Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/hZQ03z7hQseGqeqTK23z9sR3KoU.roa
File: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (raw, json)
Hash identifier: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=
Subject key identifier: 85:94:34:DF:3E:E1:42:C7:86:A9:EA:93:2B:6D:F3:F6:C4:77:2A:85
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01942444AA3BE2428C2ED9A69633F32331D3
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/hZQ03z7hQseGqeqTK23z9sR3KoU.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41887
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:aa:3b:e2:42:8c:2e:d9:a6:96:33:f3:23:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859434df3ee142c786a9ea932b6df3f6c4772a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:73:27:da:af:12:33:d8:a0:2b:19:43:12:
ee:ce:bd:be:80:37:b2:1b:b5:c3:00:60:b7:07:a1:
c5:4a:03:f7:32:08:1a:ae:fa:f5:20:18:96:e5:ee:
ee:6e:ab:7a:40:90:9b:06:c2:c9:f8:28:c5:ac:e7:
bc:63:c7:98:8c:a7:f7:8e:a9:b7:01:ac:0f:b3:9f:
11:0a:ed:e7:43:98:4a:f6:92:aa:e8:a3:ef:3b:7c:
00:6e:72:3d:5c:c6:2e:cc:33:af:e7:9d:d3:86:0b:
01:e7:5a:d8:50:ab:81:c5:2f:84:78:51:96:a6:74:
2b:74:b0:52:b7:8e:a7:37:ff:4d:86:f3:af:a9:55:
3a:96:c6:b2:4b:78:7f:07:3c:2b:72:c6:fc:f6:e2:
46:98:65:a7:48:9a:a0:4d:ae:04:e4:3f:64:2e:16:
39:60:f7:13:07:99:e4:e0:a9:ce:c1:a6:50:ad:92:
2a:36:9f:c3:28:f1:ae:99:9b:71:30:a3:87:e2:d4:
e4:c9:bb:23:b2:04:5e:fe:79:7b:b6:78:83:6a:06:
9c:48:c6:da:05:cd:49:b9:ec:34:43:22:53:ac:20:
16:96:c6:85:ed:64:18:14:9c:f7:41:5c:07:92:8a:
53:0d:a5:09:6c:70:50:7b:74:6c:1d:0a:da:2e:be:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:34:DF:3E:E1:42:C7:86:A9:EA:93:2B:6D:F3:F6:C4:77:2A:85
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/hZQ03z7hQseGqeqTK23z9sR3KoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4a:15:0e:ac:13:91:ec:0b:8a:7e:24:75:6d:6a:d4:35:c4:
c8:b2:f6:a9:45:25:94:e7:77:3c:43:76:ea:bb:72:51:7a:58:
86:68:96:db:d9:07:20:de:d9:f8:77:76:2b:f5:93:11:25:d0:
f3:35:91:a2:13:12:31:4b:2d:66:2f:bb:7f:cd:35:32:7b:d1:
57:b9:6c:4f:cd:24:95:aa:5d:54:60:85:02:4c:3b:69:de:9a:
fc:cc:bf:04:46:cb:70:44:6c:0a:f6:58:69:51:90:bc:ab:cc:
0b:7d:9c:9a:71:b4:51:26:89:df:b4:bc:ba:75:26:c6:cb:45:
d2:2d:b7:85:71:8d:71:8d:1e:f0:d8:df:1f:25:f8:f0:c5:d3:
3e:08:e3:5e:e7:70:69:dc:38:d2:aa:13:74:4a:3c:b2:63:e4:
ce:a6:2a:cd:18:32:45:75:59:74:4c:3e:8f:50:05:2f:80:ed:
f7:98:9b:34:0f:f8:af:07:b5:88:cd:00:42:aa:d1:1a:6b:ea:
38:5c:ba:63:87:db:bb:e7:27:22:fe:88:d0:73:af:d2:0d:8c:
b8:e3:ad:17:65:b1:a8:2f:0c:49:f2:18:d4:b0:f8:0a:94:e1:
d7:51:a5:d8:4f:3e:4a:32:98:65:a5:41:88:e0:80:a0:ed:66:
ba:98:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:18:21 2025 by rpki-client