Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/1-HWodx2p-jnEWntsY6ZR8fppYQc.roa
File: 1-HWodx2p-jnEWntsY6ZR8fppYQc.roa (raw, json)
Hash identifier: MnvqYCxLHiuBYHFhxGG8YdQyykmAt0BSLaKAlV1OERY=
Subject key identifier: F8:75:A8:77:1D:A9:FA:39:C4:5A:7B:6C:63:A6:51:F1:FA:69:61:07
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 0194E0A3863DC5C658A8D4DED03AC71F6ACC
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/1-HWodx2p-jnEWntsY6ZR8fppYQc.roa
Signing time: Fri 07 Feb 2025 13:40:00 +0000
ROA not before: Fri 07 Feb 2025 13:40:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201675
IP address blocks: 185.103.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:a3:86:3d:c5:c6:58:a8:d4:de:d0:3a:c7:1f:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Feb 7 13:40:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f875a8771da9fa39c45a7b6c63a651f1fa696107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:10:55:3e:52:73:47:09:e4:70:dc:68:45:
32:5f:d0:7b:79:da:ae:dc:5d:61:bb:01:85:0e:a1:
a7:03:60:07:29:9c:10:58:3e:c2:56:e1:66:a2:a9:
43:07:a8:e9:3b:44:d8:6a:8c:a8:15:44:de:87:6b:
d9:ed:ba:ee:bf:65:1c:70:b3:61:a6:66:f8:6a:83:
2f:af:a5:30:53:16:9b:ef:ca:89:a8:e1:ca:a1:15:
58:2b:1e:3b:00:30:95:8e:8a:1b:e4:ce:68:2a:fc:
e7:a9:5e:3e:60:ec:d3:8b:91:46:31:6d:ee:6f:dd:
57:37:93:1d:02:76:56:57:bf:54:ff:54:ee:59:65:
93:99:af:de:66:f6:7e:88:eb:b5:a8:e2:93:1d:0d:
44:3b:9b:8a:1e:3e:75:f4:d0:31:fc:98:e6:e2:98:
f0:89:06:1c:60:f0:22:4d:f4:9f:b0:b5:ea:a2:b4:
54:59:4b:68:33:97:29:d6:fe:c6:93:4d:b0:7d:64:
01:c2:4b:f9:f1:01:a3:39:5b:79:b6:bd:a1:fb:c0:
07:18:f3:01:b3:af:dd:9a:7e:29:a0:cd:09:95:ef:
b6:96:fd:ab:a1:72:bd:e8:2d:54:02:da:78:ce:e3:
15:3b:fa:52:b1:7c:37:cd:7a:7f:e1:a7:4a:63:94:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:A8:77:1D:A9:FA:39:C4:5A:7B:6C:63:A6:51:F1:FA:69:61:07
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/1-HWodx2p-jnEWntsY6ZR8fppYQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.118.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e8:00:6a:5e:84:ba:9e:93:39:c5:eb:15:8b:a9:9b:ad:7c:
be:cd:fa:6e:4f:33:76:50:3b:9d:b9:b8:a5:c8:0c:e2:41:47:
86:da:86:bf:90:ea:ff:92:9a:dc:20:59:47:56:85:e1:a6:7d:
27:06:13:2a:3d:c1:cb:b7:8f:fa:42:99:28:79:2f:64:6e:c9:
5d:7f:62:8b:36:b9:f5:69:14:6d:39:23:15:35:22:d8:37:13:
8a:3e:ca:73:0d:1b:97:f1:ed:cf:1b:fd:1a:5b:ed:80:ba:27:
8b:0b:73:ad:42:5b:1e:39:e7:a4:bb:f2:df:80:9b:3e:1d:f2:
7e:d4:d0:8b:b6:5c:88:67:65:68:89:2b:ad:62:9c:22:6e:d3:
eb:8e:9a:a1:3e:e9:c4:43:38:00:eb:12:a5:15:32:42:d7:72:
5d:0e:c5:7a:af:7f:c5:a3:ba:ee:af:32:3e:c1:3f:95:0d:89:
86:31:09:a9:9e:d5:ed:d0:b6:d8:a1:e0:c7:5e:08:18:9c:7c:
6a:08:31:bf:12:e5:0a:75:62:1b:8b:69:f8:f8:ae:41:b2:f7:
4b:7e:00:fa:ad:bc:ff:35:fa:61:27:f8:53:cc:6f:10:dc:c5:
7f:ee:d5:49:d7:ef:5b:d2:f1:cf:99:64:f3:bb:36:b2:fa:70:
3f:52:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:36:02 2025 by rpki-client