Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/hnMtsx259zWb5DPTAskFt19vieA.roa
File: hnMtsx259zWb5DPTAskFt19vieA.roa (raw, json)
Hash identifier: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=
Subject key identifier: 86:73:2D:B3:1D:B9:F7:35:9B:E4:33:D3:02:C9:05:B7:5F:6F:89:E0
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019422FB5BAD7F3B9805062F123CE87AEED4
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/hnMtsx259zWb5DPTAskFt19vieA.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 193.106.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5b:ad:7f:3b:98:05:06:2f:12:3c:e8:7a:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86732db31db9f7359be433d302c905b75f6f89e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:06:2c:05:4f:1d:4f:e4:b9:e1:e0:32:24:
9b:cd:48:f8:74:32:dc:2e:13:74:c5:d9:e8:47:44:
ff:a2:00:5e:c1:9b:be:6c:2b:47:62:16:0c:50:6d:
95:8d:5c:89:c3:87:e9:ca:a7:0b:71:bc:d7:c8:6f:
26:70:10:70:3f:99:f9:6d:4b:c9:e5:b3:88:39:16:
58:a3:89:8b:2f:d6:b6:61:fb:bf:99:1a:ac:67:39:
d2:de:d1:70:25:58:b0:ba:f2:5a:08:ca:7b:8a:3f:
e9:84:04:5e:fa:fb:ea:52:af:17:d4:67:76:57:0b:
f3:2e:56:9f:88:cd:f2:70:19:e9:96:6d:2c:dd:a5:
dc:34:ee:0e:b1:37:d6:1f:db:25:10:6b:0b:bb:da:
c2:e5:a9:a9:c1:a3:b3:ed:e1:56:84:28:7a:53:30:
c2:2b:f9:36:85:1e:5a:89:f0:d7:7c:d6:a5:97:ad:
be:65:ea:40:ea:88:83:d5:a0:2d:7c:27:21:71:d8:
79:8c:e4:ac:5b:f4:ba:ab:df:b1:4e:1a:53:96:f0:
cb:13:48:a7:b1:8a:2e:62:4e:50:88:84:44:73:b3:
16:03:b2:45:9b:a2:1d:33:36:9e:96:ec:80:1d:94:
07:fa:66:a8:83:0a:78:82:f3:e4:01:d4:83:d9:d2:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:2D:B3:1D:B9:F7:35:9B:E4:33:D3:02:C9:05:B7:5F:6F:89:E0
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/hnMtsx259zWb5DPTAskFt19vieA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.99.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e4:76:75:64:0f:ab:68:0a:d8:56:67:45:ae:0b:c4:c1:30:
90:e0:55:39:ac:bb:cd:2d:e2:1a:9f:d1:5b:e8:d2:42:bd:6f:
d5:5d:77:39:e1:96:92:5f:15:35:99:2d:6a:6a:93:a8:2a:7a:
95:2e:61:64:69:0e:5e:cd:89:0d:aa:a9:85:f7:8a:f5:23:38:
e7:f2:94:95:10:4d:b0:90:cc:b0:9f:45:b5:7b:07:b0:6a:8c:
83:33:e0:4f:79:6a:f3:c7:91:8d:66:a9:d2:68:4d:84:98:23:
1e:7c:22:97:5a:4f:d5:8b:37:ea:91:e8:17:a0:e8:2b:3e:f9:
3e:0b:15:f8:fc:87:a8:a9:cf:94:ea:17:ad:0e:36:06:a9:fb:
d1:cf:fc:58:e1:d2:21:60:a8:5c:67:1b:aa:fa:e4:63:82:60:
72:75:d9:a4:dd:97:43:13:8d:9d:99:43:47:b5:7d:0a:f3:26:
0b:e8:2f:00:c3:93:c3:32:35:c0:0e:9e:f5:3c:f0:81:75:c4:
bb:d5:3d:cb:e1:23:39:58:e1:3c:98:e3:a0:ca:11:15:c1:de:
dd:03:fa:16:6f:93:25:48:74:68:20:32:97:76:76:30:d8:29:
88:b2:d8:7d:4b:e1:b1:f6:c1:f1:93:b1:ca:bb:3f:23:ea:60:
21:8d:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:41:13 2025 by rpki-client