Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fhv64bxzWcauBoH7qXIpIF6wjQo.roa
File: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (raw, json)
Hash identifier: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=
Subject key identifier: 7E:1B:FA:E1:BC:73:59:C6:AE:06:81:FB:A9:72:29:20:5E:B0:8D:0A
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019428232E66A831E3DC310A64F8ADCA4987
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fhv64bxzWcauBoH7qXIpIF6wjQo.roa
Signing time: Thu 02 Jan 2025 17:49:41 +0000
ROA not before: Thu 02 Jan 2025 17:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6672
IP address blocks: 37.202.8.0/21 maxlen: 21
212.113.96.0/19 maxlen: 24
2a02:9d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2e:66:a8:31:e3:dc:31:0a:64:f8:ad:ca:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e1bfae1bc7359c6ae0681fba97229205eb08d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:99:1c:62:d8:5b:af:bd:49:44:fa:be:d7:
55:19:b7:b4:6e:6b:1e:13:3c:3d:77:93:04:5b:9a:
88:66:74:5c:e9:b4:cf:98:a0:23:61:5a:52:3c:7f:
36:fa:5d:43:cc:b5:e9:70:4c:19:17:04:eb:03:8f:
76:ca:c2:f0:5d:a5:1d:63:f2:af:24:b6:f2:12:b3:
4d:9d:47:5d:77:50:21:83:3a:4a:c4:b7:d3:b0:d7:
4d:3c:83:38:b0:89:78:a7:3b:40:22:cc:eb:b9:ed:
c2:3a:08:4c:77:2b:3f:dc:31:b2:92:41:d0:c2:03:
7d:9c:b3:ea:73:7c:82:62:f5:df:e2:97:9f:2d:39:
1c:0b:29:cb:a4:97:3e:21:a9:6e:9a:d6:a4:c3:fa:
2d:8a:76:ea:c9:da:7c:89:75:e8:a2:c9:ca:c3:e4:
25:ff:65:0c:43:cd:eb:6e:1b:36:57:38:d9:bf:70:
cb:64:37:7d:59:1b:53:10:47:d3:0e:78:7a:c3:91:
7a:15:e0:7b:95:c3:86:48:76:13:d5:1e:85:7a:47:
67:ab:e6:57:d4:9f:b2:3b:ef:43:66:a0:62:d7:80:
ec:d6:6a:44:9a:ce:18:9e:79:bb:17:89:d9:2e:ba:
0e:55:ce:f7:ec:d2:2f:7b:f6:6c:44:a2:80:1a:5b:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:FA:E1:BC:73:59:C6:AE:06:81:FB:A9:72:29:20:5E:B0:8D:0A
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/fhv64bxzWcauBoH7qXIpIF6wjQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.8.0/21
212.113.96.0/19
IPv6:
2a02:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
06:77:0c:0a:0b:4d:94:1a:ba:ab:94:92:3d:23:e8:ad:35:e0:
87:23:88:1f:7a:3d:5d:83:1e:69:25:80:cf:e3:9f:3b:ae:c0:
2a:ae:c8:4e:b8:d6:ee:16:5e:e3:bc:2a:a5:09:f1:15:ce:48:
cd:5c:ef:1c:bb:08:11:64:50:33:da:f7:4a:b2:41:1e:2f:fc:
f0:d1:50:82:36:d2:20:2d:3f:4b:f9:f7:59:ae:8a:a9:af:45:
89:79:64:8b:92:71:77:6f:fc:ac:ef:73:be:eb:1d:c2:e7:cc:
84:e3:2b:d0:26:0e:a7:b6:8c:1e:ba:83:65:f5:5d:19:69:ec:
a8:62:8a:49:73:d3:3f:81:13:bd:2a:65:01:49:4f:95:8f:74:
e3:74:af:2f:97:25:b4:68:46:57:de:9f:29:cb:70:33:34:ec:
d2:e9:87:ec:75:2a:dc:0e:53:8e:2d:cc:cb:f9:51:93:6b:e6:
da:78:22:c9:82:d6:8c:3b:12:06:25:ca:f2:72:55:0e:d3:40:
da:05:9b:3d:52:07:75:c4:2b:35:c4:4e:a2:ac:46:b9:cb:35:
8f:dd:74:28:a5:2c:be:a2:93:97:09:6e:44:58:5f:3d:ab:2a:
71:db:98:c0:f5:b7:ff:c3:d3:45:6d:3c:6d:9f:6d:a4:93:f0:
a6:3f:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client