Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hO92WO5z4UMhYBzTAFGGSIrhEAc.roa
File: hO92WO5z4UMhYBzTAFGGSIrhEAc.roa (raw, json)
Hash identifier: ASr7fCJJvLy7CTwSnwkeT1mLMasCUiLQHE/Hm59lF4I=
Subject key identifier: 84:EF:76:58:EE:73:E1:43:21:60:1C:D3:00:51:86:48:8A:E1:10:07
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C40D951CC215D2F43B737175796DA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hO92WO5z4UMhYBzTAFGGSIrhEAc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211294
IP address blocks: 80.96.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:40:d9:51:cc:21:5d:2f:43:b7:37:17:57:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ef7658ee73e14321601cd3005186488ae11007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:0f:23:40:53:ac:44:d0:28:90:c5:03:2f:
66:53:78:68:7a:70:bc:14:0f:85:12:e2:c3:72:e7:
0a:94:5e:df:7e:2f:0e:77:a8:9b:cb:38:44:03:b6:
72:00:c5:11:53:35:79:f5:2c:30:dd:5e:a8:3c:4b:
67:cb:14:e9:66:f3:79:aa:eb:33:14:21:60:0e:e2:
33:7b:54:27:14:3a:f1:08:a4:bb:23:ee:51:90:ee:
db:02:50:45:13:bb:fd:9b:48:69:c5:9c:f2:1e:0c:
ba:2a:fa:7d:a0:9c:7c:aa:c7:6b:42:9a:3f:5f:14:
a2:e1:99:6b:f7:c2:5c:cf:0f:41:49:b1:74:ae:96:
15:f8:02:58:ba:ce:f5:ea:4c:67:09:92:f5:ac:25:
66:dc:da:ab:58:fa:36:9a:20:d0:9f:05:4f:2e:ac:
1f:e5:1e:bf:54:eb:97:6b:f9:63:c3:01:d9:f4:61:
66:b9:24:ca:cd:1c:40:f2:e1:a9:3e:28:b2:be:13:
12:20:c9:15:7d:7d:e0:59:ac:e2:0b:42:ba:80:ae:
ff:65:30:e6:4c:ca:41:48:8c:c1:76:61:1c:3c:24:
8f:c0:fb:c4:a0:66:b2:12:4f:b2:49:01:af:28:f7:
0d:59:f4:dc:86:9d:e8:83:34:ab:3c:36:ed:c1:3a:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:76:58:EE:73:E1:43:21:60:1C:D3:00:51:86:48:8A:E1:10:07
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hO92WO5z4UMhYBzTAFGGSIrhEAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.40.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1d:be:22:3c:a0:da:45:e5:45:da:54:4e:19:56:57:fe:6e:
69:b1:08:c6:01:6e:0b:d2:45:db:a3:fe:78:27:42:15:55:da:
c6:a6:40:9c:ab:37:4e:5a:16:a8:2b:92:aa:2c:3d:cd:6d:5b:
c9:1c:25:cb:16:f4:19:50:0c:a6:0f:f6:15:79:25:57:c7:c3:
59:d1:ba:fc:de:51:0c:ce:e2:b5:b1:1d:e5:cb:26:13:d4:10:
e0:76:6e:f8:95:a2:f7:29:b3:31:dc:52:95:f9:0c:14:64:89:
b2:e4:43:21:f9:7c:fa:e9:9b:5d:25:ad:da:e7:90:fd:91:48:
4c:8f:66:0a:5b:96:60:11:f6:08:9a:29:1d:d5:cd:44:35:9f:
78:28:ef:32:2f:0a:43:db:f1:d3:08:45:7d:72:ef:97:0e:c2:
29:65:07:61:06:5b:eb:2a:b8:88:98:e4:43:e2:d4:c7:df:17:
10:8a:26:f9:24:7a:e7:b0:33:97:d1:3d:09:63:4d:cc:36:3a:
68:d6:5d:f2:3f:5b:3f:4d:d4:fd:ed:ff:ea:79:a8:d5:cb:0a:
45:6a:7e:77:a7:60:91:17:bc:8a:73:ef:5a:5a:71:72:26:f5:
5d:b2:bd:31:4d:86:cc:f0:d2:a4:b0:90:c8:84:a1:4e:1e:f0:
99:6a:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:15 2025 by rpki-client