Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/hSlAxKZnavSBFWLhMLPVbCueXS4.roa
File: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (raw, json)
Hash identifier: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=
Subject key identifier: 85:29:40:C4:A6:67:6A:F4:81:15:62:E1:30:B3:D5:6C:2B:9E:5D:2E
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 0194282346D3967F73C31420D7DE87D83EF7
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/hSlAxKZnavSBFWLhMLPVbCueXS4.roa
Signing time: Thu 02 Jan 2025 17:49:48 +0000
ROA not before: Thu 02 Jan 2025 17:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 192.166.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:46:d3:96:7f:73:c3:14:20:d7:de:87:d8:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jan 2 17:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=852940c4a6676af4811562e130b3d56c2b9e5d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:75:fd:25:e0:f3:33:c7:66:4f:75:ce:f7:
01:b5:53:b7:04:79:29:ba:f9:b7:33:f1:28:86:7e:
b9:18:1f:31:b4:32:07:c0:2a:a4:0f:5d:ce:02:54:
bb:33:f2:95:3f:e2:6d:fa:b8:df:22:2b:1d:71:9d:
a7:e2:f4:dd:4b:87:51:6d:7e:a3:ab:aa:ee:2e:c7:
95:5a:22:f1:28:36:94:5b:b4:cd:ff:db:be:f9:9f:
d0:c7:d1:d9:19:9d:29:0b:4f:92:26:1c:c1:b8:12:
17:ab:d4:1f:4b:b3:5f:a3:b4:01:58:40:66:f0:74:
f2:58:be:e1:ad:64:8d:4c:e5:d0:6f:51:b3:a1:90:
8a:da:c1:91:4b:4a:61:9d:0f:43:08:fc:28:70:47:
28:4c:da:99:58:19:2a:07:82:06:98:93:c8:b8:08:
83:b0:4e:00:89:d9:49:b3:1e:ef:fe:76:7d:3f:96:
c1:b5:26:88:ca:b9:15:c2:92:5b:1a:54:8d:b1:c7:
c0:43:ee:d5:59:01:05:8b:48:0e:d7:ea:62:ee:90:
9b:2d:28:e5:89:59:6e:7e:17:c2:ef:9c:6a:12:8f:
d8:29:c4:47:d2:5a:ae:b1:67:84:ed:43:40:66:d9:
1c:f4:15:43:04:9c:70:ae:6c:48:5f:2c:4d:2f:d2:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:40:C4:A6:67:6A:F4:81:15:62:E1:30:B3:D5:6C:2B:9E:5D:2E
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/hSlAxKZnavSBFWLhMLPVbCueXS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.227.0/24
Signature Algorithm: sha256WithRSAEncryption
63:26:6d:a4:05:d3:bd:48:25:a9:a9:10:84:4a:3a:35:f9:bf:
00:ac:9e:e5:9c:58:ae:2a:cd:20:a6:e3:b8:6d:b8:40:66:bb:
3f:b7:a0:dc:49:d8:4b:01:08:f7:a0:63:fd:53:93:cc:2a:31:
b3:d4:66:b8:23:75:52:58:af:5a:c8:70:61:06:3b:52:e5:cb:
8d:84:c6:f2:35:f4:2c:e4:c1:e0:57:79:9d:f9:9c:bb:8a:c6:
a2:8f:36:43:71:de:60:e8:79:9a:09:a7:ba:d5:9e:f2:0c:79:
9f:9c:79:08:7c:11:c8:55:79:62:dd:2b:bb:bf:ff:44:87:9e:
5f:f3:58:cb:20:eb:79:c5:41:02:bf:52:8a:d5:6e:13:22:a8:
68:86:ed:fd:76:d8:3f:ab:59:8d:90:ef:23:13:f1:97:98:ef:
b2:ae:d0:04:18:59:e1:28:a6:fc:31:bb:e9:7d:76:4f:49:65:
6f:52:d6:b5:70:e0:36:11:ec:9a:b4:4e:6d:0b:24:d2:17:e8:
f4:85:60:4f:0c:ff:f9:b3:55:c7:ff:93:f7:e2:26:6f:ba:83:
6e:dd:f6:14:6d:29:11:d6:c2:7c:78:e7:17:52:ef:9b:fc:57:
44:1f:3b:e2:5e:f7:5b:29:e9:f9:ef:c0:08:c4:04:14:ef:97:
83:e3:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:25:44 2025 by rpki-client