Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/HdvJhluj0mmgaFdPVm0s0ofNMQM.roa
File: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (raw, json)
Hash identifier: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=
Subject key identifier: 1D:DB:C9:86:5B:A3:D2:69:A0:68:57:4F:56:6D:2C:D2:87:CD:31:03
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B25A2A3D55B92E8F978CC0CD8FFBEC
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/HdvJhluj0mmgaFdPVm0s0ofNMQM.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 91.221.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5a:2a:3d:55:b9:2e:8f:97:8c:c0:cd:8f:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ddbc9865ba3d269a068574f566d2cd287cd3103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:fe:71:ba:bc:c7:51:9f:40:ad:57:89:6e:
85:b6:ae:00:5b:ff:f7:a2:09:3d:ea:76:5f:11:4a:
23:f6:d2:61:67:5b:77:73:95:a7:bc:c7:d3:d2:fb:
41:15:49:45:b3:36:2c:9e:ee:c4:ec:12:58:12:b2:
52:55:92:65:b3:6b:20:a9:c5:e4:9c:71:a5:dd:87:
81:af:1e:1a:f5:38:4d:47:94:f3:ad:25:04:c8:39:
a6:b0:41:dc:e0:50:1f:7d:f0:58:ec:11:b1:41:bd:
5b:22:f2:be:32:20:c0:56:ff:15:83:28:e4:b1:ab:
41:19:60:54:f8:a9:7b:3d:8c:9c:33:83:cd:a3:97:
3b:d3:94:fb:b3:67:e2:b2:97:23:f6:d2:dc:a2:75:
e8:cf:50:3e:d4:a2:b1:f2:68:cd:f8:4f:54:2b:73:
f4:5d:56:d5:6c:bf:d8:11:9b:ce:8d:39:ee:f3:0b:
97:3f:40:c6:0d:9a:f6:c5:df:3e:5d:77:c3:20:bd:
fe:ba:bd:77:f4:5c:68:5d:e5:89:8e:0b:72:f9:56:
b3:72:38:6a:e8:23:9d:fe:4e:eb:34:10:a0:39:9e:
22:30:d1:6e:9a:af:62:4f:33:76:ad:56:22:d3:7c:
08:de:1d:6f:80:7e:c2:91:98:f4:0b:31:cf:c0:c8:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:C9:86:5B:A3:D2:69:A0:68:57:4F:56:6D:2C:D2:87:CD:31:03
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/HdvJhluj0mmgaFdPVm0s0ofNMQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a5:5e:2f:3c:91:0c:13:4d:f0:94:e8:7a:72:5c:b7:f4:48:
76:fb:8d:22:cc:22:a2:1f:c6:d0:25:5c:4f:b2:8d:50:55:2b:
7c:52:10:5e:01:f6:7b:e5:4e:a4:b1:59:42:b7:af:ad:1b:d9:
8a:d4:72:bd:cb:35:00:34:c5:30:ef:e3:82:a1:a9:36:ce:a3:
df:46:db:92:4d:bc:1f:d2:85:cd:0e:28:1b:51:aa:1e:67:69:
89:f7:bd:64:43:ee:31:47:16:dc:8b:67:0e:eb:66:be:cb:5a:
bd:81:39:2f:df:fc:88:0f:ee:b0:a6:b0:02:7b:55:30:f5:8c:
6d:92:27:58:e3:22:77:ab:cb:09:3d:85:d4:4b:d4:b9:7c:9e:
1f:c0:12:9d:81:54:38:cd:dc:47:0e:fe:cf:e5:97:73:e1:d2:
c6:59:2f:cc:b7:69:2d:92:4d:8a:57:d0:8f:b7:cc:50:ec:38:
c8:af:82:25:87:9d:d0:b7:81:96:cc:8b:23:01:ec:aa:e0:46:
26:c0:dd:ce:b7:0f:f2:fd:63:72:7a:82:92:2d:c8:d2:e3:0e:
78:98:52:c9:c5:46:6a:7c:b6:15:30:87:17:26:12:1d:57:e9:
31:d4:86:f5:18:35:99:b7:8c:bb:57:5c:df:78:93:02:23:aa:
18:7d:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:32:37 2025 by rpki-client