Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/HJWy01pqJrtg2Vo5SudbPdEEkd4.roa
File: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (raw, json)
Hash identifier: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=
Subject key identifier: 1C:95:B2:D3:5A:6A:26:BB:60:D9:5A:39:4A:E7:5B:3D:D1:04:91:DE
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258CF670F4F6AA2578029CB9143166
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/HJWy01pqJrtg2Vo5SudbPdEEkd4.roa
Signing time: Thu 02 Jan 2025 17:52:17 +0000
ROA not before: Thu 02 Jan 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 185.102.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8c:f6:70:f4:f6:aa:25:78:02:9c:b9:14:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c95b2d35a6a26bb60d95a394ae75b3dd10491de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:33:34:84:56:5c:1f:18:35:4c:b9:04:d9:
3f:24:8d:87:eb:aa:a0:57:52:6d:57:66:16:52:1e:
2a:7d:f2:94:68:95:44:86:0c:f1:49:6f:ce:9d:ec:
27:ac:cd:c8:d6:05:95:c5:81:8e:c7:79:24:23:21:
3b:c1:a6:10:fd:11:aa:b7:d6:51:c9:72:f6:13:43:
1d:01:95:67:5b:d1:84:b7:20:66:b3:07:ff:4e:34:
22:6f:02:a0:80:63:26:05:e9:f8:d5:96:8e:ee:65:
27:ab:d2:eb:1e:7a:b9:36:d6:7c:4f:c5:62:2a:13:
69:72:8e:06:51:b6:c3:22:47:5e:00:cd:cf:3b:32:
95:ed:b9:d0:e4:c9:d2:81:c9:db:06:e8:7c:88:92:
74:11:92:51:37:c2:31:d2:6b:28:0c:2f:ed:5f:8f:
1a:cb:65:79:cf:57:a5:c1:c9:72:f1:a0:4b:93:7e:
cd:99:2d:06:ab:fc:85:69:6b:c4:0c:05:08:3c:54:
29:a9:99:e9:b2:d6:38:8a:89:23:05:aa:ed:00:64:
45:ff:e0:e0:d2:aa:18:15:87:da:2b:4e:61:30:80:
7f:d8:ca:be:87:2d:b4:d6:0b:02:7b:b5:70:53:2b:
ef:d1:a5:39:c9:99:e3:c4:d8:b2:92:d0:d1:df:6b:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:B2:D3:5A:6A:26:BB:60:D9:5A:39:4A:E7:5B:3D:D1:04:91:DE
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/HJWy01pqJrtg2Vo5SudbPdEEkd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:6a:6e:37:2f:52:53:4a:2b:c9:04:38:db:6a:d1:b9:95:bb:
15:ba:3a:a8:dc:fa:2f:82:5d:b5:b1:b3:25:cd:35:ca:6f:c1:
25:0c:cb:22:56:f5:d5:26:c1:c7:35:3c:f5:26:7a:d7:bf:b5:
18:f7:cf:bf:97:22:54:6f:ce:d3:48:e0:9e:d4:0a:b6:0e:c6:
d9:6a:16:28:6d:a6:1c:7d:18:6a:69:7e:be:e5:47:4f:44:ec:
08:b6:24:00:0b:cf:95:ca:0f:f9:b8:cd:36:60:17:1a:03:69:
ff:f1:5f:b2:89:86:68:f7:18:29:d5:f4:99:b9:73:20:ef:63:
42:78:64:06:31:ee:d3:5b:e9:03:8c:f2:35:b2:dc:a6:22:d7:
46:36:ad:84:46:c2:34:e2:1d:ba:90:60:57:1b:5b:3c:90:cf:
5b:97:04:0a:84:e8:99:43:3e:b8:f0:c8:00:ad:2f:a4:a5:b4:
90:a5:c8:18:ef:a1:4b:d9:0a:6a:f8:05:9b:1c:3a:5f:4e:69:
4d:4c:15:5e:09:b3:9b:22:29:f5:9f:c6:6c:5e:54:fb:b8:63:
7d:b0:e2:07:f5:60:ae:3d:e6:ec:3d:f8:96:fd:0c:8b:36:42:
a4:47:4e:30:77:67:37:9f:f7:8f:5f:f3:80:a3:cc:8b:ca:97:
54:cc:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:26 2025 by rpki-client