Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4xHSFz_h8RDTEizlLHiNqDZdB8k.roa
File: 4xHSFz_h8RDTEizlLHiNqDZdB8k.roa (raw, json)
Hash identifier: k0/n97wXnLuKC+5MEW+78XWyuksvPTuMv3V0hsYhTuY=
Subject key identifier: E3:11:D2:17:3F:E1:F1:10:D3:12:2C:E5:2C:78:8D:A8:36:5D:07:C9
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB6999BA1A7F1089E6754A2F9700E9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4xHSFz_h8RDTEizlLHiNqDZdB8k.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 212.18.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:69:99:ba:1a:7f:10:89:e6:75:4a:2f:97:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e311d2173fe1f110d3122ce52c788da8365d07c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:47:47:06:69:99:d4:c1:b0:d3:dd:9e:53:
a3:e7:cb:cb:6e:96:56:bc:dd:1b:11:03:16:b2:bf:
f8:e0:7d:76:5e:e2:dc:bb:ae:3a:61:c2:a1:7b:75:
92:18:5b:16:3e:8d:c5:50:e3:0c:38:cb:f9:41:b6:
04:6a:d0:d7:8d:eb:9d:56:04:9c:28:cb:da:f0:eb:
6c:cf:5e:5e:22:a3:09:96:40:72:ba:32:04:52:2e:
75:7e:c8:d1:cb:fe:2f:f2:4e:9e:73:3b:75:db:7e:
17:21:40:e9:22:93:a8:bd:40:ad:51:e7:65:9e:77:
ee:f4:d7:71:a8:f1:c2:d2:f8:4c:38:e3:6a:85:4b:
01:01:b1:5b:14:67:6a:70:dd:a3:fd:99:16:03:f7:
b9:dd:46:c0:4c:2d:bd:cd:2b:56:48:e2:68:4d:51:
8d:22:55:db:ab:d4:77:18:f4:42:3e:6a:15:27:ba:
3d:e8:3f:20:2a:3c:2f:2b:40:ab:0d:aa:ea:51:81:
b8:bb:93:39:0b:b5:d2:86:ef:30:67:07:10:5e:16:
ab:1b:59:53:c9:ec:13:99:d0:e9:39:23:48:10:01:
3f:4d:b4:0a:ec:c8:7a:02:cd:21:7f:d4:5c:42:a2:
93:a2:ea:4b:19:ce:c6:36:f2:e6:85:2f:c5:05:ea:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:D2:17:3F:E1:F1:10:D3:12:2C:E5:2C:78:8D:A8:36:5D:07:C9
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4xHSFz_h8RDTEizlLHiNqDZdB8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.104.0/24
Signature Algorithm: sha256WithRSAEncryption
83:49:a6:f2:a8:9d:a4:49:e9:94:84:f8:5e:62:15:8d:4d:25:
43:12:3c:f0:5e:7b:2d:12:a1:17:09:45:64:ce:3a:a8:03:1a:
74:56:e1:9d:86:b7:6f:a7:6f:b9:01:18:b2:33:60:fb:56:85:
fd:92:5f:ec:68:e9:93:b2:62:ac:90:f8:1a:67:cb:d4:ce:7d:
13:46:92:83:a0:82:8e:96:b4:9a:fc:9e:9f:00:69:ad:fb:f5:
dc:6d:48:47:27:12:90:e7:e4:b7:37:22:c3:64:a7:c3:e6:71:
fe:31:b4:5f:c8:75:56:af:bb:7f:d0:89:a3:75:a6:eb:14:ab:
b7:72:f9:b1:8d:5f:09:61:e8:6b:c5:8f:1a:58:c9:72:e2:d4:
e2:ca:be:e4:8c:8b:5b:d2:89:2f:31:1b:2b:c8:8f:f9:39:9a:
9a:7e:ac:33:f1:0a:1c:58:fd:43:91:62:b7:06:53:0d:2c:22:
ff:96:87:d4:6d:9a:c1:36:8a:1a:34:b9:ee:68:be:7f:47:3a:
63:76:ba:45:53:79:2c:29:32:73:0c:74:4a:f2:0a:fc:5b:c5:
c3:c6:c6:0b:a5:29:6b:6b:86:3b:31:c1:22:37:61:5f:b9:ee:
55:27:f8:8c:8b:59:15:a3:dd:e2:b4:1e:a8:0f:d0:e8:d9:51:
42:b8:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:39:37 2025 by rpki-client