Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NHulc4Xr5UTDZcaKywtBQBKjze4.roa
File: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (raw, json)
Hash identifier: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=
Subject key identifier: 34:7B:A5:73:85:EB:E5:44:C3:65:C6:8A:CB:0B:41:40:12:A3:CD:EE
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A4C91F20E777798CAFEC1411C5D0
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NHulc4Xr5UTDZcaKywtBQBKjze4.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204393
IP address blocks: 2.188.234.0/24 maxlen: 24
2.188.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a4:c9:1f:20:e7:77:79:8c:af:ec:14:11:c5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347ba57385ebe544c365c68acb0b414012a3cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:97:e0:16:1d:36:49:e5:4d:56:60:de:46:
6b:8e:ec:7d:f6:47:58:4a:f3:1b:f1:f5:b6:e8:e0:
7a:19:90:f7:f1:f0:14:60:33:05:fb:7a:e5:aa:6f:
7e:a6:aa:73:ba:c5:db:30:93:53:ee:46:1d:3c:df:
f1:e6:92:05:51:f1:3d:62:9c:cf:13:ac:dc:cb:dc:
89:1a:ee:34:83:74:d0:3a:36:aa:be:35:1a:3f:c1:
1c:51:d2:01:1f:77:1a:8a:5a:42:e0:2b:07:19:8d:
bf:e2:d1:f6:d9:8f:70:3e:e8:19:18:cf:6a:b4:00:
37:22:00:b9:96:d3:03:ea:6b:ed:83:ae:b4:8a:6f:
46:8d:34:ea:dc:7e:db:65:b6:bc:73:e5:1f:3f:d6:
3f:f5:f4:cd:28:7b:ae:80:f7:6e:84:44:f4:e7:4c:
e9:c8:5f:04:34:0c:b4:63:86:5e:d0:d7:0c:40:2f:
b6:c1:ec:fd:2d:ca:50:61:84:93:9f:b8:0f:dc:61:
d3:ac:0e:27:88:1e:db:ca:91:0e:5b:ad:96:ee:f2:
91:60:32:47:29:b1:8b:b4:55:a7:a1:11:f4:1f:e6:
fa:d8:ef:bb:64:2a:94:a7:9f:d5:64:79:a6:ab:f4:
00:3c:e6:7e:b1:3e:00:e1:e5:c5:c7:99:dc:7d:05:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:A5:73:85:EB:E5:44:C3:65:C6:8A:CB:0B:41:40:12:A3:CD:EE
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NHulc4Xr5UTDZcaKywtBQBKjze4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.234.0/24
2.188.238.0/24
Signature Algorithm: sha256WithRSAEncryption
08:db:89:29:55:d6:ee:74:03:2c:1f:61:18:1d:d7:95:4c:5e:
56:20:06:b1:ae:3e:a8:0e:d7:9c:01:01:6a:01:26:f0:99:b7:
5f:06:fe:79:c7:3e:a4:d0:1a:42:c5:33:0b:b4:44:09:fa:b4:
87:6d:62:08:56:51:1c:08:d6:d1:7f:a4:d6:b9:de:1c:1f:00:
35:da:2e:a7:b7:df:ae:78:33:d0:35:02:4a:3d:15:e4:d7:54:
f9:24:8c:c5:9c:e1:fd:49:bd:f7:2f:01:9b:84:c1:1d:fe:bc:
a6:a6:f5:e6:29:98:98:de:af:bc:b9:4d:70:7b:1b:22:72:d3:
73:50:2f:d1:16:69:cd:2d:dd:a7:17:97:68:25:26:8d:05:ff:
e5:46:74:3c:a8:b9:cc:6d:d2:7b:be:44:15:06:e0:54:10:70:
99:5e:ef:26:bb:b5:e7:f0:40:21:de:c7:7e:b8:33:fc:5f:df:
36:f1:e9:a9:1f:73:4d:10:9e:0d:fd:30:2b:b7:76:1d:ff:44:
11:35:56:86:60:97:38:3d:72:c0:c0:87:eb:67:d0:08:28:c5:
0e:a1:48:70:4f:91:cf:7c:04:ba:2a:72:81:57:0c:44:08:db:
e4:00:bb:f2:69:80:90:d1:cc:dc:9b:ca:0c:b9:27:b5:e7:78:
2f:95:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:57:09 2025 by rpki-client