Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/hzVSMi0KPzevpyomB4cUEWfY6i0.roa
File: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (raw, json)
Hash identifier: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=
Subject key identifier: 87:35:52:32:2D:0A:3F:37:AF:A7:2A:26:07:87:14:11:67:D8:EA:2D
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01941FFA988F0C95951F917079BCD564FC28
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/hzVSMi0KPzevpyomB4cUEWfY6i0.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48200
IP address blocks: 84.39.96.0/20 maxlen: 32
194.62.23.0/24 maxlen: 32
2a01:b1c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:98:8f:0c:95:95:1f:91:70:79:bc:d5:64:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873552322d0a3f37afa72a260787141167d8ea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:35:5c:79:76:13:69:bb:9e:88:bc:6d:3c:
16:ec:c5:cc:f4:89:35:49:63:c5:fe:7a:70:70:b9:
ee:7b:5e:79:2a:a2:cb:f8:c0:9d:d8:1d:02:01:4d:
5f:1b:ec:0b:2c:9f:53:74:9d:df:ec:7c:08:3a:b5:
44:20:8f:b5:a9:85:c1:7c:7d:63:7d:d2:1e:f8:40:
2d:e4:24:ac:61:cd:bc:2b:0e:a2:df:60:10:b7:27:
54:9e:aa:24:01:fc:92:b8:a0:b5:38:28:0e:0f:7c:
7b:c3:07:66:aa:80:85:06:12:f5:c0:51:19:5d:8b:
c7:5e:0b:9a:43:b7:08:c6:f2:d7:81:23:dc:37:ed:
69:3d:eb:06:91:cc:ff:d4:40:67:e0:74:4e:95:a7:
52:2b:57:06:22:d6:ad:6b:ed:dd:ff:ae:89:bb:e9:
7b:cb:33:11:c8:a4:30:99:91:33:d7:ea:71:8d:1a:
5b:bb:fa:29:ed:13:ed:cb:44:79:c1:aa:45:02:b9:
a4:5f:0a:50:1e:4c:a1:bd:82:6f:52:7c:7d:f5:2e:
ba:8c:2d:33:00:84:b4:b0:84:32:03:f8:40:ad:2b:
a4:b5:7b:22:d1:6a:3a:9e:46:80:33:4d:68:42:8e:
ad:9a:3d:65:74:31:f8:64:da:0c:9a:b9:de:73:90:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:52:32:2D:0A:3F:37:AF:A7:2A:26:07:87:14:11:67:D8:EA:2D
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/hzVSMi0KPzevpyomB4cUEWfY6i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.96.0/20
194.62.23.0/24
IPv6:
2a01:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:4c:82:b7:12:d6:c0:a4:d1:a9:ed:11:03:b8:db:7f:36:3f:
a3:78:34:c4:10:d6:9d:76:cb:a2:df:a9:c2:9f:e5:bd:fb:e9:
10:87:69:25:e6:5b:30:83:0b:60:ab:7a:67:39:a5:2c:72:18:
57:41:e6:d0:7b:5c:71:84:1e:5e:66:7d:37:32:53:6d:3e:3e:
63:c6:30:8a:c0:39:4d:89:71:e1:94:24:4a:66:d4:ff:b2:c0:
89:1f:8e:dd:5e:07:aa:2c:41:06:bf:03:7d:76:84:13:42:c7:
85:b0:18:d5:3b:f9:48:82:e9:15:60:f0:fd:be:a6:7b:ed:88:
19:28:4c:72:b5:99:1d:cf:d4:6d:ec:d9:dc:02:29:b9:4a:3b:
67:fd:57:5c:d0:e4:d0:71:08:32:e1:2a:be:b6:ba:2b:d6:14:
50:4c:37:4d:ac:f3:de:1c:f3:ac:ca:67:0e:b1:dd:97:7d:c4:
ed:68:88:0c:be:e3:2d:24:99:6c:f9:19:41:b3:e3:5e:70:bc:
69:27:d5:f0:35:b0:1f:12:9e:a4:98:0b:0e:c1:0e:f8:09:c8:
e9:bc:d2:5a:60:a6:50:f0:e0:71:d0:df:95:ec:59:28:d8:80:
3d:40:32:f1:46:fa:aa:b8:a6:0b:5e:a0:52:68:f4:ee:c3:95:
b1:e6:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:43:09 2025 by rpki-client