Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jHVKuAX_QsuvTA7Q34vE4NYq6u8.roa
File: jHVKuAX_QsuvTA7Q34vE4NYq6u8.roa (raw, json)
Hash identifier: TfjpjJNaqJrzWhXj/3ic1kqvJB7pP5UWKWvw6l/lJJU=
Subject key identifier: 8C:75:4A:B8:05:FF:42:CB:AF:4C:0E:D0:DF:8B:C4:E0:D6:2A:EA:EF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70EEC9689A0B66CB69DD576CFB26C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jHVKuAX_QsuvTA7Q34vE4NYq6u8.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49444
IP address blocks: 45.86.44.0/24 maxlen: 24
45.86.45.0/24 maxlen: 24
45.86.46.0/24 maxlen: 24
45.86.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0e:ec:96:89:a0:b6:6c:b6:9d:d5:76:cf:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c754ab805ff42cbaf4c0ed0df8bc4e0d62aeaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:ba:15:ee:45:ef:94:a4:7d:77:54:e7:f6:
28:ed:94:b1:18:50:80:42:fa:4f:75:d6:12:68:a4:
97:02:63:15:cf:bb:db:cf:ee:37:83:a1:6b:e0:ec:
50:42:99:07:3b:ed:c3:f5:37:a8:d5:aa:df:17:56:
3f:55:bc:9f:44:3a:92:5a:a4:78:0f:e9:0f:bd:b8:
b7:84:c1:73:08:50:a4:98:e8:61:f8:63:38:6e:ef:
09:83:e6:0a:de:af:e8:8d:84:76:1a:99:da:9a:da:
c1:92:db:e3:b8:4f:73:32:20:81:aa:af:47:e2:b2:
4f:3c:ac:42:1b:96:93:3b:49:da:87:e2:be:2e:f3:
14:b4:c8:2f:ed:a4:5f:aa:0f:4f:cf:c7:a7:f6:0c:
b3:64:95:a9:30:a7:91:b9:cb:c6:51:cd:a7:35:13:
a8:e3:0a:aa:ed:38:6a:78:4a:19:a7:54:66:52:a6:
d2:e0:2f:ea:fb:f4:29:33:c8:29:ea:ef:5e:17:8e:
3c:be:54:6a:e4:45:a6:39:1a:b6:ed:9b:56:d2:b2:
1d:50:89:07:7f:57:45:12:cc:5b:1b:ad:64:36:40:
be:21:e6:00:ee:c2:8f:f2:72:a9:3e:2d:d9:66:04:
7b:63:36:13:1c:a7:48:a0:a2:34:e6:2a:ee:89:e8:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:4A:B8:05:FF:42:CB:AF:4C:0E:D0:DF:8B:C4:E0:D6:2A:EA:EF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jHVKuAX_QsuvTA7Q34vE4NYq6u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c8:70:49:11:65:ce:df:d0:ce:cb:43:ae:55:cb:15:e6:57:
ae:8a:0f:1e:d6:fb:86:bb:4f:ed:dc:a5:a5:1c:ee:ce:a0:05:
72:c8:f6:75:ef:9d:47:46:49:ec:01:55:30:a4:2f:05:1a:64:
8e:0f:21:c8:53:43:1a:25:a3:fd:06:65:61:17:9b:7e:c7:84:
e1:00:8b:ba:c3:01:62:38:00:83:b8:d8:2a:5a:d3:82:1b:47:
ad:86:d7:ca:4f:67:46:87:60:f5:93:db:9f:30:fe:53:16:6e:
aa:53:e1:b4:60:c8:74:dc:d6:e8:21:48:0d:f8:ab:cc:0b:2d:
33:80:d6:21:5f:96:1f:c7:9b:b0:48:0a:7d:2e:68:45:c7:b9:
03:cb:00:0a:9f:4e:4f:bb:a9:24:32:a8:0c:c9:00:db:81:2e:
d0:c8:f4:47:fb:16:b3:d8:84:0a:07:89:5e:e7:9d:6c:7a:f2:
4b:5f:3b:13:e9:50:2a:db:ad:97:3b:76:15:a1:dd:02:8f:e2:
03:78:ce:15:e2:7a:c5:a4:d1:70:be:e7:4d:14:bc:e1:c9:c1:
2e:cf:92:8c:27:8d:94:06:82:72:68:db:6d:1d:de:6f:89:cd:
09:2e:4a:51:54:98:4b:b9:be:7f:ad:af:7c:e9:31:61:93:39:
ec:05:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:33 2025 by rpki-client