Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hsEB-1Rr688p1luPcFY3QHKG8AY.roa
File: hsEB-1Rr688p1luPcFY3QHKG8AY.roa (raw, json)
Hash identifier: JZ2vHfftvNf42IEZyQcMRDXh+vFlsIADr3tNYCFl6Sk=
Subject key identifier: 86:C1:01:FB:54:6B:EB:CF:29:D6:5B:8F:70:56:37:40:72:86:F0:06
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D9BA26C6ED2004905E147608A8200
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hsEB-1Rr688p1luPcFY3QHKG8AY.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59524
IP address blocks: 2001:680:4008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9b:a2:6c:6e:d2:00:49:05:e1:47:60:8a:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86c101fb546bebcf29d65b8f705637407286f006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:a3:73:80:7e:47:3a:9c:a8:e8:a7:93:12:
df:74:5c:6a:53:ee:8f:ac:73:fb:42:e4:7d:c6:73:
53:13:83:e5:ca:10:2d:05:a2:ae:b6:cd:68:c6:82:
39:38:bd:d6:0a:76:cb:f0:db:ba:64:72:3e:fc:fc:
5e:4e:83:63:7f:84:34:f8:6a:73:c7:22:c8:7d:36:
33:3d:af:f9:dd:04:29:1f:66:5d:e4:d8:8d:10:c1:
02:54:e7:ba:94:c4:dc:8b:cf:f2:72:97:c4:70:7d:
f1:fc:31:9c:1f:ec:3f:fd:36:5e:69:83:f4:3b:6c:
d5:6f:6d:d4:bd:ca:81:a1:fc:56:20:36:cf:f1:83:
c6:12:01:89:a0:9d:32:04:b8:c7:8e:d2:cf:f8:12:
7e:e6:f5:6e:d1:ed:02:7c:2c:34:01:3c:99:ef:f7:
3e:74:4f:a1:3d:90:73:ba:e2:ca:03:c2:0e:98:3e:
fd:fa:6b:8e:31:c9:91:34:3c:49:74:d0:1c:35:1b:
88:16:4e:66:09:f1:15:72:69:44:8d:e1:a5:f0:85:
d1:92:76:d4:81:50:88:0a:cb:3b:2e:00:5f:3b:5f:
90:d4:c0:a3:1b:9d:2e:e1:0c:62:1f:a4:31:48:df:
5a:4e:a9:80:bf:64:47:96:6d:6f:cb:19:15:9b:80:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:01:FB:54:6B:EB:CF:29:D6:5B:8F:70:56:37:40:72:86:F0:06
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hsEB-1Rr688p1luPcFY3QHKG8AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:680:4008::/48
Signature Algorithm: sha256WithRSAEncryption
70:81:aa:68:cc:60:23:30:ce:15:8d:46:a8:c4:e0:87:4a:7e:
dd:40:b5:41:fb:da:b8:05:d2:aa:03:0d:dd:e6:9c:21:10:7b:
48:ec:2f:19:b2:09:d1:4b:1b:c5:e5:90:6a:66:cd:60:5f:46:
b3:f0:8c:1b:20:69:b4:bf:bf:64:ec:3c:72:08:21:83:7e:4a:
03:03:ff:9a:22:62:ce:54:39:2d:59:22:0e:34:30:26:db:0b:
00:16:1d:32:dc:8d:a4:c8:6e:18:51:b7:0c:d2:f7:73:30:9d:
34:13:32:7f:af:0c:74:d6:51:31:15:d9:f4:1c:76:0e:ef:85:
75:96:22:fa:59:6f:25:2d:1e:86:95:41:80:9f:58:44:63:d3:
44:8f:e4:60:a2:28:93:ba:29:60:e2:fa:50:8f:38:52:d0:5b:
d5:f4:65:8d:a8:43:e9:bc:cd:bd:a7:5e:09:b8:0a:54:e2:ff:
10:2b:e3:f8:d4:55:e6:e6:03:37:72:22:a4:b7:20:41:e1:6b:
b8:95:b3:dc:5f:b5:2d:24:d1:c4:71:ef:45:28:91:6d:bb:84:
e5:42:ba:6c:b3:ea:5b:cd:28:3b:d7:ea:4a:57:01:1b:c8:3c:
b3:d3:07:c9:82:d3:6b:1c:0a:1f:1f:04:40:07:bf:ef:2f:7f:
d5:7f:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:09 2025 by rpki-client