Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HbW79kMrOrS8gX9eCFNne5AhQW4.roa
File: HbW79kMrOrS8gX9eCFNne5AhQW4.roa (raw, json)
Hash identifier: Yk+UDOPEIA4yhcY24I18sNX/3jC9iCUhZLnr4DKhWG4=
Subject key identifier: 1D:B5:BB:F6:43:2B:3A:B4:BC:81:7F:5E:08:53:67:7B:90:21:41:6E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01956109FF1FA1AC83D40C89804CC23DFFCE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HbW79kMrOrS8gX9eCFNne5AhQW4.roa
Signing time: Tue 04 Mar 2025 12:03:19 +0000
ROA not before: Tue 04 Mar 2025 12:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211983
IP address blocks: 80.96.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:09:ff:1f:a1:ac:83:d4:0c:89:80:4c:c2:3d:ff:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 4 12:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1db5bbf6432b3ab4bc817f5e0853677b9021416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:5f:bd:32:c2:1f:4a:e7:f9:43:74:66:a8:
a6:2a:7b:0a:fe:35:5c:f2:64:ca:f5:5a:f4:9c:ad:
86:01:2f:b6:03:99:51:d2:b9:b4:90:ee:b3:e8:2f:
40:0d:d1:04:65:85:cf:90:96:16:1b:15:88:49:23:
59:60:f3:93:3d:a0:6b:d9:0f:df:b4:d5:83:37:02:
5c:16:3d:f1:bc:ff:86:30:b2:2e:59:e3:b9:b5:a1:
a7:cd:a3:c0:d6:db:f4:dd:56:81:07:c9:3c:55:6b:
08:e5:83:2c:85:5e:c4:9a:fa:bc:da:64:40:b5:22:
41:dc:95:c4:a9:3b:ff:2b:6d:b6:5d:a7:df:32:22:
3a:7d:b9:9c:6f:ca:00:b8:5d:ba:a1:ea:49:6b:13:
1e:ca:d7:41:48:a5:0c:fe:fd:ec:10:bf:79:e2:13:
5e:10:95:d1:e7:a3:55:c9:ff:77:a8:fd:88:49:6f:
29:c0:d3:40:ab:64:73:d0:48:52:16:b7:b4:59:a0:
7c:ea:0c:f1:66:c8:6f:48:09:61:ab:95:04:1e:ab:
a7:00:2d:e4:93:9e:d7:37:67:64:1a:6b:5e:fc:7c:
1a:89:27:10:0b:26:fd:67:b4:18:2a:3a:dd:59:ce:
40:48:09:aa:ab:9d:f9:99:b9:24:72:b3:96:d6:bb:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:BB:F6:43:2B:3A:B4:BC:81:7F:5E:08:53:67:7B:90:21:41:6E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HbW79kMrOrS8gX9eCFNne5AhQW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6c:49:aa:01:ec:a7:3c:8b:3c:76:7e:b0:86:3f:90:62:00:
be:de:70:4a:ae:fb:e7:38:f7:7e:ed:cb:66:b8:ad:3a:0a:85:
ad:55:d0:ed:dd:26:48:48:04:e8:85:2a:43:1f:d1:f4:b4:c2:
6d:2e:e1:29:e6:70:47:ea:b8:6c:38:79:0e:c9:30:b6:11:3b:
7e:d4:40:37:2e:00:be:01:f5:57:af:4f:ba:f3:26:e5:cd:d8:
70:25:4a:84:72:1a:d8:f5:68:0b:32:18:63:a6:af:87:82:91:
6e:17:61:36:1e:d8:24:27:5a:48:46:d2:7d:84:d2:7f:b5:92:
7c:3b:81:33:0b:1c:4c:6e:51:b4:ca:e7:11:7b:4d:5f:04:76:
5d:ef:fd:23:5d:4e:02:9c:ab:d4:21:3f:9a:58:78:67:5c:62:
5d:7b:5f:d1:99:08:5d:22:f3:6d:0e:b2:2b:89:43:c0:15:42:
ca:57:c3:ee:82:07:da:47:ff:c6:9a:6f:ec:fa:a5:17:13:c4:
45:20:bf:5f:7d:e4:c9:d4:da:91:a4:c2:15:ed:04:f5:a2:67:
ed:c4:71:13:f7:2f:62:b0:7b:df:12:41:33:4c:12:bc:cf:d8:
26:c1:ca:90:4b:a5:e3:c8:43:27:95:ac:e7:bf:dc:0a:53:53:
f0:6f:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:35 2025 by rpki-client