Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/hKCXGavEm1w3o-E6Lxcg1Y7cij0.roa
File: hKCXGavEm1w3o-E6Lxcg1Y7cij0.roa (raw, json)
Hash identifier: Ez9pEBN6J5Eu0nslvuwtmd7i5V2r7PBUyTbCRX+CcU8=
Subject key identifier: 84:A0:97:19:AB:C4:9B:5C:37:A3:E1:3A:2F:17:20:D5:8E:DC:8A:3D
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 019425FDAEA6E2852333C0C343A41950DFF7
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/hKCXGavEm1w3o-E6Lxcg1Y7cij0.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60619
IP address blocks: 79.121.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ae:a6:e2:85:23:33:c0:c3:43:a4:19:50:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84a09719abc49b5c37a3e13a2f1720d58edc8a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:34:d1:76:3f:b3:cd:bf:fc:72:f2:b0:c5:
23:98:7a:06:a4:e2:b8:a1:ff:82:6b:af:4e:be:cf:
a1:28:ad:14:77:c3:1c:82:fa:0d:51:61:fe:a5:1a:
cd:b8:3c:1e:9e:97:27:b3:b1:07:27:4c:b2:89:65:
34:28:ef:6f:9a:53:34:2a:10:ac:9a:27:60:fe:50:
fe:22:46:c2:fc:ac:4b:e8:d5:b4:78:9c:5e:42:8e:
50:76:a5:54:54:8e:01:77:9b:af:f0:58:7b:26:d9:
c5:70:2f:01:f3:26:ec:d2:9b:2e:31:ad:20:33:87:
c8:68:55:4b:9e:01:41:c5:63:39:36:0f:aa:9e:67:
37:ef:3e:1d:f6:fc:ab:ca:b4:a1:cd:be:32:45:7d:
5c:b1:0b:9c:6f:22:c6:04:59:0f:46:0a:94:bc:7b:
7b:36:a8:97:66:cc:28:2b:f5:6e:b0:5d:09:aa:d5:
48:56:cc:76:58:6d:7d:f6:61:38:4c:02:09:73:aa:
d0:52:1f:c5:d9:43:fe:ae:e6:cc:00:e4:58:1e:eb:
76:a5:17:4c:a0:31:16:d8:08:b9:10:6a:fc:24:eb:
0a:41:bc:85:8e:b0:89:db:35:54:8d:f9:9d:77:23:
0a:a0:ca:73:e3:0c:47:0a:a8:33:78:01:36:16:d9:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:97:19:AB:C4:9B:5C:37:A3:E1:3A:2F:17:20:D5:8E:DC:8A:3D
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/hKCXGavEm1w3o-E6Lxcg1Y7cij0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1c:4b:a3:3a:49:3c:45:a7:05:db:45:6c:e5:6d:45:17:7e:
7d:87:ce:4f:03:ca:50:d4:91:70:f3:89:f4:16:f8:3f:bb:b7:
34:41:7c:82:2e:4a:6f:69:3a:79:de:c3:54:61:74:5d:b5:d2:
a3:ba:eb:5a:0b:e4:7c:44:b0:f0:fe:2c:2b:a3:42:2f:48:12:
ed:c2:f8:96:7b:1f:97:4a:0b:44:8e:08:48:18:1d:13:f8:c5:
03:8f:12:28:1e:fa:48:0a:ff:01:46:c4:1f:e5:1e:3b:f6:6a:
8d:0b:a5:13:23:16:14:d8:82:b9:73:84:18:4f:bc:d0:c1:e4:
fe:95:f1:16:c1:52:7f:58:b3:d3:1a:22:ed:29:cb:50:c4:94:
5e:3a:73:90:33:25:fa:71:e1:c9:dc:2e:64:9f:f6:28:09:96:
4c:8b:1d:d4:fd:30:75:c6:00:f0:97:b5:02:9f:eb:ea:4a:e9:
7f:03:f1:69:4f:0b:bc:b5:f8:a1:f6:03:5f:b7:19:23:f8:4a:
d8:84:4f:31:be:64:40:81:43:5b:b5:bc:89:cf:17:17:31:de:
81:be:6f:2a:1c:89:33:55:c3:32:92:5e:aa:6d:27:81:82:45:
3f:3b:21:47:cc:14:7b:9f:19:c8:34:2a:14:27:81:e5:fa:30:
1b:08:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:36:45 2025 by rpki-client