Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa
File: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (raw, json)
Hash identifier: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=
Subject key identifier: F8:74:96:B2:25:8C:FA:10:E5:D8:EF:F9:09:E7:6F:05:0E:79:61:0F
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 01941FFAA80EB99F95C68E1EAB73AF5864D7
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59770
IP address blocks: 185.53.72.0/22 maxlen: 22
2a04:cc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a8:0e:b9:9f:95:c6:8e:1e:ab:73:af:58:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87496b2258cfa10e5d8eff909e76f050e79610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:df:f6:e2:e1:df:c8:9e:12:72:e7:0b:e4:
e1:51:3e:66:23:b5:06:c9:77:f1:c5:92:46:85:2f:
83:3a:13:d1:69:6e:c3:ad:74:63:21:1a:c5:bc:09:
20:72:a4:2a:08:74:8b:cc:e6:b6:ed:a0:3f:c4:9a:
3d:ea:fc:fa:99:1b:53:ca:68:3b:3a:87:ec:89:38:
d6:84:c4:71:7f:f2:9d:66:7c:b0:7c:00:0f:2e:ec:
60:a7:59:2d:9b:7d:a9:66:01:5b:ff:bd:18:f2:fa:
71:7b:12:65:f5:53:00:61:ec:a8:48:62:aa:40:94:
60:7f:e6:6c:f9:56:0a:f4:0f:eb:fd:51:8f:29:44:
02:49:48:a4:01:e5:24:c3:80:f1:b9:64:3a:dd:14:
a2:eb:89:90:b5:05:1f:36:12:42:c5:04:77:19:f1:
a2:99:bc:a6:25:db:26:03:a4:2f:09:11:e1:e0:81:
79:f7:f7:01:53:71:b4:79:e6:86:26:8b:2c:02:f3:
4d:24:59:9c:6f:d1:d4:78:18:8d:47:4c:22:55:d8:
7a:7c:6b:d5:ac:6c:ab:2a:6f:71:05:99:90:e8:7f:
0c:ea:06:c1:0a:91:70:42:4b:c4:1b:f5:fc:31:35:
a6:f3:68:80:0f:71:6e:42:ce:ec:3b:2b:32:c9:ea:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:96:B2:25:8C:FA:10:E5:D8:EF:F9:09:E7:6F:05:0E:79:61:0F
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.72.0/22
IPv6:
2a04:cc40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:86:f9:ba:37:8f:c3:12:a0:cb:2c:46:46:f8:27:ec:0b:0d:
53:e2:dc:05:e4:ac:0b:33:ec:38:5d:8b:d1:d6:c1:89:67:43:
6d:54:19:9a:d4:eb:96:75:41:9c:6d:7b:a4:8e:50:c0:54:9a:
76:65:12:ab:cf:12:97:d5:53:85:2e:63:47:a2:21:7c:81:88:
5a:88:c8:dc:2e:c3:ff:16:5b:59:75:98:ba:a5:97:fb:13:70:
a1:cc:41:20:c3:46:2d:f8:46:55:50:a4:33:99:83:0f:4d:b7:
32:a6:31:f5:10:c3:7f:ef:82:75:f1:6e:99:51:67:c6:98:31:
9e:8e:ac:53:7a:41:c9:c0:b1:b6:7c:73:83:59:9a:b1:b3:2c:
f7:2b:32:f3:43:25:fe:25:18:fb:b0:a2:dd:0b:22:59:43:98:
17:cc:d4:69:46:de:30:c0:5e:98:09:1f:ef:fa:13:f9:2e:87:
65:06:ec:6f:89:64:e3:90:19:9b:4b:3f:7d:88:1f:d0:b6:c1:
2a:55:f5:4b:8d:fe:ba:5e:55:71:2f:c1:12:e9:e6:af:7e:15:
ad:8b:7f:89:5d:12:52:ae:ec:ae:29:b4:ce:d1:7b:0c:08:4c:
31:57:ab:4e:23:a4:d9:f4:93:e4:0e:06:d3:60:6a:45:fb:45:
72:78:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:27 2025 by rpki-client