Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hp5ect9lYgBo8YeD0kYGPqIVIWE.roa
File: hp5ect9lYgBo8YeD0kYGPqIVIWE.roa (raw, json)
Hash identifier: bU8CEDTNnsMFjBYJstxXTlTuXwJC6lBr3bl7i7JNilc=
Subject key identifier: 86:9E:5E:72:DF:65:62:00:68:F1:87:83:D2:46:06:3E:A2:15:21:61
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 019426D8D791315B23122FA048466AFF0848
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hp5ect9lYgBo8YeD0kYGPqIVIWE.roa
Signing time: Thu 02 Jan 2025 11:48:52 +0000
ROA not before: Thu 02 Jan 2025 11:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9230
IP address blocks: 193.32.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d7:91:31:5b:23:12:2f:a0:48:46:6a:ff:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 2 11:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=869e5e72df65620068f18783d246063ea2152161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:fa:45:9f:8d:92:cd:19:97:b0:3d:57:59:
18:04:5d:c2:e3:0d:9f:0b:43:70:e6:cf:bc:c7:11:
49:29:12:d6:04:7e:23:a7:53:1d:fa:9c:15:cd:e3:
26:05:f1:14:af:ad:45:09:07:e0:72:5b:f7:91:ce:
4f:8b:16:07:79:1c:af:3d:7d:7e:6e:f2:c8:fc:ea:
bd:3a:bb:78:33:a5:d3:17:96:30:29:ab:82:ee:fb:
65:4f:d3:13:1e:59:dc:4d:de:e3:d7:9c:21:e9:41:
86:b4:9c:30:29:f4:01:04:5d:45:af:31:d6:bf:6d:
8e:1e:2f:18:ec:50:20:e2:9e:75:8f:66:e1:45:33:
bc:2d:81:a0:b1:63:df:d9:9f:5b:42:53:ef:c0:d4:
d5:15:8d:6d:0b:d9:bd:c4:c4:ae:13:60:e2:6e:77:
43:a8:1a:f2:69:70:31:cb:3b:e0:db:34:b3:c5:48:
87:13:78:82:d8:fc:ca:33:7e:c3:a6:32:fc:ea:49:
db:a6:0f:c5:d2:90:28:cc:0b:f9:5c:89:c2:c3:ea:
9a:69:d2:fe:2c:7d:d8:52:9e:ba:87:13:b3:68:3d:
a7:ae:c8:24:5d:a9:ee:ec:17:a7:b4:d0:63:74:f3:
52:45:fb:9c:88:e2:07:45:b1:55:2a:a5:79:53:7c:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:5E:72:DF:65:62:00:68:F1:87:83:D2:46:06:3E:A2:15:21:61
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hp5ect9lYgBo8YeD0kYGPqIVIWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:66:56:5b:37:7d:0c:4e:c4:39:9f:ee:34:f8:f8:ef:d2:c1:
10:c2:d0:b3:56:cb:d4:86:fd:12:a5:d2:b9:c4:14:af:af:20:
81:36:84:17:f4:fc:c7:a4:ba:36:94:69:3a:af:75:3b:f6:13:
c3:e4:83:0c:55:0b:c9:a7:73:97:dd:e1:44:74:8d:b7:75:c6:
60:ce:2e:5f:0a:5f:a8:1f:3d:d1:ac:44:4c:34:a8:bb:55:ea:
f2:61:67:b1:cf:0d:7f:ba:08:ec:7b:a3:37:bd:59:a5:43:5c:
a6:50:d5:ea:23:7d:79:60:19:9e:00:f7:63:cb:a5:3b:26:60:
e7:eb:cf:30:a6:d0:4c:d0:39:54:dc:2a:80:6b:ab:3c:83:97:
32:ff:85:8a:6a:64:66:41:60:f2:42:56:f5:3a:8c:3a:34:52:
05:1f:98:48:b8:d3:6f:0c:6e:b8:f2:a2:96:d2:d2:87:5a:4d:
a4:01:8e:c7:97:bc:9f:0c:aa:63:df:cd:37:7f:89:d9:4d:cf:
49:24:16:ca:55:bc:22:c1:77:aa:69:3a:1b:84:34:b1:d0:03:
48:88:d4:f2:eb:25:f0:db:48:24:30:93:be:63:f3:67:0b:30:
c1:f3:5f:23:59:a8:1d:54:62:9a:86:1d:9c:51:10:f8:8d:50:
d0:7b:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:21 2025 by rpki-client