Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ht6d8D_ZZn-RkCt8dSg6X8rXQF0.roa
File: Ht6d8D_ZZn-RkCt8dSg6X8rXQF0.roa (raw, json)
Hash identifier: RbsTCrdp6sU1aeYWawZ46GfdKV1nT+kMZWgpGF/6dGU=
Subject key identifier: 1E:DE:9D:F0:3F:D9:66:7F:91:90:2B:7C:75:28:3A:5F:CA:D7:40:5D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0195EC412FF34E9DF0896D52AF1BB986BE33
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ht6d8D_ZZn-RkCt8dSg6X8rXQF0.roa
Signing time: Mon 31 Mar 2025 12:50:49 +0000
ROA not before: Mon 31 Mar 2025 12:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198345
IP address blocks: 84.32.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:41:2f:f3:4e:9d:f0:89:6d:52:af:1b:b9:86:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 12:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ede9df03fd9667f91902b7c75283a5fcad7405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:40:2d:39:00:31:bc:0d:e9:ac:fc:d1:bd:
6e:71:3a:f2:50:84:a4:8a:65:19:a3:e3:bd:01:16:
f4:4e:51:a7:6d:de:ff:f6:ff:2a:ba:f7:8c:d6:10:
14:6e:0e:91:ef:a3:16:c6:d5:87:98:98:f6:81:cd:
84:4c:95:65:05:2a:70:57:5d:d7:9f:d8:d9:d4:41:
99:e6:e3:c1:82:e4:78:cc:43:cf:d0:61:50:5c:c0:
d6:cc:9b:cf:6c:fe:19:10:59:d6:a7:a3:6f:54:c6:
64:71:78:c4:9f:b7:3b:2b:36:41:c9:44:d1:ad:6d:
16:79:2c:68:db:74:8b:03:7e:c5:b4:71:58:f3:8e:
45:b5:ca:22:7b:8f:df:3b:1b:1d:69:ee:f5:55:4a:
52:fd:58:d2:6e:af:2f:82:99:0e:72:ba:cc:99:89:
cf:5a:79:d7:cb:02:7b:96:29:ce:df:8c:83:fd:03:
17:e8:de:b7:2b:df:7f:5d:6a:85:16:8b:cf:3d:22:
81:17:cb:d6:77:3b:63:36:93:4c:9e:9e:fa:9e:c6:
e4:c3:a3:3d:bb:99:45:2c:b7:d3:9a:a7:d0:3b:15:
26:63:ae:a5:a1:b5:1c:1f:7b:21:31:d2:0f:a8:de:
fb:da:69:19:c9:db:ac:7a:c9:87:a5:02:7b:5b:91:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:9D:F0:3F:D9:66:7F:91:90:2B:7C:75:28:3A:5F:CA:D7:40:5D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ht6d8D_ZZn-RkCt8dSg6X8rXQF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f4:0f:b4:56:94:0e:97:68:16:4f:f0:12:42:51:fc:bb:83:
a3:2d:11:be:09:18:6a:07:5a:86:a7:34:24:74:17:f5:9c:fc:
9c:fd:e0:73:25:31:69:bf:65:7c:cd:4d:f8:5c:94:fb:0d:48:
98:3d:d8:b2:d9:02:f6:7e:d9:e4:f2:9d:05:22:28:9a:15:ba:
91:85:ed:8b:38:0e:0e:8d:b4:81:98:79:74:46:25:5d:34:bf:
30:1c:77:86:b1:d0:a4:cb:e3:41:0c:be:2d:ef:58:8d:18:a4:
84:49:b4:ca:82:f4:9f:45:bb:35:ad:d1:7d:b4:53:41:b8:f9:
19:ba:3a:b2:c4:46:f2:2e:5f:c5:c6:45:e0:f4:d1:3f:35:0a:
69:02:d2:8a:5f:05:f9:f9:3b:51:5d:5a:ed:f3:04:7c:3f:26:
63:66:ce:99:97:67:cd:1b:42:fa:f0:32:15:f6:ed:da:27:eb:
f0:54:5e:e8:e4:fe:1a:d7:50:1e:1e:f0:24:41:d7:cf:67:bd:
3e:a8:1d:b1:0b:84:10:9b:56:00:f8:3f:71:cf:d2:58:61:bc:
81:c7:ef:7a:9d:f0:cf:d6:87:5e:96:db:61:c4:19:f7:b2:8d:
45:5b:a8:c2:38:e0:49:9f:3a:f7:88:b0:b3:94:a3:5b:a7:4d:
1e:49:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:30 2025 by rpki-client