Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/huCFnW1RzEAo25JlMy5BAJ21fmw.roa
File: huCFnW1RzEAo25JlMy5BAJ21fmw.roa (raw, json)
Hash identifier: C8jXNqFwRTnVyewnj+Duz081Cz9bakUoIsg2OXmf1pA=
Subject key identifier: 86:E0:85:9D:6D:51:CC:40:28:DB:92:65:33:2E:41:00:9D:B5:7E:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200BC254C7E84E148CC1C881DE7899
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/huCFnW1RzEAo25JlMy5BAJ21fmw.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0b:c2:54:c7:e8:4e:14:8c:c1:c8:81:de:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86e0859d6d51cc4028db9265332e41009db57e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:6c:74:a4:9d:04:58:57:7a:7c:7f:99:55:
41:33:c7:22:63:e3:a8:48:db:71:35:45:44:2a:46:
cc:e7:85:90:8a:41:10:43:d5:e2:5a:b0:b8:4b:13:
72:39:96:c4:75:b3:c6:7b:b3:ea:91:24:a3:93:d2:
98:bc:04:b1:15:4d:5a:67:fc:7b:36:cd:fc:04:2d:
5d:94:2e:5d:78:9a:98:b9:50:32:3e:c7:a8:ce:c4:
46:d7:18:80:d1:04:b1:38:56:56:27:d0:eb:1f:f2:
48:1c:18:8b:f2:0a:3e:38:99:5f:5b:f6:cd:6e:35:
2f:bd:8f:f3:e2:2e:16:c3:05:6e:70:7b:84:ec:51:
6a:6d:ae:6e:fe:a7:2b:80:05:ca:3b:35:3e:ca:24:
f6:a0:6a:34:98:a7:d5:b1:6a:72:bf:6b:b7:27:04:
0d:c7:9c:0f:9a:70:50:56:b1:f1:b3:1b:8c:52:ff:
bf:5e:43:69:60:36:13:0a:31:4e:b4:b9:39:f2:98:
b7:94:90:c8:a9:c4:2f:f8:63:b8:00:2d:f8:e2:d2:
48:63:25:e3:08:46:b5:b2:f6:08:01:71:73:5e:83:
82:ee:e6:e5:61:d0:2f:91:8a:68:8c:cd:ad:da:08:
44:18:f9:47:24:bf:2b:e2:7f:74:50:33:9f:9d:f1:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:85:9D:6D:51:CC:40:28:DB:92:65:33:2E:41:00:9D:B5:7E:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/huCFnW1RzEAo25JlMy5BAJ21fmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
98:84:41:d7:7b:cb:22:e3:cf:38:43:80:85:4f:d6:e9:ac:9d:
e4:fc:12:17:15:8d:27:4b:2b:d7:00:da:c6:98:d9:db:ab:2a:
67:4c:40:57:de:a3:63:4c:e2:a7:78:06:cc:fc:21:fa:2d:e2:
5a:ef:39:db:e2:05:70:d3:48:5d:fe:5d:72:8f:73:9b:31:16:
41:f1:78:fa:41:5e:bd:68:af:e7:41:3e:a5:60:45:e6:6c:41:
e9:14:a1:b5:24:56:2a:29:96:6c:96:d2:e5:93:92:5e:84:0c:
3e:a3:9c:70:51:7f:da:c1:bc:9c:94:e7:84:eb:6c:a6:47:df:
36:75:e0:a7:b4:57:60:33:08:47:ea:3a:07:06:d8:42:70:e6:
fb:48:29:06:8c:1b:d3:62:63:c0:ae:37:cc:37:90:86:6e:4d:
b5:fc:03:40:f9:96:b9:cc:c3:6a:17:56:57:04:f3:31:0b:dc:
f2:fd:5c:60:24:51:7a:64:fa:c6:58:7b:b0:d8:5e:48:6f:9a:
06:7a:83:69:9b:f8:e8:f9:c5:2d:86:88:88:3f:e4:db:56:13:
5c:cd:ce:9f:03:c4:13:30:3c:ba:75:bb:fd:51:dd:68:1d:2d:
01:b5:74:b6:fb:de:2c:cb:cd:8a:e3:12:8b:dd:7e:2e:dd:26:
ad:e3:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:45:37 2025 by rpki-client