Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa
File: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (raw, json)
Hash identifier: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=
Subject key identifier: 85:9D:B2:C9:2A:63:42:24:CC:8D:9B:DC:85:A6:99:F6:7D:64:1A:51
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019423D807CF10A246B4785ED12FCB05F5F6
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.172.0/24 maxlen: 24
185.120.173.0/24 maxlen: 24
185.120.174.0/24 maxlen: 24
185.120.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:07:cf:10:a2:46:b4:78:5e:d1:2f:cb:05:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859db2c92a634224cc8d9bdc85a699f67d641a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:82:70:7f:40:0b:02:c6:29:dc:a2:4e:4a:
72:13:ff:34:1a:25:89:d1:ba:f5:a0:ef:08:ac:2b:
9b:5b:f5:a2:c6:cf:69:43:4e:8d:3a:c0:b7:7c:a7:
33:7e:3d:48:31:c5:f5:b9:4a:93:21:e2:7e:89:59:
a6:b2:23:a3:57:bb:84:6c:44:d6:ed:3d:0b:f2:0c:
49:42:79:29:75:a9:ce:75:6f:b2:11:df:fb:77:0b:
93:5d:ba:12:59:e5:11:e0:73:8f:f2:0e:ca:66:77:
a2:8c:15:66:bc:ec:3c:6a:6c:ca:85:9b:d4:fe:c5:
55:92:ac:47:f6:2f:9b:0a:fb:ba:85:ed:79:72:4c:
33:01:c9:6e:0f:b5:29:00:3a:39:b0:12:8d:be:ef:
7a:ac:be:af:61:a8:89:0b:c0:2b:d4:cf:3c:b3:6b:
a9:c5:58:a9:92:93:85:71:bd:dc:32:64:89:aa:00:
28:b9:54:46:42:43:f3:8b:87:a1:7a:e2:14:c5:65:
4b:42:fb:03:cd:3f:13:47:51:62:68:e6:93:f4:56:
e8:74:b2:40:96:e2:47:2d:43:a3:1e:8f:95:b0:15:
f2:41:2a:17:4f:ba:45:5c:b7:18:d9:45:87:6d:38:
56:cc:cb:df:48:ad:a0:39:e9:cc:65:c4:2b:89:a0:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:B2:C9:2A:63:42:24:CC:8D:9B:DC:85:A6:99:F6:7D:64:1A:51
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/22
Signature Algorithm: sha256WithRSAEncryption
20:db:85:98:78:f6:3b:44:6b:95:0e:4a:13:fe:5e:87:1f:75:
3c:61:9d:f4:b5:53:ae:c6:48:23:99:bf:df:ce:78:dd:a4:8c:
cc:e0:ca:0b:af:60:fd:00:ff:3a:9b:0b:c3:f8:e9:9e:99:da:
ca:7d:ba:6d:fb:99:c7:5d:de:dc:49:a0:e0:fc:67:4a:06:d8:
26:2a:00:e6:05:d5:94:d8:17:fb:61:20:86:33:3f:11:84:98:
92:17:1b:57:a0:03:7c:05:6c:88:3c:9d:b4:d3:97:75:f7:ee:
61:ae:84:17:03:d9:e9:fb:f9:a8:d6:d8:09:47:f2:a3:dd:f1:
89:f4:25:0d:81:6d:c7:a0:6b:da:53:18:a1:6f:d3:21:bf:93:
4e:01:33:90:66:a8:30:d8:71:46:8b:cd:6f:7c:01:c5:d9:fd:
b8:c2:1d:6a:e1:09:23:47:0e:7d:5b:af:c6:d9:e6:35:1d:f4:
d8:2e:12:0e:0d:03:09:6e:82:d9:12:8d:1c:45:87:4e:8e:b2:
60:d8:e3:af:eb:5d:b6:b9:f7:1a:42:a1:c6:3a:0f:fc:26:60:
28:92:99:ff:b5:c6:d3:c4:a0:10:94:44:e4:19:3c:15:b9:1e:
ae:4d:43:a2:ea:c5:43:2b:06:a2:e9:89:85:ee:c5:2e:cd:70:
1f:bf:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:45 2025 by rpki-client