Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3HK6Lxfv_ap2v5npEv2eBXNK5as.roa
File: 3HK6Lxfv_ap2v5npEv2eBXNK5as.roa (raw, json)
Hash identifier: JVJOChgj2b1eiYGKv+/4ppoTJIeTpNfpLcOGw8wCjlU=
Subject key identifier: DC:72:BA:2F:17:EF:FD:AA:76:BF:99:E9:12:FD:9E:05:73:4A:E5:AB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B13E0A03D8B4CCFBA36F16588244
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3HK6Lxfv_ap2v5npEv2eBXNK5as.roa
Signing time: Thu 02 Jan 2025 17:53:31 +0000
ROA not before: Thu 02 Jan 2025 17:53:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41095
IP address blocks: 88.216.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b1:3e:0a:03:d8:b4:cc:fb:a3:6f:16:58:82:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc72ba2f17effdaa76bf99e912fd9e05734ae5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:d0:a2:11:19:db:6a:4f:00:e0:4f:37:0e:
7d:76:64:e8:d8:cf:5f:31:38:f2:b5:80:fa:d7:6c:
ff:50:29:7e:76:81:76:72:bf:d2:3e:76:f4:7a:22:
06:fb:db:a1:c4:66:54:75:d7:3e:b3:ed:1f:2a:1c:
0c:8e:42:0e:dd:ea:c4:14:01:3b:c6:92:c2:d3:26:
23:50:39:86:9c:aa:8d:66:f3:13:5b:f6:49:76:cf:
39:2f:1e:34:38:02:4b:eb:a4:f3:35:e7:84:09:0e:
da:9e:c3:c5:55:b7:a2:48:2b:d5:19:e4:46:c7:13:
d7:97:69:1b:80:19:58:10:f6:05:1b:5a:fb:36:33:
6d:df:5f:80:39:da:2f:bf:fa:2b:bd:9d:d8:01:cd:
7a:42:ac:8a:34:18:b5:69:50:e6:ae:3d:23:16:04:
cb:c0:8e:df:68:d3:94:db:a8:73:cc:eb:6e:61:14:
17:92:79:a5:60:8b:5f:14:81:df:d6:f9:6d:45:3b:
48:b3:c8:0b:f9:e7:b3:5d:05:2c:5c:43:5b:9d:50:
b5:0e:f6:2b:c9:07:7f:19:06:fc:43:19:eb:0e:d1:
86:7b:de:72:cf:ef:1b:d0:76:30:a8:f0:b0:4d:dc:
c6:c5:e0:09:5c:4d:3c:d0:73:74:d4:9f:cb:66:45:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:BA:2F:17:EF:FD:AA:76:BF:99:E9:12:FD:9E:05:73:4A:E5:AB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3HK6Lxfv_ap2v5npEv2eBXNK5as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:26:3f:f6:3a:ae:dd:ed:e0:b8:84:b0:4f:78:4d:98:a0:76:
e8:62:bb:32:19:e4:02:d8:a3:45:8f:8f:88:60:4c:78:04:f9:
68:16:c8:6a:d2:c3:73:b8:05:c6:f1:16:1d:8b:4f:34:e0:00:
cd:d5:41:28:c4:1a:20:29:59:5e:f0:1c:65:a7:e1:01:c1:a4:
d6:4f:33:58:ae:c2:8a:96:f7:5d:01:79:af:ab:63:26:0f:0d:
61:39:b3:f0:3c:52:55:ca:54:5c:61:fc:42:21:49:78:2b:66:
de:63:2a:e0:ac:df:d3:2d:a5:f9:24:03:24:1b:bf:c2:17:da:
61:35:1c:51:07:24:6f:b8:f0:97:46:07:3a:cd:ba:b8:eb:a6:
bc:39:a6:3c:38:c6:57:6b:74:af:6a:27:32:34:eb:7b:51:24:
2a:1d:f7:80:3a:8e:7d:a5:13:51:44:e3:2e:36:20:78:2c:df:
51:5b:d3:a7:37:74:6d:19:67:93:65:34:26:f3:d9:54:df:72:
7b:5f:90:f8:8b:8a:81:34:7b:82:fa:89:aa:ae:fe:45:ba:3f:
9e:b6:c9:48:72:17:aa:3a:52:92:c8:04:09:4c:0f:1b:47:e5:
dc:15:c0:0e:46:f0:7f:cc:39:b8:aa:88:60:1e:c0:64:80:19:
8e:3b:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:57 2025 by rpki-client