Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/hewkwqUbEjrIV_IBVqwAtoymkrQ.roa
File: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (raw, json)
Hash identifier: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=
Subject key identifier: 85:EC:24:C2:A5:1B:12:3A:C8:57:F2:01:56:AC:00:B6:8C:A6:92:B4
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019427479AF1F111E3305A08B6CABCBC64A0
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/hewkwqUbEjrIV_IBVqwAtoymkrQ.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 193.101.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9a:f1:f1:11:e3:30:5a:08:b6:ca:bc:bc:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85ec24c2a51b123ac857f20156ac00b68ca692b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:d9:72:06:85:7f:c7:96:cc:e5:9b:f7:03:
61:6e:f2:0a:90:a9:3b:37:b9:ee:44:53:34:71:ae:
56:ed:ce:cb:84:a7:48:45:0f:9e:a7:dd:ad:ed:34:
dc:0d:34:b5:70:ca:70:85:25:c3:d3:68:eb:af:d6:
ac:17:0e:be:74:ad:52:90:53:06:2d:aa:40:5d:fc:
b7:95:1d:56:39:1d:c2:5f:de:fc:cd:ed:5d:45:34:
ee:79:a3:31:aa:04:01:1e:4c:af:99:72:ef:e5:a8:
f2:ca:b3:22:ac:76:80:79:2c:ad:06:71:ec:5c:22:
cd:73:4e:6f:ae:1e:88:4d:0e:0e:c5:5a:73:34:b2:
1b:64:8c:f9:41:31:07:2b:db:a1:9b:81:8a:5a:22:
92:3d:92:51:7f:ba:d5:18:9e:b8:7f:75:1f:f8:ef:
ce:54:a5:34:c2:fb:d6:c3:dd:0e:a3:86:60:af:1f:
77:e3:6a:76:26:73:1e:87:f8:36:48:eb:71:3f:ed:
1d:2f:a6:37:cf:ad:13:13:5b:46:60:43:ae:6b:82:
95:d9:78:82:90:6f:6c:69:10:9b:c0:55:4f:03:52:
40:c9:61:97:aa:e7:21:55:38:18:af:34:d7:07:ca:
51:6b:12:af:49:a6:20:66:1c:7b:f5:50:6f:3c:30:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:24:C2:A5:1B:12:3A:C8:57:F2:01:56:AC:00:B6:8C:A6:92:B4
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/hewkwqUbEjrIV_IBVqwAtoymkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.250.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dd:6d:bc:5f:1d:57:e6:5a:b4:b7:b6:f7:c9:d8:2f:1b:d5:
df:ac:6e:e1:f5:e9:f8:fd:ba:a7:14:be:ab:e3:df:00:e9:fd:
e3:a3:5f:22:c7:c1:5b:5c:34:ce:e9:31:a3:65:75:ec:32:59:
ca:bd:87:1c:c4:4d:60:9a:9f:c9:c2:e9:49:38:87:36:c4:be:
1b:b0:ad:04:41:72:4d:94:83:52:a7:15:53:da:3a:c8:63:7b:
d8:a4:9b:31:23:a3:7c:97:78:2b:fd:7e:c5:3d:77:be:ef:38:
0b:87:be:d4:54:5c:ef:3f:c1:3b:e2:90:82:01:b4:36:f3:7f:
81:b0:95:09:71:3d:a7:83:ea:9e:39:e7:4e:c1:13:bb:90:1f:
1d:7c:5d:6b:1c:92:2b:68:2e:18:00:a2:0a:fa:10:d9:ba:fa:
d8:e4:3f:4d:e1:d7:a8:14:13:ac:db:be:f0:1b:cf:3e:d8:4d:
ba:aa:16:5a:46:7d:c5:69:a7:50:b4:c5:ed:7a:3c:18:a7:74:
b8:a9:f5:d7:fa:90:05:79:45:11:98:aa:f7:6a:17:34:c4:c7:
fd:9b:94:c7:b2:ce:ef:75:03:1f:c2:31:3c:aa:20:be:dd:d6:
4a:be:a9:d6:e5:b9:fa:d6:76:88:de:c7:63:96:75:06:9e:e5:
c4:48:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:04 2025 by rpki-client