Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hV2TLTom71L0PRFTtBuUqmdpQIQ.roa
File: hV2TLTom71L0PRFTtBuUqmdpQIQ.roa (raw, json)
Hash identifier: E3ZlLucyeA+cOiwsOqKGrgW0Wdr/nwjIpWaPlWQD6nE=
Subject key identifier: 85:5D:93:2D:3A:26:EF:52:F4:3D:11:53:B4:1B:94:AA:67:69:40:84
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204BDB2A37F0DB8701F21FE48DB69D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hV2TLTom71L0PRFTtBuUqmdpQIQ.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 45.147.227.0/24 maxlen: 24
185.238.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4b:db:2a:37:f0:db:87:01:f2:1f:e4:8d:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=855d932d3a26ef52f43d1153b41b94aa67694084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:1d:4d:4f:11:59:73:3c:76:24:b7:72:d3:
b0:2b:c8:c4:f2:78:05:db:32:54:5e:b7:a3:be:9d:
1e:06:a4:20:cc:fc:14:62:09:db:73:b4:fd:dd:e0:
0f:a7:ee:4b:3d:69:7d:fe:57:7c:56:be:ea:c4:42:
77:0a:46:98:a5:fe:16:ec:bb:bd:83:9a:97:d7:89:
a2:d8:36:b6:aa:61:bb:84:46:1c:4b:50:ce:8c:43:
1e:5a:0a:5a:24:5a:9d:9c:8f:b1:2a:9c:1c:40:d8:
e4:cb:07:99:f8:e2:14:db:8e:b1:47:d0:eb:b3:4a:
9a:f4:d4:9b:2f:89:c8:29:49:6f:85:10:98:1e:8f:
7e:30:95:e8:01:2f:74:71:40:ee:1e:ae:38:5f:20:
c1:be:a3:11:32:f6:ff:f6:29:b4:30:da:91:94:13:
5f:24:fa:06:bc:b8:a9:c6:00:79:52:a5:a6:d0:11:
b9:ae:c2:59:cd:aa:74:47:40:35:9f:e0:14:a4:b2:
82:5c:d1:69:eb:af:dd:4b:d7:20:01:97:c0:d6:49:
aa:2e:ef:e2:18:2a:c6:1b:d1:b6:16:bd:db:7b:20:
53:ca:89:f1:8d:6b:db:b8:0a:8d:03:dd:a3:8c:53:
b2:0f:33:c6:74:b8:36:b5:76:c9:b7:51:d6:b9:d8:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:93:2D:3A:26:EF:52:F4:3D:11:53:B4:1B:94:AA:67:69:40:84
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hV2TLTom71L0PRFTtBuUqmdpQIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
55:16:19:e4:c2:31:6c:5a:61:bf:f6:c6:af:aa:b4:d8:80:87:
cd:6a:d5:f2:db:5f:b6:19:07:60:01:a9:78:c8:34:05:bd:58:
40:ab:19:ca:d3:15:ad:8e:7e:8f:bd:e9:fa:a4:49:e5:51:0d:
6a:87:1e:c7:35:24:f3:02:94:42:63:42:31:8c:0d:42:16:71:
50:63:e5:f2:b8:71:4d:94:12:91:3d:c4:be:a7:f7:66:d6:0c:
56:f8:7f:65:6c:b6:47:0a:80:6e:37:83:19:a1:ae:5a:1d:43:
00:35:a4:29:33:ad:85:7f:08:9b:e8:9a:58:76:70:93:3b:5f:
ce:40:7c:ec:8d:d1:bd:6c:60:cc:d1:13:96:77:44:9e:3e:1d:
0b:57:f1:2f:bc:a1:0f:88:01:88:74:93:63:e1:15:cb:a9:da:
56:a7:7f:b2:33:5e:26:d9:b0:0f:46:0f:e1:7b:da:72:8b:35:
ef:51:a7:a5:5e:c4:bf:f9:11:b0:4a:97:1d:fd:cf:be:72:05:
34:72:cb:9f:63:4f:ec:25:ec:ce:b8:d0:75:1c:d2:e4:de:e0:
9f:f2:72:2d:ae:93:10:f4:c7:be:09:ca:e7:d0:9e:45:19:df:
ea:9d:b8:c7:3e:fb:08:2d:2d:98:c0:8e:9a:a0:58:6d:c8:fe:
c7:62:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:49 2025 by rpki-client