Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HwlNwqPX1KzhwvMWICIM__0pefw.roa
File: HwlNwqPX1KzhwvMWICIM__0pefw.roa (raw, json)
Hash identifier: 7jIxKB96jeIjyoTdgI1MAMiLbkURiGRzQnSH4NMGq00=
Subject key identifier: 1F:09:4D:C2:A3:D7:D4:AC:E1:C2:F3:16:20:22:0C:FF:FD:29:79:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B723D91007EFC5430D67DEB90D32AAA9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HwlNwqPX1KzhwvMWICIM__0pefw.roa
Signing time: Thu 30 Jan 2025 12:16:07 +0000
ROA not before: Thu 30 Jan 2025 12:16:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215904
IP address blocks: 87.121.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:23:d9:10:07:ef:c5:43:0d:67:de:b9:0d:32:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 12:16:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f094dc2a3d7d4ace1c2f31620220cfffd2979fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:d0:34:44:99:43:8b:e2:0b:98:f3:a2:ea:
d0:23:e6:ee:6c:43:dd:49:f9:0a:ad:a9:8f:5d:a5:
6a:dc:eb:36:e4:ce:75:bc:b7:85:95:e7:e1:d9:df:
50:97:d6:ba:4f:e7:f9:e0:a2:80:08:7e:93:77:ae:
7c:f2:5e:1c:82:0e:2e:5c:c8:70:cf:e1:d1:10:d9:
b9:d9:5f:40:68:cb:c8:1e:5d:84:39:09:a7:9b:68:
bd:08:60:00:c3:4c:92:5f:56:2f:84:16:f6:a4:e6:
0b:a9:6d:c8:c8:93:f3:28:86:aa:78:75:c9:b5:bb:
8e:be:80:fd:40:87:d7:32:59:da:c0:a4:fe:05:ef:
08:79:1d:7c:7c:f1:9a:38:b4:34:55:bc:86:97:60:
31:34:f2:01:27:86:5f:da:4a:57:8a:b6:83:66:ee:
c9:e6:88:e7:dd:cc:39:0b:64:9e:58:0b:16:07:0f:
87:6d:a6:f6:76:24:ad:f2:35:c0:da:45:7e:bc:3a:
80:c9:7e:89:fc:a5:f0:28:f1:dc:3d:3f:5e:bb:cf:
6c:91:94:52:01:af:b9:4c:9d:60:0f:4f:fd:4b:71:
ee:c1:d0:e0:7c:e5:11:97:73:df:c1:b6:5f:8a:ae:
35:f7:e5:22:17:fc:88:24:6c:e6:c6:f0:f2:e2:de:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:4D:C2:A3:D7:D4:AC:E1:C2:F3:16:20:22:0C:FF:FD:29:79:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HwlNwqPX1KzhwvMWICIM__0pefw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.85.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f5:53:e9:6d:2e:2d:64:44:62:f6:b6:26:b3:c7:7b:1e:46:
36:e9:a0:fc:ce:2f:21:52:d9:cc:9a:e4:eb:42:45:ae:d4:0d:
93:c6:54:f7:c7:6c:b5:99:3e:19:25:fd:49:71:35:2d:03:af:
6e:ed:1e:82:13:3b:bf:b8:63:4d:85:be:3a:69:bf:ab:05:33:
bc:9d:df:4b:e6:0a:03:b7:09:74:b8:08:25:e2:a7:d2:f8:72:
b8:e0:4b:e3:98:07:2a:89:9a:5b:6c:82:6f:ac:2b:71:d3:c9:
33:ef:9e:45:07:04:48:fe:51:20:44:94:8c:a2:ce:2d:c3:01:
7c:b7:13:8c:15:4d:53:dc:24:5f:99:be:f8:68:ab:6e:8a:d6:
af:6a:8d:4b:fc:09:de:1c:20:21:ea:31:8d:91:5e:70:6b:07:
44:43:1b:0e:be:7b:61:33:a2:54:d7:55:58:03:53:a5:77:ac:
45:65:04:1f:da:cf:fe:f6:c0:97:47:03:35:62:f6:ae:03:b1:
7d:40:fb:5c:ba:65:ba:05:72:32:dc:8d:58:64:9e:06:6b:76:
50:6f:b6:52:e4:65:5e:f9:cf:21:d0:c2:f0:2a:08:6b:f3:3b:
41:df:51:4c:9c:81:07:2b:27:ed:90:43:d1:f0:09:c3:9f:a6:
20:a8:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:48 2025 by rpki-client