Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/H0c0iaohuwDRjCnDKysbTdg-WUw.roa
File: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (raw, json)
Hash identifier: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=
Subject key identifier: 1F:47:34:89:AA:21:BB:00:D1:8C:29:C3:2B:2B:1B:4D:D8:3E:59:4C
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 019427B621FEF97887A813CCFA886AED8B80
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/H0c0iaohuwDRjCnDKysbTdg-WUw.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56919
IP address blocks: 176.32.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:21:fe:f9:78:87:a8:13:cc:fa:88:6a:ed:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f473489aa21bb00d18c29c32b2b1b4dd83e594c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:70:c3:28:87:f1:43:f9:69:cd:37:90:92:
1e:1a:9f:fd:de:7d:c9:b5:01:bb:09:af:4a:14:7f:
a2:41:48:de:43:59:5a:41:f3:b2:ff:3f:3c:70:de:
05:08:3b:7e:05:17:6b:bf:d8:d4:68:35:7a:63:b8:
53:46:a2:7a:02:1e:74:fb:68:70:32:4d:85:4b:9c:
ee:36:ec:d3:b9:3d:fb:63:fe:01:d1:c6:3b:1f:22:
e4:97:e8:a4:b6:de:bf:64:b3:c6:a8:c4:bf:ca:79:
1d:2b:b9:58:e7:7c:d3:42:43:be:04:c9:a4:67:a7:
4e:45:ea:a2:4b:cc:93:e4:fb:01:ad:70:fb:44:a4:
ca:d4:5a:c8:0b:46:80:e8:e1:fe:88:d5:81:24:c4:
e6:8e:77:9d:b4:52:c4:d5:1c:fe:52:4b:4f:14:e7:
b1:5b:44:3f:76:00:b7:7a:30:f7:9c:f6:b7:38:a3:
08:0c:3a:cc:77:87:6f:8b:8d:6a:8f:3b:f8:a6:a3:
34:29:29:6c:c6:41:02:70:4b:8d:8e:f3:9a:84:24:
67:20:ce:16:2a:1c:34:58:6b:d8:44:c8:93:45:29:
5e:9a:ad:a6:ad:2e:7f:16:31:73:9f:7b:2e:3a:2f:
86:62:4d:a2:cf:65:c8:fa:fa:80:9a:41:c5:53:f8:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:34:89:AA:21:BB:00:D1:8C:29:C3:2B:2B:1B:4D:D8:3E:59:4C
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/H0c0iaohuwDRjCnDKysbTdg-WUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:62:cd:0a:7c:d5:8e:a1:ff:0f:29:91:f9:2b:94:94:37:a4:
6a:e4:2f:52:b0:f3:e4:5d:1f:0b:53:2d:7b:e8:ed:19:d9:3d:
8b:bd:82:f5:69:79:67:ac:db:58:a2:14:85:23:be:10:03:7a:
d7:52:21:60:e1:7d:e4:85:69:b8:bb:ce:1c:21:31:53:05:85:
ef:04:b4:8c:c9:4d:5d:57:56:7f:61:7b:57:22:b6:e6:23:9b:
41:4d:8b:3c:f1:93:88:ce:f0:85:75:b0:ff:0f:2e:5e:fd:cf:
0c:48:9e:49:26:2b:ba:30:65:05:8a:04:16:cd:ff:d2:38:e1:
df:f4:9c:eb:37:1f:2f:9d:c5:62:2f:9b:7f:c8:95:0e:9c:bf:
c6:e4:c9:e1:12:18:2e:ec:02:bf:45:05:77:84:a7:d6:aa:bd:
5d:fe:a2:85:a1:71:01:1d:7a:65:85:05:52:23:ae:28:3b:75:
58:75:49:a0:3b:af:d4:47:77:d4:01:56:62:f2:db:4c:5d:0e:
e4:d6:5a:bb:76:16:2b:b3:7d:25:20:22:1b:c3:ed:3d:f5:f2:
18:db:b0:0f:21:1a:a8:bd:35:72:a7:19:42:bb:0f:18:05:1b:
a7:46:3b:19:8f:ac:9b:d6:e4:88:be:77:9c:1d:39:1f:41:5d:
43:6e:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:01:11 2025 by rpki-client