Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HgVzqiDMZ8Vc6KB3XJObFOVDRC0.roa
File: HgVzqiDMZ8Vc6KB3XJObFOVDRC0.roa (raw, json)
Hash identifier: nCuHl6oWRNlw6UG3DaeGiBku6QU554KA1I3WsefsqG8=
Subject key identifier: 1E:05:73:AA:20:CC:67:C5:5C:E8:A0:77:5C:93:9B:14:E5:43:44:2D
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019420D63767B5AAF5C9595854DB40FB1A01
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HgVzqiDMZ8Vc6KB3XJObFOVDRC0.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137922
IP address blocks: 2a03:b8c0:11::/48 maxlen: 48
2a03:b8c0:17::/48 maxlen: 48
2a03:b8c0:18::/48 maxlen: 48
2a03:b8c0:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:37:67:b5:aa:f5:c9:59:58:54:db:40:fb:1a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0573aa20cc67c55ce8a0775c939b14e543442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:47:a4:d5:c1:6b:37:aa:87:10:b0:d7:ae:
21:fe:fe:6b:52:05:2e:93:45:65:3f:a3:04:ba:8c:
b2:37:5e:1f:64:65:44:88:2c:01:b9:69:f7:a0:b4:
6f:f7:c4:0d:b3:84:62:1c:1f:6e:66:1b:7f:7b:0c:
4c:4e:01:81:7c:83:90:1d:cc:b4:8b:67:82:3c:b7:
67:2d:80:99:72:9d:3d:f0:89:88:6d:0d:9a:66:40:
90:fd:93:d3:7e:5e:d4:4d:0e:61:61:24:60:ee:6f:
3a:d2:d0:74:f5:e0:22:54:05:3d:10:c6:97:3c:3f:
c7:93:65:ac:98:7b:85:65:80:ed:43:3a:7e:e0:3b:
84:3b:62:a1:ff:68:32:a8:1d:41:27:c1:5d:f9:0d:
4e:15:1a:d4:48:39:71:33:de:44:0f:0e:5d:09:13:
78:07:19:87:45:ee:cf:fc:06:07:47:18:9a:d5:a2:
64:70:7c:90:99:d1:9d:ca:ed:f2:f4:8d:19:d3:22:
c5:1a:8b:5e:1e:ce:97:14:7a:af:a6:a4:c3:c7:f1:
0e:b5:50:b0:dc:d0:92:6c:43:46:d1:c8:b2:93:44:
f2:70:ac:32:62:c2:bf:f5:18:dd:63:bd:ed:46:78:
be:ad:71:ec:65:26:3f:a7:67:5f:d5:a8:8c:a9:b7:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:73:AA:20:CC:67:C5:5C:E8:A0:77:5C:93:9B:14:E5:43:44:2D
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HgVzqiDMZ8Vc6KB3XJObFOVDRC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:11::/48
2a03:b8c0:17::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:27::/48
Signature Algorithm: sha256WithRSAEncryption
55:59:85:92:b9:1d:6e:15:f4:80:1b:bc:ef:9a:19:f8:ba:f4:
67:f1:d3:90:c5:a3:36:07:f4:e6:c3:f7:c0:11:3f:ac:60:32:
ca:c2:5f:75:4a:35:75:88:a6:55:70:3b:8e:4e:5c:41:da:c1:
11:7d:a0:69:6d:30:21:4e:30:01:9b:c6:8a:7a:14:d7:ce:d1:
4c:5c:41:8c:ab:d8:86:3d:17:de:2e:c7:b7:19:50:b1:9e:d9:
4f:6d:ad:f5:a1:f7:15:bf:4f:d9:0b:b8:fd:e5:a3:ad:fe:dd:
fd:61:60:d6:56:aa:90:33:3e:e3:e6:13:f1:c7:27:bf:b3:a4:
13:bb:ea:e9:54:ec:87:fe:a8:0d:f2:b9:00:83:19:98:13:6e:
21:4b:cc:9a:96:87:a7:c9:ec:d6:e8:09:ee:b0:fd:16:0b:14:
0d:6c:17:0c:a8:33:d9:76:b5:cb:ef:79:07:97:6d:6e:d6:8a:
e7:68:05:80:81:60:63:dd:39:fe:f8:9e:05:3b:0f:70:24:66:
1d:93:5d:8e:37:47:48:4f:7f:f5:b3:8a:39:cc:16:c8:cc:46:
56:80:96:94:dd:0c:8e:ef:3a:a3:8f:8f:bd:b0:e2:da:26:0d:
27:6d:85:c9:22:43:98:90:05:92:3f:b1:ed:c8:c2:5d:63:21:
b5:f6:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:27 2025 by rpki-client