Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/hhE8yqqvIIlpuisRReuT9A6k1f4.roa
File: hhE8yqqvIIlpuisRReuT9A6k1f4.roa (raw, json)
Hash identifier: J2rXjJaRvfkS0jCe1u8LbpFRxfez9lEpglQHrWMaJxc=
Subject key identifier: 86:11:3C:CA:AA:AF:20:89:69:BA:2B:11:45:EB:93:F4:0E:A4:D5:FE
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B6F6BDBFF4D2A007E4270CDD6AD5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/hhE8yqqvIIlpuisRReuT9A6k1f4.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211288
IP address blocks: 95.164.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b6:f6:bd:bf:f4:d2:a0:07:e4:27:0c:dd:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86113ccaaaaf208969ba2b1145eb93f40ea4d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:54:52:9b:95:ec:92:f1:ac:8d:95:8a:0a:
9c:50:b2:54:04:50:a2:f2:16:86:a3:c3:8c:22:59:
d3:9b:4f:9b:ff:4a:d6:e1:2c:fb:8e:c5:60:f4:f0:
37:d0:db:5d:6a:43:80:02:67:cf:9e:0a:12:f3:60:
2f:27:67:99:54:65:05:0e:85:18:d2:dc:60:5e:87:
2c:de:19:6d:7f:2a:e8:62:c5:e0:dd:79:12:90:c8:
9f:cf:d6:a8:3f:09:c4:18:86:29:86:ce:7a:88:74:
d8:7f:51:63:a6:18:0c:68:0e:a6:5a:4d:f0:ee:2c:
92:42:94:e8:8d:99:37:a1:37:b5:98:69:15:81:14:
1b:9f:d4:ab:10:c0:d6:52:d6:21:ca:7a:79:ca:a9:
c5:d2:2c:8e:5f:7f:37:f2:ab:72:d1:5e:5d:34:a0:
53:57:85:e7:f8:df:f4:e9:60:55:4c:b3:f1:7b:ee:
09:2c:e4:b6:16:1d:f1:f2:c3:db:59:c0:8f:56:89:
d4:57:b0:64:37:27:1e:70:78:42:02:f0:d5:53:76:
1e:97:61:73:4a:f7:50:7b:89:bf:a8:db:20:85:4d:
f5:91:d9:c0:82:ce:69:5e:6a:e4:06:b0:e8:2c:6e:
40:04:1c:27:14:f6:8a:8b:11:08:a0:17:e1:04:38:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:11:3C:CA:AA:AF:20:89:69:BA:2B:11:45:EB:93:F4:0E:A4:D5:FE
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/hhE8yqqvIIlpuisRReuT9A6k1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:85:89:8b:39:d1:00:42:bc:f3:09:46:f9:6d:02:30:8c:5a:
bc:c9:26:b1:31:32:45:78:1b:81:91:8f:f9:72:6b:ae:a5:32:
1c:5b:82:cd:89:29:6c:b8:cf:ce:67:6b:5f:b2:43:7a:75:87:
6e:8e:37:94:00:f7:db:45:58:89:fe:27:e6:a4:9c:ed:1e:d9:
98:cf:bc:71:b2:6a:e3:75:f8:ad:1a:66:e4:be:95:f5:6a:cd:
b7:cc:2b:02:af:fe:b2:d0:08:14:9d:b3:78:25:d6:72:33:c1:
df:4b:91:ed:f3:8f:d2:f5:48:9d:65:8b:4a:d1:f0:98:4a:67:
32:12:a1:c4:72:ad:b5:c0:85:37:7d:82:05:cc:94:e4:72:c1:
7c:a3:fb:b7:1b:98:86:50:58:24:af:d3:9a:8e:3f:07:c1:61:
06:a7:f8:c0:5e:4b:1b:2f:b4:11:0a:43:5c:13:eb:ba:22:f8:
93:f7:80:43:66:10:98:98:08:75:1f:61:ff:56:e2:72:37:d2:
10:48:6f:3f:c6:5e:11:d1:cb:73:06:0d:8b:13:92:db:d5:34:
79:98:7f:e2:8d:4f:44:28:fa:9a:71:86:23:1f:12:4c:57:f5:
f9:a1:74:33:b1:1c:fc:93:92:22:b5:08:f0:b6:0f:bb:2d:a9:
5a:06:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:39 2025 by rpki-client