Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa
File: hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa (raw, json)
Hash identifier: U+uMEedSAfXbzbJQ3timT2D+Xt35jjJYcQm0n0kPf30=
Subject key identifier: 84:E5:6C:F0:61:8D:5A:79:80:22:AD:92:A1:0B:D4:7C:5E:56:24:3A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B241DCFCD4D8E72DE165B9A5FEB821
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211028
IP address blocks: 94.125.98.0/23 maxlen: 24
185.78.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:dc:fc:d4:d8:e7:2d:e1:65:b9:a5:fe:b8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e56cf0618d5a798022ad92a10bd47c5e56243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:1d:54:2e:30:69:de:09:f6:7e:b7:09:3e:
ba:9c:5c:88:90:3f:63:7e:9e:97:0f:8d:9a:f9:98:
e9:26:a1:8f:96:58:7a:4f:fa:22:7f:d9:e0:c8:9a:
2f:e6:11:0f:0e:f7:5b:aa:cb:c0:59:24:31:cb:9b:
95:16:89:11:1e:b5:3c:54:2a:25:d1:18:b7:07:79:
6d:2e:d1:81:5c:0d:95:97:cc:f7:35:a5:ce:01:25:
ea:93:7e:be:d9:c8:2a:be:33:5d:48:7e:bb:90:0c:
9c:88:40:c8:c9:69:4e:77:d8:b8:63:4a:98:a3:55:
ba:e1:30:df:ee:94:80:34:08:63:00:9d:04:9e:14:
0c:16:43:cc:14:48:18:9d:24:8f:98:89:82:e8:5f:
4a:5f:79:73:98:4e:61:36:df:da:0b:20:07:32:7c:
7c:c1:5d:1e:4b:6c:07:97:fe:a0:07:17:f3:2b:b2:
90:a0:c9:96:6e:22:e8:b7:69:00:83:ad:90:16:23:
25:5e:21:fa:11:ff:5c:44:41:ca:97:16:17:de:1a:
b1:04:92:63:92:22:3b:9e:2e:2b:71:2f:8f:3b:3c:
57:09:b0:c8:89:0b:7e:c6:a2:98:ff:83:dd:3b:86:
a5:00:9c:a3:91:f6:e7:7e:0c:e4:71:08:e7:ec:21:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:6C:F0:61:8D:5A:79:80:22:AD:92:A1:0B:D4:7C:5E:56:24:3A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.98.0/23
185.78.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:bd:98:f6:cb:18:65:83:bc:95:09:cb:09:e2:58:aa:88:06:
52:d7:4f:8a:46:ad:d7:7d:dc:ed:dc:7b:83:75:32:95:82:cb:
3d:1b:0e:bc:58:fc:cc:ff:83:aa:6b:c3:df:c1:fc:a3:da:45:
5f:bd:a2:79:46:1b:9e:72:43:46:2b:18:cd:a7:93:f4:2f:c2:
0b:25:e9:ba:fc:dd:6f:f6:95:95:b0:97:b0:d0:b6:56:8b:b4:
1e:36:31:52:b9:9a:ea:84:15:b2:2a:3a:3a:1c:be:90:c9:77:
54:73:52:8d:d5:43:a8:3f:bc:7b:0c:f2:9c:5b:71:5a:bc:47:
9c:67:c9:98:23:b3:58:08:6e:17:7a:d1:48:82:bc:87:ab:a7:
90:96:18:b6:c0:d5:3d:6a:ec:1b:28:58:bf:fc:e8:97:e2:8d:
f1:ff:27:68:6f:99:0f:a6:d7:e4:be:24:77:35:81:67:26:20:
2d:c9:ae:22:1a:08:3b:04:0b:fe:e7:42:27:7e:07:86:63:a6:
e2:72:39:aa:4a:38:c5:5c:6a:5b:37:bd:d3:a9:52:c0:3c:01:
b7:8b:67:0c:98:ce:08:bb:dd:86:24:6d:32:64:b5:7d:f1:fe:
4e:5e:f4:0c:92:52:f9:9b:38:bc:3e:be:5d:4c:6a:e9:b0:d8:
33:45:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:58:58 2025 by rpki-client