Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa
File: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (raw, json)
Hash identifier: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=
Subject key identifier: 1F:82:26:F1:2C:23:D4:54:AE:27:26:2A:37:C2:4F:2B:B5:29:54:35
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0194282436160940637163DAF631E60B4D23
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa
Signing time: Thu 02 Jan 2025 17:50:49 +0000
ROA not before: Thu 02 Jan 2025 17:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142062
IP address blocks: 45.157.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:36:16:09:40:63:71:63:da:f6:31:e6:0b:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 2 17:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f8226f12c23d454ae27262a37c24f2bb5295435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:ee:e4:68:c2:9b:b0:5b:94:32:0b:93:b7:
7a:ee:3f:56:21:3c:91:36:70:6c:3c:d4:71:fd:ed:
4e:10:88:5d:14:65:a5:1f:d2:f4:7c:65:2d:6f:dc:
e4:ef:43:64:61:41:63:3d:7f:89:93:fa:93:f8:6c:
44:9b:9d:a0:ae:aa:8a:c7:a5:23:94:7c:75:8e:fb:
b2:73:7d:ad:0e:7b:87:09:b0:dd:81:3e:9a:dd:e2:
e0:49:f7:5a:41:a0:f2:18:d2:27:21:f7:13:1e:f0:
79:5b:39:a0:a3:dc:80:8f:85:24:d5:d5:c4:55:49:
09:87:66:9f:cf:06:9c:b9:c9:34:7f:19:a5:c3:4d:
9e:ad:ce:3b:75:6e:71:1b:b8:a4:84:f9:bd:64:77:
32:89:79:0e:f2:05:22:f2:62:16:8c:75:94:36:5d:
d8:11:9d:21:cc:6f:74:4d:b6:e6:0b:43:a9:1d:15:
6d:56:fb:df:28:50:23:a7:34:96:0c:6a:b5:89:4e:
d2:8b:9c:8c:e5:76:92:52:8d:46:e8:2d:5f:20:29:
9a:0e:7a:5a:46:55:84:b4:8e:e8:e1:eb:4d:06:6e:
df:62:a7:38:e4:c7:d4:b9:05:0c:a1:23:c8:bb:11:
73:51:cc:b3:1a:a8:90:fd:3e:5f:1c:77:d8:6b:62:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:26:F1:2C:23:D4:54:AE:27:26:2A:37:C2:4F:2B:B5:29:54:35
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8b:64:6d:cd:39:40:b0:5f:a6:f0:2c:8c:f4:63:69:dc:41:
e4:17:39:3d:a7:a5:0a:6a:ac:23:9b:39:2c:dc:a7:6c:74:42:
2c:e6:a7:7b:52:07:64:cc:b7:81:f8:5a:e7:ce:4d:e6:45:b9:
05:df:01:3b:74:b0:22:c8:b0:fe:1d:cc:58:71:f0:2e:67:8a:
72:e5:8c:c2:aa:cc:f1:0c:cc:5b:37:41:bb:25:52:21:90:cf:
45:1c:c5:7b:cc:42:8c:95:fd:f5:6d:6f:97:3e:ce:32:a9:a9:
7f:98:3f:1f:73:ba:3f:88:f1:8d:b0:26:37:ea:cb:8c:38:7a:
a6:a6:99:d7:aa:12:5a:38:f2:52:bd:09:bc:eb:9c:3d:a6:d7:
47:dd:c2:a5:34:3b:cf:08:ef:f0:4e:1c:01:2e:5b:b4:db:c5:
23:89:c9:94:ab:1f:d6:3d:c1:6a:a4:96:cb:ed:4f:cb:e9:15:
ef:17:05:b3:95:6c:a7:90:52:c4:74:7e:32:bb:c0:88:58:f7:
30:2b:b3:b2:95:9f:ed:98:50:2c:65:26:f2:d8:2c:0b:aa:7a:
98:37:75:ec:51:bf:53:c2:4d:0c:96:3b:3d:20:0d:a2:26:21:
0c:8d:02:8c:91:4d:f0:ec:04:38:d0:d0:7f:33:b6:a6:95:d2:
af:45:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:45 2025 by rpki-client