Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa
File: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (raw, json)
Hash identifier: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=
Subject key identifier: 1D:97:F5:8F:24:D1:9A:BD:90:33:F1:B5:C0:D4:FA:27:71:7A:3A:63
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01941F8C25F4140BF8ABFAE0CF931DBBCBDF
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208149
IP address blocks: 45.140.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:f4:14:0b:f8:ab:fa:e0:cf:93:1d:bb:cb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d97f58f24d19abd9033f1b5c0d4fa27717a3a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:68:77:0d:bb:29:d5:95:41:f8:6c:d1:7e:
41:9f:2f:94:5c:9f:1e:5c:ac:77:ae:0d:84:b5:64:
7c:96:98:09:6d:e8:9f:0a:62:12:f7:4a:5e:34:27:
95:4e:c7:7f:e3:88:90:32:d7:f7:80:69:17:b7:65:
77:2d:ea:b2:40:27:9e:ac:ff:21:32:2c:31:89:b8:
8a:91:e0:cd:8e:ac:fe:12:b4:38:c2:31:83:32:d9:
72:11:0c:30:35:d0:a6:a9:e1:ca:90:83:48:9e:fa:
0b:9b:a9:84:93:f3:ab:5b:23:6b:69:67:8a:a9:9f:
bc:91:e1:8b:16:23:8f:fb:8d:a8:69:fe:f7:65:22:
91:d0:30:f1:80:58:8a:da:19:50:70:e8:4a:b3:29:
aa:45:e8:b9:83:87:4e:26:75:5c:8b:99:51:3d:ce:
c6:0b:99:c0:59:ca:da:7a:a7:9e:e6:7d:f7:19:ce:
66:42:0f:66:ef:a8:73:39:0c:89:d1:61:ac:a1:2e:
bd:d0:3a:72:fd:c9:50:d0:c2:12:ff:20:e1:16:11:
d3:3e:7d:bb:a1:d9:82:ab:fb:45:70:fc:13:09:97:
57:8b:75:84:1c:8e:0e:85:b0:c1:dc:9a:a1:03:43:
8c:2d:da:61:60:a4:fa:c7:72:25:f3:23:46:bc:49:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:F5:8F:24:D1:9A:BD:90:33:F1:B5:C0:D4:FA:27:71:7A:3A:63
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ad:e7:9a:41:40:b8:4f:eb:b2:db:80:0c:ea:ac:e8:b0:bb:
bd:78:cf:e8:63:d3:7e:ee:1d:8b:db:cc:55:ef:f1:47:ad:9b:
9a:bf:12:53:e6:bf:3a:2f:d5:d2:03:fb:1c:d0:4e:70:e5:ce:
2d:73:d6:21:b8:f2:b1:b9:00:c0:94:d4:cf:7c:d0:73:5b:df:
63:cb:72:b6:64:52:b6:35:3f:cb:3d:d6:04:43:b4:95:fe:b7:
76:e9:d6:b5:2d:75:96:09:21:72:28:1e:d8:2f:50:4c:8f:f1:
19:f0:b6:88:29:41:ef:d4:7f:9b:23:24:24:26:fc:ad:3e:95:
4c:65:9a:12:12:2d:05:7b:ea:fb:ae:23:1b:30:5c:bb:d7:b9:
8d:ce:92:f8:00:2b:65:a8:9c:11:28:64:d2:5d:b1:d1:b0:a5:
ad:e8:f0:35:29:12:9f:d0:99:7d:fd:2c:7f:32:d5:c9:13:7c:
3f:bb:61:99:03:5a:96:19:a4:51:91:a0:76:00:40:f3:95:cf:
a8:87:a9:3a:4a:86:18:c4:a3:aa:e8:70:6f:47:8e:80:05:f2:
45:c5:ee:4a:85:39:40:30:ce:e4:b7:f8:f4:9b:80:b7:32:78:
4b:c6:f6:f5:d8:e5:1a:57:02:2a:5c:5e:59:35:0a:95:50:00:
3b:3c:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:50:08 2025 by rpki-client