Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X1-hk_Pr26AubPAj46SwfjdTAwk.roa
File: X1-hk_Pr26AubPAj46SwfjdTAwk.roa (raw, json)
Hash identifier: sQqVrNNKq/+VOlFh8E4YYWAY0dfkDrx8IAMh34uNKq0=
Subject key identifier: 5F:5F:A1:93:F3:EB:DB:A0:2E:6C:F0:23:E3:A4:B0:7E:37:53:03:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BD584116661A18AA46507D9528BA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X1-hk_Pr26AubPAj46SwfjdTAwk.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 45.8.94.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bd:58:41:16:66:1a:18:aa:46:50:7d:95:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5fa193f3ebdba02e6cf023e3a4b07e37530309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:6e:1b:ab:43:6b:4d:7c:25:d6:d6:b3:23:
46:6c:7b:9a:7b:c9:e8:b4:0f:26:e8:a4:ad:b9:d3:
ae:f2:62:f8:e9:8f:d0:81:7c:cc:03:eb:73:18:16:
41:3e:76:c2:e4:ad:1f:71:ed:83:2e:f4:ea:5f:6a:
eb:13:05:56:72:be:89:73:69:73:54:ab:37:32:bf:
2d:9b:25:a4:93:32:ba:92:9a:8b:d8:29:a5:bf:f9:
33:9a:4c:3d:65:b9:aa:61:c5:7a:10:28:f7:dc:f4:
cc:c9:3d:17:83:fa:e6:d7:3f:fb:1f:72:e0:40:5b:
cf:bc:a8:0a:82:f1:d7:c5:79:ca:8e:0f:1f:fa:8a:
7f:5b:e2:63:0c:75:41:79:21:a4:e2:27:47:ee:fe:
ef:c3:f2:62:12:c8:6f:82:aa:f9:be:17:8e:97:0f:
74:51:5d:4f:5d:29:e0:7a:e1:c4:74:c9:46:6f:4b:
6d:0c:e7:4c:b3:1a:6b:4e:ab:8e:75:e3:34:05:7b:
b2:c8:2c:32:d8:37:63:e3:6d:19:9b:ab:ba:27:8e:
f0:60:3a:0d:91:09:bb:3b:f5:30:f1:06:5f:a4:92:
f9:28:88:64:f0:01:5e:5f:5a:86:c9:d8:f0:2f:c7:
20:f2:fd:67:60:ec:af:0b:ec:25:a0:7c:80:bd:9d:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:A1:93:F3:EB:DB:A0:2E:6C:F0:23:E3:A4:B0:7E:37:53:03:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X1-hk_Pr26AubPAj46SwfjdTAwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f6:a0:fc:48:dc:bf:55:c0:4e:11:1c:ce:e5:9e:ba:46:c4:
cc:4f:82:54:36:8c:c3:22:b4:09:77:e9:57:02:71:3a:5d:86:
12:14:53:78:89:26:bc:f6:cc:c6:73:33:cf:04:77:21:f5:76:
4b:06:7d:fc:30:02:cd:71:9b:23:ea:9c:db:b3:8f:8b:6d:be:
1b:56:7b:fc:92:48:29:db:15:f6:64:92:30:bd:8e:04:5c:d7:
d0:09:6b:65:92:4b:bc:ac:64:5d:ba:e8:93:d0:3d:08:b5:da:
56:be:db:63:55:89:9a:42:e0:84:0c:dc:dc:02:c4:67:dc:b2:
e4:82:fe:a7:59:09:30:d7:0a:dd:86:15:c9:77:f0:b7:90:7c:
1e:c7:a1:3c:60:a9:10:d4:39:b3:74:ae:02:2d:f2:01:49:32:
51:1f:0f:78:99:d2:30:23:f8:b3:91:1e:62:3c:3a:64:ba:9e:
ed:f8:d6:95:ff:0e:a5:80:50:ec:67:3b:2c:c9:28:34:54:a5:
6c:c8:79:d3:3e:96:9e:f6:23:27:d1:a5:09:25:aa:d0:d6:e5:
0e:fe:c7:68:df:52:6c:ca:39:04:6d:9a:dd:05:11:0a:85:68:
43:59:8d:5c:97:07:ec:80:06:24:cc:99:02:95:b9:00:f7:01:
cf:a4:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:41 2025 by rpki-client