Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0Hea7ZTNDwvMcAxNNLrKxuGzWtc.roa
File: 0Hea7ZTNDwvMcAxNNLrKxuGzWtc.roa (raw, json)
Hash identifier: C5YNNm+ryeKb3S5ziLLMkaKUlee2ZsqPxsVb71cbMRY=
Subject key identifier: D0:77:9A:ED:94:CD:0F:0B:CC:70:0C:4D:34:BA:CA:C6:E1:B3:5A:D7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01965C6A4516D844B4A9FB8456465B65C7EA
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0Hea7ZTNDwvMcAxNNLrKxuGzWtc.roa
Signing time: Tue 22 Apr 2025 07:33:10 +0000
ROA not before: Tue 22 Apr 2025 07:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:6a:45:16:d8:44:b4:a9:fb:84:56:46:5b:65:c7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 22 07:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0779aed94cd0f0bcc700c4d34bacac6e1b35ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:b8:83:3a:d5:29:7b:67:73:01:32:9a:29:
99:f0:6e:07:be:3f:4f:1f:d1:85:b0:1f:69:22:21:
67:bc:3e:6f:af:1c:59:c3:a9:8d:90:47:65:97:a7:
2e:37:10:c3:43:a7:6f:81:04:37:54:32:05:d7:be:
a0:64:3f:05:1e:92:5b:c5:57:0a:0d:09:27:88:a5:
2c:36:f3:1b:a0:4c:68:fa:34:29:b0:2a:0a:69:f5:
e0:65:8a:21:c9:ab:59:b2:92:22:ff:bd:0f:1a:e3:
3f:18:94:c4:2e:1a:ce:cc:64:37:8a:c1:7e:d6:fa:
b1:03:a0:f3:c5:a2:50:92:33:db:f8:e8:56:ec:94:
2a:76:c3:08:61:27:44:87:a9:a5:85:d2:2c:52:5e:
ad:42:0c:4a:0b:4b:7a:06:da:cd:07:ce:f5:58:3d:
6d:67:55:4d:ca:a1:b8:cf:5f:78:97:75:16:56:5f:
06:2f:c1:5e:37:b9:ff:20:9f:d8:63:9c:6e:1e:ef:
ed:c7:f6:f5:75:da:6f:11:22:32:03:69:e6:f1:8d:
a3:56:15:24:39:18:ad:d1:da:b9:0d:c4:9b:e3:e6:
07:6f:3e:2b:d4:ae:57:83:17:d7:1a:c4:b6:0b:ef:
bd:98:bf:c4:03:5e:4b:30:4e:0b:a4:af:83:8e:88:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:9A:ED:94:CD:0F:0B:CC:70:0C:4D:34:BA:CA:C6:E1:B3:5A:D7
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/0Hea7ZTNDwvMcAxNNLrKxuGzWtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c8:60:ab:24:74:56:1b:35:3e:3c:7e:7c:d5:4d:4e:1e:8e:
c4:1f:85:6e:ee:fb:23:51:a4:6b:6f:9f:6c:1f:2f:26:75:d5:
c1:5b:a8:7b:85:9a:7d:95:07:e1:c4:18:09:0d:73:59:a6:ea:
47:de:df:60:8c:2e:d4:03:ff:0b:f6:c2:68:29:47:d1:52:c1:
ed:8d:22:ba:37:36:37:ce:a7:07:c9:14:be:f7:d0:74:2a:1c:
c2:50:f8:4c:3f:c2:80:8e:a1:d7:33:f2:b4:87:2f:cf:ea:cd:
ab:fa:04:cd:98:66:df:10:00:08:d0:b3:6d:49:43:da:62:36:
3f:a6:b3:b5:29:80:a2:3c:0f:79:8e:88:f9:db:24:5d:2f:2f:
70:8e:d4:00:ac:fc:c5:1e:b7:f5:81:46:b1:dd:0c:fd:e7:fd:
5a:3f:95:1a:20:9a:fe:e2:25:4a:e1:48:09:9a:40:92:f0:77:
b4:e2:19:2c:76:e1:09:eb:53:7e:0c:c0:c5:09:6c:23:10:40:
af:cc:8a:f7:ec:3b:c0:d6:34:1a:8d:1a:fa:b6:17:47:86:b6:
97:22:e8:5b:d2:05:d0:84:9a:b9:d5:74:00:46:3b:19:30:3e:
a0:f4:6e:41:9b:b2:0c:95:01:e6:c9:a7:3b:60:52:3f:5a:a0:
b6:2e:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:27 2025 by rpki-client