Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa
File: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (raw, json)
Hash identifier: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=
Subject key identifier: 86:3A:7D:AF:88:E4:7D:D7:16:87:CB:5B:E0:86:C9:F0:92:EA:BE:18
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 01966C24C303236B0AFA0F9F10E7B2004FED
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa
Signing time: Fri 25 Apr 2025 08:51:10 +0000
ROA not before: Fri 25 Apr 2025 08:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:24:c3:03:23:6b:0a:fa:0f:9f:10:e7:b2:00:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Apr 25 08:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=863a7daf88e47dd71687cb5be086c9f092eabe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:e5:9b:1a:f7:c9:49:a9:10:d2:1a:bb:e4:
4a:5f:8c:66:4c:46:3f:f2:03:92:9a:ee:3a:4c:0a:
91:43:0c:de:ca:14:a5:be:5d:52:5f:a1:8a:51:5e:
46:4b:97:21:fb:60:6a:50:2b:8b:4c:ba:45:2a:11:
38:07:8c:49:01:ac:4b:d8:e4:6b:39:91:64:41:d7:
ac:32:75:93:28:67:60:d3:f1:92:9a:2f:95:35:9d:
7d:91:60:d5:2c:69:4a:1e:0a:de:da:0d:5f:89:da:
16:a6:d2:f5:bc:6d:1c:cc:47:42:34:32:f9:39:7b:
20:ae:a0:e8:8f:3b:24:98:c4:f3:71:d4:c6:31:b8:
6b:e1:c2:c1:09:4a:c4:ad:31:4a:56:5e:c8:ea:b2:
2f:e4:51:96:cc:fd:70:29:65:f5:b9:51:39:a9:9e:
03:2b:5a:1c:a3:ef:38:07:0e:2d:29:ed:3c:4e:13:
16:38:b4:70:3a:88:1f:09:d3:77:4d:7b:f3:fc:20:
f0:74:e2:7f:29:fe:1e:14:18:b9:c6:eb:5d:28:28:
7d:b1:40:54:1d:12:93:b9:f8:79:ea:90:c9:bb:72:
0e:f3:51:d9:18:54:93:e0:72:bd:bd:77:5a:b0:67:
d3:c6:b3:f9:91:ee:80:28:97:c6:00:b5:ba:37:4d:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:7D:AF:88:E4:7D:D7:16:87:CB:5B:E0:86:C9:F0:92:EA:BE:18
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
be:73:5a:6e:4e:a1:95:08:8c:7c:f7:6d:04:c2:54:f5:d8:79:
62:75:2f:98:14:ca:cb:68:76:a8:58:9d:bc:d0:be:83:6b:36:
4f:bb:c9:20:2b:b0:49:e9:2a:7e:78:6b:a1:ed:29:65:d4:60:
79:36:fd:a6:35:02:14:43:70:33:86:62:bf:5b:c9:5e:f0:66:
7d:07:72:79:a5:a7:24:ba:f5:50:34:eb:c1:97:9a:71:bd:36:
66:58:08:d8:1d:cc:75:aa:37:e1:ac:af:dd:05:7d:10:c2:eb:
1a:31:b3:96:19:c4:ca:a3:03:fc:5a:c5:de:e7:cc:0a:0d:67:
84:91:3b:aa:e4:67:ae:9c:bc:f3:87:5b:41:66:d8:8a:2a:f8:
8e:a0:6c:4a:26:b5:e1:cc:f7:a8:ec:cc:ec:94:5b:02:2a:e2:
fc:8e:4a:9f:ac:98:74:1e:0d:2f:4b:c5:1b:d9:cc:94:4b:55:
ac:4f:8c:2d:d7:7b:ae:74:3e:d6:66:f9:e2:70:d1:4a:40:d0:
f7:e2:4e:23:41:a7:08:6f:aa:db:36:49:14:30:6a:6a:ed:22:
40:fc:97:8f:e7:59:ed:96:39:1f:b2:01:29:19:4e:75:af:e0:
b9:7c:0f:24:db:49:da:17:df:72:0f:d6:4d:ee:15:ec:a7:30:
d5:e7:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:09 2025 by rpki-client