Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h62vAoY4Yaoj4GgclfEGv_50SzA.roa
File: h62vAoY4Yaoj4GgclfEGv_50SzA.roa (raw, json)
Hash identifier: WLrNqArTaHtR/RClNsJwjWsr4kq811tByz1PmPfRRFI=
Subject key identifier: 87:AD:AF:02:86:38:61:AA:23:E0:68:1C:95:F1:06:BF:FE:74:4B:30
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A495958FA2440D68CAB7D2CC8B41
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h62vAoY4Yaoj4GgclfEGv_50SzA.roa
Signing time: Thu 02 Jan 2025 15:47:52 +0000
ROA not before: Thu 02 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 45.132.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a4:95:95:8f:a2:44:0d:68:ca:b7:d2:cc:8b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87adaf02863861aa23e0681c95f106bffe744b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:9d:40:17:18:5a:3c:d4:18:8d:f3:2a:cb:
10:bc:44:c0:0e:02:a1:fc:a2:2d:5a:9d:1a:d1:7e:
78:aa:b0:6f:3d:4e:7a:f0:97:9e:0d:7c:d2:a9:db:
9e:b7:87:58:2b:16:ae:75:36:89:69:07:3e:18:1f:
02:e9:65:e3:50:f6:81:9f:3c:76:7f:6b:34:28:e8:
ee:ea:74:2c:84:2f:38:86:71:6e:30:21:62:bc:91:
5d:8f:c7:dd:0a:c9:48:37:35:e3:e1:07:22:82:f4:
8e:10:6d:e9:fc:f5:33:26:e1:16:4b:b5:5d:2c:a4:
4d:ea:66:a2:bc:3a:bb:4f:e7:5e:94:65:8b:3c:77:
78:03:4e:01:40:fb:88:6b:b7:79:92:1c:e5:f1:29:
23:82:0d:3b:79:22:45:6c:cb:cc:67:84:02:e7:4f:
34:b9:c0:d1:c0:9e:45:f2:45:6a:d9:73:95:6e:3d:
2d:8d:43:79:be:a9:8b:68:bd:8f:2d:0a:b0:53:f2:
49:8a:ca:f5:52:fb:6a:38:f3:7b:19:2b:45:78:e4:
9f:30:08:81:cc:15:18:c0:8a:cb:b6:1b:e8:44:46:
2e:92:af:a5:06:ee:d0:22:9c:48:15:4a:46:13:af:
61:33:8d:24:93:1a:6b:0b:a7:e4:7e:46:29:96:d9:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:AF:02:86:38:61:AA:23:E0:68:1C:95:F1:06:BF:FE:74:4B:30
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h62vAoY4Yaoj4GgclfEGv_50SzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
80:65:33:4c:41:2d:ef:51:93:c6:f5:8f:e2:e8:68:ee:21:5b:
ed:58:77:24:62:3c:b9:a6:5b:ab:af:d9:90:0d:d6:25:5b:e2:
98:5e:1a:f8:e6:13:26:e8:e3:f3:0e:a2:29:16:52:a2:ec:99:
c9:72:34:dd:9b:1d:30:c7:5c:aa:05:dd:02:1f:2a:29:43:a4:
be:1e:b5:86:94:a9:0e:9f:f1:b4:02:c9:bd:b9:d8:ea:46:48:
c8:7d:ba:76:b4:55:31:7a:09:6d:11:53:3b:70:a9:fc:4c:15:
a2:43:c6:23:85:52:11:e6:fb:f9:cd:d1:ea:45:5b:cb:1b:a7:
4f:01:d5:ed:0f:ac:c4:c8:4f:c3:46:7c:4f:a2:2c:d4:08:85:
ba:41:81:df:8d:93:87:72:d5:cd:df:bf:ca:f2:91:07:81:f5:
53:28:d3:fb:78:95:2c:8d:80:c1:2c:1f:18:91:71:2f:48:4b:
34:f4:31:70:d0:62:75:29:5c:3e:75:52:f6:0b:11:76:3d:17:
5c:2e:6b:0c:9e:d2:0a:0a:45:34:32:db:d1:94:c8:dd:d4:8f:
7b:94:e7:d5:f0:eb:ea:6e:02:7d:59:7c:5f:3c:1e:b4:d4:7b:
38:f6:24:e7:a8:95:92:4b:e0:e9:f3:cc:94:1d:2f:df:6b:74:
be:6f:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:43:16 2025 by rpki-client