Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/dHcu1Xe1bMDTNim9SJl30JSk4hI.roa
File: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (raw, json)
Hash identifier: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=
Subject key identifier: 74:77:2E:D5:77:B5:6C:C0:D3:36:29:BD:48:99:77:D0:94:A4:E2:12
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019421B22A40673F8A3BDB28BB4C3F006535
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/dHcu1Xe1bMDTNim9SJl30JSk4hI.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212788
IP address blocks: 213.170.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:40:67:3f:8a:3b:db:28:bb:4c:3f:00:65:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74772ed577b56cc0d33629bd489977d094a4e212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:94:80:83:7f:90:30:63:c7:18:b3:e4:30:
72:83:ee:1e:63:4f:10:c0:ec:a1:c6:26:81:e0:9c:
22:bd:1f:ea:ec:d8:16:d5:1e:df:5c:d2:94:08:80:
e1:9c:d8:22:26:5c:95:de:36:96:65:61:87:e9:db:
fb:69:36:c6:eb:f3:af:3c:d8:36:75:b3:f8:74:45:
4e:51:c2:2c:db:8c:11:cc:0c:99:0c:f1:df:39:e4:
64:8d:db:a0:ea:a7:4d:20:83:e6:1b:2f:1e:b2:fe:
8c:43:13:62:2b:33:5c:1c:38:28:f9:e8:73:eb:14:
d6:c9:26:61:6d:90:99:8a:10:82:07:c7:bc:f0:64:
9c:bb:c8:5e:ea:16:63:8a:f1:dd:90:5c:76:c4:ae:
40:b3:00:ba:94:72:c1:2c:1d:c4:7d:a4:48:ad:9d:
c7:72:4d:59:fd:f1:10:af:f4:a2:53:82:78:16:06:
8a:6e:fb:af:7d:f3:13:2f:26:93:b0:bf:78:59:02:
89:36:99:17:04:b8:8b:5e:c7:83:7e:9d:7f:5e:d3:
73:88:e5:7d:fa:66:86:44:3b:d5:84:1d:a4:b3:b1:
b1:61:0f:20:ae:7d:48:11:5f:07:8c:51:89:f8:21:
ee:83:7c:84:dc:87:57:6b:82:39:d7:cf:99:1d:19:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:2E:D5:77:B5:6C:C0:D3:36:29:BD:48:99:77:D0:94:A4:E2:12
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/dHcu1Xe1bMDTNim9SJl30JSk4hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:35:fc:87:84:46:81:ae:ee:84:1f:4d:89:0f:ab:1a:f6:c7:
31:da:39:7f:0e:8f:cc:c1:d0:4f:7a:8c:3f:c6:06:f8:ae:8b:
4d:03:19:ed:3b:0e:61:17:b2:8e:59:e1:8c:71:a2:0d:fc:bb:
5e:6d:12:96:3d:6a:54:ad:c0:a1:f8:b4:79:d5:bb:64:59:12:
74:37:3d:52:7f:19:f7:b5:4e:ab:e3:86:7b:96:7c:11:e5:05:
5e:34:aa:a9:e0:4a:1e:19:c6:f7:56:11:ea:8e:a4:1d:e2:a5:
81:23:d6:5d:47:47:7d:e6:15:d3:b2:b7:1a:9b:2b:99:ef:72:
6a:bf:8a:75:26:30:30:14:13:0b:bc:2b:2f:2e:f7:3e:e9:ea:
23:16:a2:1a:6d:e4:24:24:3a:ea:7e:e9:e4:99:66:70:82:e8:
d6:30:a0:44:7c:59:f0:35:3f:41:77:2c:fd:7b:f8:e4:90:1b:
d0:c6:2d:7a:4f:73:ad:01:0f:53:ec:6f:55:36:af:37:e8:33:
8b:e1:77:6b:fe:f1:66:09:e1:1b:62:1c:4a:86:6a:5d:3c:5a:
db:a5:8f:ef:de:36:25:9a:18:99:9a:09:85:60:a2:79:b5:9a:
fe:e3:6f:ee:b4:85:23:1d:bd:b0:b7:ed:96:b9:d9:85:92:d1:
d2:69:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:27 2025 by rpki-client