Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/H401Lqlj2gbFoYf6OtBoSN06cFw.roa
File: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (raw, json)
Hash identifier: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=
Subject key identifier: 1F:8D:35:2E:A9:63:DA:06:C5:A1:87:FA:3A:D0:68:48:DD:3A:70:5C
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01942521631207CB7A4FD5CA49C68D430B0F
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/H401Lqlj2gbFoYf6OtBoSN06cFw.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20850
IP address blocks: 77.120.192.0/21 maxlen: 24
193.189.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:63:12:07:cb:7a:4f:d5:ca:49:c6:8d:43:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f8d352ea963da06c5a187fa3ad06848dd3a705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:d6:7e:6d:5c:06:9c:76:d2:91:73:8a:d2:
d5:98:d3:10:80:4f:96:d0:f7:81:72:27:a8:c3:04:
94:1c:61:39:21:b4:14:1c:61:de:7d:cb:83:95:81:
54:08:34:a1:b7:06:0f:51:ae:44:2b:58:a1:55:3c:
e5:e8:2d:1d:17:47:09:a1:9d:48:08:d4:45:0e:25:
bf:1b:d8:dc:55:44:53:0a:22:64:fe:95:ca:ed:98:
ff:0e:72:9d:0b:95:0e:ef:21:3e:44:6a:a3:cd:f8:
18:d8:54:99:3e:d9:83:45:80:2e:cc:a5:8e:1b:8a:
1b:76:4d:71:12:63:eb:7d:ec:81:7b:c1:75:18:73:
49:e9:0e:9c:1e:38:99:e1:23:9c:e6:92:e6:2d:ec:
b5:80:5f:a3:06:26:6b:a1:fc:49:ff:6f:99:b6:81:
d5:e0:d3:3c:79:e0:2f:93:78:8f:e7:09:b1:36:a1:
a2:48:4c:d4:26:a9:3b:bb:50:6a:ca:ef:51:ca:27:
56:14:c6:83:87:09:c4:99:e6:e5:7d:57:12:62:83:
0a:da:8e:fb:2a:61:2b:e1:cd:fe:63:83:90:9a:6e:
43:22:97:12:20:33:f3:4b:ed:f1:5d:a2:eb:66:fc:
4d:e0:fd:5d:13:c5:04:da:ef:2b:8e:74:75:ba:9b:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:35:2E:A9:63:DA:06:C5:A1:87:FA:3A:D0:68:48:DD:3A:70:5C
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/H401Lqlj2gbFoYf6OtBoSN06cFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.192.0/21
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:4f:be:f4:af:a4:7b:e1:a9:fb:ed:fb:f2:d2:08:64:09:3f:
e2:7d:ff:13:46:94:7f:9b:22:2b:4f:6e:8c:b9:7f:e9:f0:21:
22:c5:5a:19:66:eb:ae:64:ab:77:a7:bb:74:a2:df:a6:a1:b0:
42:55:63:7b:a1:a5:e0:d5:f1:48:8c:55:23:0d:97:e4:90:03:
18:01:8d:3c:75:33:a2:9c:d8:f0:6c:03:f9:c0:f1:51:40:53:
e4:6a:14:4e:d2:12:7d:a6:06:a1:92:0f:71:11:10:cb:fa:da:
dc:61:d7:0f:6e:b1:3a:7c:c7:33:d2:65:bc:46:66:c3:2d:5d:
b8:1a:94:22:62:72:c7:57:4b:b2:4d:12:93:93:a6:49:90:20:
b6:59:41:8d:26:ab:c0:4f:8f:df:93:e7:f8:1c:07:f7:3e:91:
b4:2a:18:d5:44:0c:9b:06:0a:06:4a:c7:c6:78:d5:20:c8:14:
1a:89:d3:9b:02:39:2f:1a:79:58:44:65:45:01:b9:ba:79:3c:
9d:b8:cf:1f:d9:18:d3:f3:1a:26:93:3e:76:65:52:d8:80:f0:
8a:1f:e2:72:40:5a:12:5d:ec:ab:83:0f:1d:34:4e:5c:97:84:
a7:6d:d7:3e:57:fa:fd:b3:5f:ac:3e:e2:98:64:8a:d8:dc:0e:
82:15:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:48:48 2025 by rpki-client