Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/HrLnTFOPuXGJZKS7rlmaWMaB12U.roa
File: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (raw, json)
Hash identifier: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=
Subject key identifier: 1E:B2:E7:4C:53:8F:B9:71:89:64:A4:BB:AE:59:9A:58:C6:81:D7:65
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019421446FAFC8DEBBE25C8FC4332A7FD676
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/HrLnTFOPuXGJZKS7rlmaWMaB12U.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 79.143.137.0/24 maxlen: 24
79.143.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:af:c8:de:bb:e2:5c:8f:c4:33:2a:7f:d6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eb2e74c538fb9718964a4bbae599a58c681d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:b1:87:b0:f6:0a:e5:f0:53:01:ca:14:9e:
4d:40:38:25:ea:0a:6b:0f:41:36:71:55:44:32:3f:
61:2b:26:56:bc:79:99:9a:84:ba:db:87:40:18:1b:
64:66:32:e6:29:c8:64:ec:6a:29:00:4d:df:78:68:
22:9b:c3:8d:27:0a:5c:ca:9e:ea:51:6b:5c:19:c3:
da:cf:62:5f:00:38:df:af:91:f8:63:f6:34:b1:77:
6a:22:7f:04:85:ea:42:ea:9c:b1:80:82:f9:e9:6b:
09:eb:38:cb:69:6a:99:be:81:7f:fc:88:cf:c4:1b:
47:b7:ba:42:56:e3:cb:21:3e:0f:38:6a:ed:be:00:
45:11:73:05:f8:a2:a8:d1:5f:36:26:44:c8:e0:2b:
f4:23:d0:c6:df:50:44:bd:5f:98:04:07:38:2b:d0:
17:1a:19:44:c8:26:d9:e8:1b:e4:0e:0e:76:0c:d9:
2f:63:ea:13:20:e0:fc:be:20:31:38:cf:d6:57:24:
20:e9:a0:18:02:0d:90:bd:fe:bb:32:d7:53:7e:14:
4d:60:28:15:fb:ec:8a:ca:a3:a7:fa:64:0b:1d:8d:
95:d2:a6:2b:a3:5c:9f:99:2c:a2:9d:26:e6:0e:b6:
80:17:5b:57:62:65:50:0d:bd:8e:47:7f:5b:35:5c:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:E7:4C:53:8F:B9:71:89:64:A4:BB:AE:59:9A:58:C6:81:D7:65
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/HrLnTFOPuXGJZKS7rlmaWMaB12U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.137.0/24
79.143.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:52:b5:0f:e2:23:36:3b:9d:f9:bf:70:9a:30:4e:b7:92:80:
eb:f7:22:40:00:4f:1d:25:de:29:2f:f5:1d:6d:ee:e2:b2:e3:
ba:8a:eb:38:17:b3:b0:53:26:91:7d:82:c2:2b:bf:f6:fd:a4:
7c:54:3f:24:9a:37:e6:e1:f5:5f:a0:84:ad:2d:69:4f:7e:66:
fa:cf:e1:71:8e:23:13:8e:1d:c3:4e:b0:14:27:b1:f3:0a:a5:
5e:d6:af:a6:ca:a9:50:aa:ce:ed:a9:39:7f:da:75:38:36:4c:
f0:e1:58:cb:e2:8c:44:35:25:38:58:c9:ba:46:32:c7:cf:c5:
28:6e:e0:4a:7c:39:62:65:d8:04:fe:dd:28:5a:22:d9:d2:bd:
5a:2a:a6:ac:ae:fa:5f:c8:88:a9:55:19:1f:e7:b1:d2:3d:5d:
31:9a:56:2d:83:72:9c:69:24:ca:a7:50:d7:30:e2:fc:ee:82:
5c:6f:19:21:e1:76:f5:78:1f:32:8b:6e:55:45:f8:40:70:8b:
f3:56:b2:e1:46:49:ee:45:47:56:eb:82:92:9c:af:46:95:b7:
9f:88:fc:2e:90:5f:af:a4:69:e8:70:e5:9e:f1:b0:06:0d:04:
fe:9d:d5:91:1a:64:48:93:b1:91:38:0d:6c:5c:b7:9a:c6:04:
da:cd:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:20 2025 by rpki-client