Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa
File: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (raw, json)
Hash identifier: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=
Subject key identifier: 1F:23:E0:A4:0B:AF:32:C3:48:E4:BE:92:2C:F3:C0:76:70:67:3D:DA
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0194D963D78ABC7ABB5E58B6F3CC531BB832
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa
Signing time: Thu 06 Feb 2025 03:53:06 +0000
ROA not before: Thu 06 Feb 2025 03:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 212.116.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d9:63:d7:8a:bc:7a:bb:5e:58:b6:f3:cc:53:1b:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 6 03:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f23e0a40baf32c348e4be922cf3c07670673dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:98:c0:e2:7e:a9:39:e8:b5:6f:5d:5b:5e:
a9:23:41:21:be:00:71:38:09:d1:ed:75:85:b4:42:
ac:7f:37:de:5a:5d:85:80:a9:31:64:3b:f2:6b:f8:
42:33:ac:1a:54:2d:4f:fe:a0:0d:2f:ea:a5:39:25:
be:41:e3:c8:f2:0d:2b:01:78:9f:9b:2a:63:90:08:
d9:d8:c0:85:3a:43:bd:9a:4d:89:38:54:b5:09:14:
01:dc:a5:22:0e:6c:f7:d1:2d:39:70:37:07:5e:24:
f1:ef:04:65:1d:2c:7c:76:92:75:73:b5:db:74:7c:
ad:65:03:30:64:e0:3a:3b:b4:fb:36:88:0c:21:bf:
74:8a:2d:5d:58:c1:66:47:24:8a:a0:1e:24:56:2e:
03:4c:75:76:22:7c:1a:12:24:98:72:9e:54:3b:b4:
15:56:61:6a:8b:f0:3c:23:37:f1:3a:af:13:b1:d2:
92:3e:9d:7f:d8:21:6b:4d:1b:bf:08:e0:1c:16:46:
8d:d6:93:e2:46:76:8f:ee:73:7a:d1:54:54:54:20:
b2:cd:9c:ec:e9:d3:3a:4d:bf:92:eb:49:87:b4:d5:
26:06:ec:10:3d:da:ca:0e:6d:a9:20:d1:c0:ac:19:
b0:9d:6b:b8:1b:1f:6b:7a:90:83:5d:d5:d8:02:97:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:E0:A4:0B:AF:32:C3:48:E4:BE:92:2C:F3:C0:76:70:67:3D:DA
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:8d:d2:d3:1e:0a:28:a9:15:27:d2:c4:83:68:50:e8:d1:51:
f7:5e:5a:79:e9:5a:a1:c9:13:69:ec:a5:ea:12:d7:e5:76:d2:
77:fc:ee:90:dc:34:56:6f:06:16:5d:33:43:95:a3:19:fc:df:
d4:49:77:17:05:57:8e:96:13:c9:05:3e:bf:e9:6c:b0:08:a2:
24:e6:9a:bd:9e:31:ee:91:76:fc:74:08:1e:b6:29:1f:2f:39:
0e:7c:1c:df:11:4a:44:17:00:c3:6c:bd:19:fe:99:25:40:83:
fb:77:26:63:a5:5c:72:b5:9d:60:20:95:3e:ff:2f:aa:02:c4:
b0:72:46:23:3c:46:3a:a5:73:98:04:c3:50:a1:95:56:a5:33:
6c:85:ec:37:2f:ba:e5:01:3d:ec:c1:e1:bb:ee:67:ef:09:72:
1b:da:98:64:ac:34:80:32:7d:f3:79:b3:ad:ab:8c:3c:e4:04:
fa:e3:de:d5:93:4c:8c:f0:ea:b0:ff:6c:ab:f9:12:17:69:da:
2c:13:11:18:50:26:da:fe:8d:3b:60:0b:f1:f3:51:19:c4:77:
e8:4b:6d:07:44:74:85:d9:ec:aa:0b:37:c8:01:43:8a:db:0e:
49:47:83:f9:31:13:f5:3d:16:fa:51:cd:dd:41:27:e9:6a:39:
f4:c3:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:58 2025 by rpki-client