:7c:38:bf:3f:75:ba:69:20:b2:96:41:30:10:7f:af:b0:41:
78:d4:24:9e:0c:97:76:98:97:c2:b2:c7:de:8e:ba:98:12:fe:
b7:e4:b7:b6:ee:34:50:0c:cc:4f:22:02:21:74:74:62:cb:1e:
5e:98:01:2c:d9:1d:2a:54:96:35:97:89:45:74:1e:7f:58:64:
c5:f3:99:6c:e9:2c:d3:77:0b:12:dd:3a:fa:bf:1e:f4:09:65:
b3:58:98:e9:98:ac:8a:73:0b:48:1b:c5:7b:c4:87:e3:0a:e0:
54:5c:f1:c8:c9:e2:f9:62:47:45:1c:95:d6:c9:17:3e:fe:cc:
e5:c8:fe:a2:f5:27:b9:a0:3c:36:d7:26:1b:3d:89:88:1a:36:
32:13:53:0f:b4:50:fa:65:f4:91:75:94:bf:b5:0b:6a:7f:c0:
b8:37:80:78:7f:3d:84:f7:ae:1d:99:4f:3e:98:3a:04:59:fe:
67:73:75:61:26:32:4b:d8:75:02:62:64:73:31:81:88:43:d4:
af:65:9f:76:35:2e:24:c2:6e:3e:c6:b0:ba:f5:41:27:1b:dd:
09:e5:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:56:09 2025 by rpki-client