Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/HhltdqvEvMp1haFhX3fIv16Ni_Q.roa
File: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (raw, json)
Hash identifier: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=
Subject key identifier: 1E:19:6D:76:AB:C4:BC:CA:75:85:A1:61:5F:77:C8:BF:5E:8D:8B:F4
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019426D9DFEFD9D5C75E8489F6B1170020FF
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/HhltdqvEvMp1haFhX3fIv16Ni_Q.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.186.51.0/24 maxlen: 24
89.186.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:df:ef:d9:d5:c7:5e:84:89:f6:b1:17:00:20:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e196d76abc4bcca7585a1615f77c8bf5e8d8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:9d:c8:95:1a:e0:2f:e9:93:46:22:4a:1d:
75:f7:62:77:59:c4:77:6a:b5:82:cf:4e:3a:40:de:
56:4d:ca:d9:62:a2:d3:2c:97:cd:e9:3f:1d:d8:24:
4b:bd:3a:3c:f9:de:dd:ba:3b:0c:98:13:e4:78:80:
a5:ac:9d:ff:c1:15:9f:c9:f4:5c:6f:44:27:d2:84:
17:42:2a:32:dc:9e:26:bd:17:cd:d2:2a:9c:46:e3:
71:50:c5:6c:6c:e6:ff:01:5f:ef:77:e1:04:e7:be:
13:6a:7b:f0:7d:28:67:73:11:45:fd:62:09:63:93:
98:06:c3:a4:4d:e7:8f:77:3a:f9:fb:a5:43:96:49:
ed:66:af:61:28:84:c7:e1:69:42:50:5d:8d:a3:78:
02:20:7c:2f:71:f9:f0:43:ee:d4:f3:53:9b:9c:cf:
cc:df:38:87:1e:25:8a:bb:2c:2a:ce:f0:b2:73:46:
75:f2:7b:79:38:2b:6c:2d:5f:1c:dc:2c:ab:5b:c5:
c2:73:fd:43:f4:69:24:07:22:f0:f5:8f:ee:bd:6c:
b1:91:cd:14:b4:09:78:0e:49:18:82:46:dd:2f:b5:
18:7a:fc:9f:1f:fd:c0:d4:a5:80:9c:a4:24:fd:d6:
48:61:25:1d:88:51:27:72:f2:91:ca:3f:28:72:c4:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:6D:76:AB:C4:BC:CA:75:85:A1:61:5F:77:C8:BF:5E:8D:8B:F4
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/HhltdqvEvMp1haFhX3fIv16Ni_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.51.0-89.186.52.255
Signature Algorithm: sha256WithRSAEncryption
15:ef:a3:ed:90:f0:09:a6:6f:43:1f:84:ea:14:58:64:cf:60:
9a:61:f5:4d:3c:87:99:b9:68:f8:6a:5b:36:88:1e:ec:d9:67:
5f:99:35:58:be:cc:0e:83:e6:60:3a:c7:21:ab:88:c1:71:8a:
b0:8d:13:cc:56:e3:b0:b7:89:e9:31:ec:4e:0f:fb:28:7c:cf:
99:9d:7b:02:71:9c:9d:45:91:8f:73:ee:86:b2:e6:5c:fb:ab:
9a:95:08:52:8c:12:b2:ef:15:0d:a9:a4:c8:55:6c:87:32:64:
79:17:e1:82:29:6e:7a:f0:49:df:22:11:84:e3:be:23:e2:6b:
10:c1:5a:bf:ae:53:99:c7:9e:2b:47:4a:67:a9:e8:19:86:ee:
3e:3b:57:36:fc:12:e6:42:b2:56:ba:20:83:76:41:c9:77:f5:
ba:eb:87:a3:cb:b2:e1:2c:e6:19:bf:56:ad:c8:f7:11:01:d8:
16:96:1b:63:2c:e6:a1:0f:f4:5d:b5:04:c3:2f:69:e4:79:34:
e4:67:21:5e:2e:fc:48:45:f1:fb:2e:02:90:34:92:bd:f8:b5:
f2:f1:c2:e8:14:57:51:93:d1:d8:04:33:3e:65:94:c7:6c:13:
dc:91:fd:83:b7:ea:d7:15:99:d2:59:2e:d6:3a:73:6a:7d:fb:
38:29:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:37:34 2025 by rpki-client