Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/HddtNmC0x8zTG5Lk3qOMl15THPQ.roa
File: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (raw, json)
Hash identifier: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=
Subject key identifier: 1D:D7:6D:36:60:B4:C7:CC:D3:1B:92:E4:DE:A3:8C:97:5E:53:1C:F4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 019421444DD082906E6B589174F6C56D21D4
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/HddtNmC0x8zTG5Lk3qOMl15THPQ.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 185.245.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:d0:82:90:6e:6b:58:91:74:f6:c5:6d:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dd76d3660b4c7ccd31b92e4dea38c975e531cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:bf:3e:55:74:f4:bc:82:32:7e:2a:c2:4d:
9d:ea:2a:54:de:16:fa:eb:6a:4a:d9:8e:b4:46:d7:
ab:ac:73:b0:0d:11:22:3c:c3:80:b1:f5:c6:16:08:
0d:3b:b8:52:04:fe:a9:89:34:11:17:c6:9b:32:b0:
ef:11:b6:b3:ed:c5:e9:1c:ec:e1:96:69:43:d1:b9:
77:c6:95:ad:81:5d:65:5b:1d:81:af:75:e1:20:0c:
01:83:5e:70:97:0f:f0:a6:78:fb:18:ca:3a:22:fa:
c2:75:a0:ce:ac:19:55:16:64:74:4d:28:a4:1f:58:
10:9b:70:33:03:99:5c:b8:1d:1b:14:fc:50:05:11:
15:a0:cd:9c:e9:c5:a6:bc:22:57:01:39:97:b6:95:
a4:08:99:3c:81:d2:d0:b9:f5:b5:ed:a4:36:b4:d3:
97:53:21:ff:89:f3:7f:7b:ce:1c:b3:84:a2:c4:5d:
54:1a:6a:f7:e1:b1:bf:3d:38:dd:09:5b:aa:4a:37:
98:17:2a:70:70:fd:4c:fc:58:9d:f7:e0:b0:cc:26:
d1:cd:81:06:75:cf:4d:43:62:4f:6e:ce:16:4e:8f:
e5:ec:3f:c6:f8:33:a5:aa:f6:f8:52:13:ce:64:42:
1c:9b:ac:f9:de:36:c8:f6:f5:5f:b2:c0:bd:c1:a8:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:6D:36:60:B4:C7:CC:D3:1B:92:E4:DE:A3:8C:97:5E:53:1C:F4
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/HddtNmC0x8zTG5Lk3qOMl15THPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.66.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f3:80:18:06:f1:1a:31:f0:c0:03:f8:d6:44:10:18:79:50:
3a:8f:e6:30:48:fe:55:26:34:4d:bc:16:68:cf:6a:fe:f3:09:
6e:1b:1b:03:cf:2b:11:66:7c:11:03:e3:bf:9a:47:5f:db:5f:
03:e4:9b:84:d9:1a:ab:e8:6c:39:43:9a:2e:d4:d7:1e:25:d4:
84:e4:71:e6:38:70:5e:8d:ba:05:d6:24:1a:b9:08:22:63:50:
13:73:d9:76:83:84:91:0f:c0:8c:43:5b:94:4e:f2:d9:d7:cf:
3a:ac:23:1a:b1:16:35:0f:f7:fd:c0:c7:53:0c:5b:5a:74:ad:
f2:98:24:de:7b:88:78:f8:a6:93:87:d4:72:cc:3b:39:55:27:
69:75:10:67:ce:f2:08:7a:93:97:59:9f:af:46:84:14:01:be:
4c:9f:75:1d:7b:cf:b9:3f:cc:63:3f:91:de:36:5d:a9:3a:8b:
fb:45:0f:b9:ef:2e:8d:c3:f2:2a:a8:f2:b7:cc:ba:72:4d:a6:
96:fe:8f:b2:1a:df:44:b5:47:74:8a:22:7b:bd:45:9b:e2:f7:
08:a9:83:8e:be:7e:cc:71:54:68:7b:e8:95:d2:12:db:0b:e5:
6e:61:03:87:17:22:46:1c:4f:1f:d1:ae:3e:3a:6d:7c:92:4b:
be:fa:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:17 2025 by rpki-client