Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/hdB-JXdXye4ZBva1IafIEMe8-fA.roa
File: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (raw, json)
Hash identifier: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=
Subject key identifier: 85:D0:7E:25:77:57:C9:EE:19:06:F6:B5:21:A7:C8:10:C7:BC:F9:F0
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019422FC36674ED944BF8908B861CEF6CBF4
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/hdB-JXdXye4ZBva1IafIEMe8-fA.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149766
IP address blocks: 81.31.234.0/24 maxlen: 24
185.84.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:36:67:4e:d9:44:bf:89:08:b8:61:ce:f6:cb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85d07e257757c9ee1906f6b521a7c810c7bcf9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:7f:44:c6:fd:d8:84:b1:30:fe:7a:f6:62:
54:1d:bb:70:73:63:97:51:c6:fd:68:99:b5:f4:ec:
e9:21:0d:ea:76:5e:76:3c:ec:42:64:07:d0:67:91:
7b:d2:0d:e6:0c:76:4b:23:26:bb:9e:d2:7b:29:b3:
c4:c6:24:28:e2:e4:5f:f1:d7:93:c2:60:64:22:52:
e0:03:6d:8e:54:1c:76:67:4b:fc:f7:2f:a8:9a:c2:
94:d9:d7:9b:2c:75:73:f2:24:1a:4e:10:a6:69:f3:
a2:20:ee:08:f7:3d:35:e4:06:80:3d:39:d2:66:4a:
31:b8:69:df:75:85:c4:8d:bf:9c:db:e8:d3:af:8d:
65:58:84:35:97:6e:ab:75:32:38:eb:e0:78:1f:9a:
43:f5:22:f1:af:a1:2d:46:39:2f:29:b8:2f:f1:62:
58:05:d3:74:92:83:0b:44:cf:c9:d6:a1:e4:29:cd:
7d:13:0f:46:7b:0f:32:0a:80:9b:f8:41:f7:2a:26:
d8:f1:41:a5:da:e8:1b:7e:6c:e9:39:85:f0:c5:c7:
66:4f:1b:fd:82:9c:45:46:ae:24:03:db:13:ca:75:
4a:78:73:ff:da:1b:d4:c6:7d:11:27:85:aa:3c:9a:
d1:93:79:4a:04:f5:ff:55:4a:c1:23:c5:8b:d0:14:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:7E:25:77:57:C9:EE:19:06:F6:B5:21:A7:C8:10:C7:BC:F9:F0
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/hdB-JXdXye4ZBva1IafIEMe8-fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/24
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b0:d6:05:0d:51:4f:80:1b:25:ea:6c:c3:32:2f:a3:c8:76:
ab:03:f9:47:f1:3f:a3:93:88:09:fa:b4:9a:69:f2:1a:a1:0a:
d0:8b:00:96:3c:54:1c:dc:41:88:c0:29:3f:ab:66:fe:a1:62:
f7:df:3f:a6:3f:16:6a:57:f8:f6:4c:1e:e1:cf:45:d1:52:26:
63:9e:0d:f3:c5:a1:4f:c9:3d:fc:94:d3:94:15:dc:ab:5a:0c:
b2:54:dd:c9:0f:8c:6b:8a:a0:fb:63:fe:22:7e:23:0e:f8:64:
1c:49:e5:9f:ad:c9:47:a3:0e:4b:07:3b:27:74:f0:3b:8b:d4:
c7:e3:23:47:3b:a8:19:61:c0:6f:bb:c9:d3:09:aa:de:ea:c3:
a7:37:c4:bb:0a:61:67:bf:2b:d6:3b:90:27:77:de:ff:f6:68:
0e:28:5e:98:13:ec:7d:5e:93:59:95:4f:5a:7f:26:e7:59:c8:
92:d0:28:eb:41:00:d6:46:cd:42:7c:40:f3:06:5f:b3:62:64:
90:01:24:ae:f8:39:ac:f1:d0:86:9e:22:3f:90:c7:60:9a:49:
c9:1b:ea:a7:73:3d:bd:8b:f8:90:1d:0a:5d:7c:39:77:37:06:
54:e3:b8:fa:46:6c:cf:6b:89:56:9f:90:82:99:63:78:8b:5a:
96:7c:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:43:36 2025 by rpki-client