Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Hm-lmELdCkUrobpw9rxuCZKCJXI.roa
File: Hm-lmELdCkUrobpw9rxuCZKCJXI.roa (raw, json)
Hash identifier: pK00uBSZqigGbHK8mGvuKJnHPWRoaV17d7OH/3uB5oA=
Subject key identifier: 1E:6F:A5:98:42:DD:0A:45:2B:A1:BA:70:F6:BC:6E:09:92:82:25:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BD1C56C70B3309343C642C908C1E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Hm-lmELdCkUrobpw9rxuCZKCJXI.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211437
IP address blocks: 87.120.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bd:1c:56:c7:0b:33:09:34:3c:64:2c:90:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e6fa59842dd0a452ba1ba70f6bc6e0992822572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:f4:50:83:18:a0:4f:cc:32:b5:32:2e:63:
b7:9c:d3:37:d2:e0:ee:63:03:18:26:0b:7c:ca:e2:
bb:96:e6:aa:90:3f:a1:db:42:20:57:6b:02:d0:dc:
f5:17:17:a8:54:12:20:7a:f6:82:a3:83:91:9a:4a:
10:0e:4b:75:3a:6a:9b:a4:e5:6f:e3:06:a7:ac:bc:
fd:99:de:85:a0:a8:51:d5:99:37:c4:e3:be:31:d0:
e7:f5:b1:33:9a:24:d9:8b:ab:2d:ec:7d:a6:ae:6a:
24:6e:a3:e8:0b:b3:09:61:7f:90:c8:3d:3e:4e:bb:
59:e9:bc:b6:f8:94:a1:76:20:75:c1:ec:cc:ab:b6:
a9:b2:0a:cf:3f:a2:2c:93:e4:c1:4c:98:a9:73:0c:
b5:d7:1b:97:68:09:74:df:68:1d:4b:7e:39:88:2d:
a5:8f:fd:14:3d:a0:a7:3b:05:a8:80:a8:e9:04:de:
f7:31:4e:6d:a8:4c:a2:0a:3c:3b:9b:09:2d:58:31:
5d:26:33:66:b6:f0:d8:0d:32:2f:01:6c:58:b5:bf:
8d:5a:15:bf:40:43:bc:0a:80:35:39:b5:3e:ee:04:
ae:1a:7f:27:ae:05:ad:6e:f1:56:38:40:01:31:2c:
3e:59:82:00:b0:de:c4:a4:81:9a:f1:9f:e4:21:5b:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:A5:98:42:DD:0A:45:2B:A1:BA:70:F6:BC:6E:09:92:82:25:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Hm-lmELdCkUrobpw9rxuCZKCJXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.5.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:36:6e:36:08:ff:b7:59:ed:52:fc:5d:5c:8b:65:e6:e9:
9b:4b:e2:f3:af:b0:e3:a0:b7:fa:06:c8:3f:f6:3a:a8:57:85:
f3:58:f9:6e:0d:a5:bf:07:31:7f:66:ed:4f:62:46:9f:12:23:
10:ba:68:01:08:07:91:2d:82:ee:f2:03:24:ae:5f:54:2d:b3:
64:50:74:44:76:4c:cb:3c:f2:56:6d:c1:f0:14:d8:73:d7:62:
ed:0f:3c:41:e0:af:a4:11:de:05:d3:5e:10:d2:bd:52:0e:9f:
d6:de:fe:99:75:5d:96:75:4e:66:61:0b:cc:65:96:8b:b6:7d:
91:36:20:b3:67:e9:be:9a:c0:a3:c3:7c:21:2a:26:ac:57:8c:
ed:4b:8c:3a:50:64:54:9e:97:f6:60:f0:7a:7d:5b:c1:e1:7b:
6a:ed:e8:cf:0f:94:1a:87:16:1a:4e:73:83:b6:1c:fc:63:c4:
40:c2:a5:e8:07:e4:30:87:8d:ac:18:27:59:4a:fb:f4:b3:a7:
14:36:1d:61:28:09:23:07:b9:bf:11:34:80:d8:fa:3d:0e:fe:
ad:52:29:4b:4f:3f:6c:20:c3:d5:f8:ac:67:f4:b9:29:f5:cd:
e0:18:67:8b:77:03:f1:29:72:72:90:9a:f4:a0:93:36:52:a3:
ec:25:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:31 2025 by rpki-client