Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/tHoWXXV-bnWtPv3_sIlIUroPQXU.roa
File: tHoWXXV-bnWtPv3_sIlIUroPQXU.roa (raw, json)
Hash identifier: 2JU40V040r5Mc7sNTioajDBldud1UQyIgT0ERMOL7qw=
Subject key identifier: B4:7A:16:5D:75:7E:6E:75:AD:3E:FD:FF:B0:89:48:52:BA:0F:41:75
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019643D31A396EDCBDBD014F95E7D460ACDB
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/tHoWXXV-bnWtPv3_sIlIUroPQXU.roa
Signing time: Thu 17 Apr 2025 12:57:10 +0000
ROA not before: Thu 17 Apr 2025 12:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d3:1a:39:6e:dc:bd:bd:01:4f:95:e7:d4:60:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Apr 17 12:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47a165d757e6e75ad3efdffb0894852ba0f4175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:06:83:42:d0:f0:cb:8a:3c:44:c0:c2:98:
07:44:f2:ce:b3:9a:39:43:f8:2b:88:a5:86:36:e3:
8e:b7:1b:32:97:a1:c4:65:fc:98:7e:a3:2c:a0:31:
06:cf:d7:d0:51:f3:0b:43:9e:c2:f0:bb:67:fa:d8:
88:ff:bd:af:cc:a7:5a:55:cc:01:e9:c1:59:69:f0:
87:be:a1:e7:a3:d1:8c:fc:61:56:08:a6:94:7c:64:
40:fb:84:73:0b:fa:97:07:8a:6c:9a:81:78:da:d8:
cc:fc:02:d1:9f:8f:fd:5a:4b:80:a0:87:2c:f9:60:
09:3c:fe:90:18:02:8a:9c:e8:6b:aa:a0:e9:6e:c4:
b2:01:df:42:a9:e1:11:03:fa:15:98:5e:d9:8a:15:
53:82:f8:e9:90:fd:61:7a:ce:d8:a8:35:ee:19:d1:
07:d0:6e:f4:f5:90:b6:e0:7c:71:42:63:7f:06:ae:
73:a8:e4:61:dd:59:0b:1d:7d:20:03:56:2d:84:0f:
3e:95:10:17:f3:aa:b3:b3:96:7f:cf:0c:45:d8:f5:
53:b6:39:03:03:6c:00:4b:ec:5c:a8:88:37:05:0f:
4f:01:20:b1:61:dc:8f:06:58:82:e8:2d:8c:e6:ef:
1c:0b:17:00:6a:56:c8:aa:96:a2:e0:59:34:26:19:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:16:5D:75:7E:6E:75:AD:3E:FD:FF:B0:89:48:52:BA:0F:41:75
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/tHoWXXV-bnWtPv3_sIlIUroPQXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:bd:61:7c:ef:c3:8d:e9:3e:78:d8:80:5b:df:0b:f5:49:
fc:fd:2c:b8:40:d0:98:b1:d6:bf:c4:dc:9a:36:a3:67:be:18:
57:7b:f6:f8:37:e8:ed:fa:d3:0c:99:6b:fb:96:aa:f1:90:e6:
0a:78:45:a0:5d:2a:b1:d2:20:ca:49:0d:c4:61:11:14:9b:81:
12:c2:07:74:ba:63:8d:2f:ab:03:4c:3f:8c:bb:7b:e2:e1:73:
f5:56:f7:f3:e3:0a:ca:17:3a:39:3b:12:d7:a2:6c:55:f3:c0:
5f:21:49:bf:65:3d:f1:80:ac:75:56:8b:58:75:e7:de:c6:cc:
81:22:8a:3f:3b:f8:61:ea:88:df:70:2f:eb:5f:45:3f:f6:6c:
9c:30:77:20:d0:4f:c1:d7:58:6a:57:18:96:88:86:66:82:9e:
dc:6a:5c:7c:84:c8:db:d9:fd:68:b4:ed:e6:d7:a8:8f:e9:d4:
c4:8a:4e:1e:22:0e:da:b3:49:b3:a9:4f:06:58:bb:91:67:12:
28:81:66:c5:8e:d8:6a:6d:1f:c6:41:42:2b:a8:8f:56:e8:cd:
bf:6c:48:c7:4d:23:dd:d6:54:b8:b3:f8:09:42:96:5e:0f:9e:
65:46:c8:ce:5a:30:92:52:c4:46:2b:6e:7d:ad:ee:5f:15:c6:
35:7a:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:28 2025 by rpki-client