Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/1-hXj5YRn-WVx35eduoI7efVZjNc.roa
File: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (raw, json)
Hash identifier: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=
Subject key identifier: FA:15:E3:E5:84:67:F9:65:71:DF:97:9D:BA:82:3B:79:F5:59:8C:D7
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 01941FFA6304269B17A337274F84A9797D4F
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/1-hXj5YRn-WVx35eduoI7efVZjNc.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198682
IP address blocks: 78.40.112.0/22 maxlen: 24
2a05:a9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:04:26:9b:17:a3:37:27:4f:84:a9:79:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa15e3e58467f96571df979dba823b79f5598cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:71:a3:b8:46:e1:7d:36:3b:59:c2:93:5f:
16:84:da:14:eb:77:6d:d1:22:fb:af:b1:e9:94:3a:
da:db:dd:64:5b:a0:a5:e1:90:9e:d5:c5:0e:c7:5a:
4a:01:f4:d9:16:22:44:3d:e3:b7:5e:69:c9:cf:cd:
79:22:77:0b:06:b3:ee:dc:7c:ba:7f:5b:fa:33:78:
10:36:f5:33:5e:6a:a4:6d:dd:46:c7:a9:7e:7b:bf:
08:a5:5e:8e:90:fc:69:c6:2b:f0:28:9a:27:47:48:
92:24:c3:0b:6c:e2:f1:2f:78:e8:82:1c:0e:97:24:
a8:8e:4d:f0:55:38:34:9d:97:0d:3b:3e:68:a5:9f:
c0:71:f4:af:11:83:89:14:01:d7:c3:79:a4:93:16:
b8:73:31:1b:10:c9:61:99:6c:25:99:7e:73:11:26:
40:00:d5:c3:2d:f1:91:ea:ed:b6:ee:83:fc:87:2f:
d6:8e:6e:b3:21:b6:d1:81:78:ec:29:6c:e2:3e:03:
ce:06:66:02:1a:2c:00:64:1f:a3:c8:24:9c:f2:07:
f6:c7:e8:38:a8:45:9d:77:b1:cb:d8:a7:0f:ef:d5:
86:ff:30:ee:b2:7b:01:73:98:aa:33:3f:8f:2a:7b:
8c:bf:b3:09:7b:4a:6e:c3:80:99:1f:37:70:70:41:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:E3:E5:84:67:F9:65:71:DF:97:9D:BA:82:3B:79:F5:59:8C:D7
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/1-hXj5YRn-WVx35eduoI7efVZjNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.112.0/22
IPv6:
2a05:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:d1:07:27:ba:5b:f4:ee:0c:2d:58:d7:cd:36:9f:40:1e:05:
87:5b:c9:30:6b:8d:1c:bd:cb:43:77:7d:3f:51:bf:34:d0:7b:
9f:35:6e:ad:36:e3:43:36:8d:60:d6:f2:b3:42:78:4e:5d:0b:
fe:0b:25:46:38:0c:95:24:36:cd:88:83:e9:10:3b:bb:40:9f:
3c:57:2c:51:e7:5e:52:11:be:76:4c:9a:e8:31:e4:78:56:24:
ed:0f:d0:5c:2c:39:a9:a6:2f:4d:86:40:c6:25:6d:7f:2f:b8:
84:59:e8:ce:1b:e7:81:6e:2d:79:ee:ba:ae:f2:dc:cf:fe:8a:
a3:69:a1:b8:86:bf:67:d6:1e:16:d5:ac:7a:9e:19:36:09:6d:
17:cb:17:8f:1f:c0:ee:95:87:29:75:4c:99:51:1f:e3:3f:05:
9e:09:db:09:4a:46:bc:6c:dd:1b:59:a9:8c:46:e4:16:5c:36:
d5:c3:75:5a:85:ed:d8:a0:8d:b1:8d:91:07:8a:c3:c5:17:3d:
bb:9d:1c:3a:d4:35:d2:25:05:6c:07:c1:14:fe:50:ef:de:e0:
3a:bc:8d:cf:dd:f1:c2:f2:39:7f:3f:be:41:50:4e:7b:cb:ef:
cf:40:5c:93:97:5a:14:e1:95:fc:12:58:39:8c:63:06:23:dd:
09:83:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:19:34 2025 by rpki-client