Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsO2ddxYNUh63IyQzaKMYcSlO-8.roa
File: HsO2ddxYNUh63IyQzaKMYcSlO-8.roa (raw, json)
Hash identifier: unHjTm0QO7LObasnGULDrV8fLJQKXHghsPK+/45IcpY=
Subject key identifier: 1E:C3:B6:75:DC:58:35:48:7A:DC:8C:90:CD:A2:8C:61:C4:A5:3B:EF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC9F8116592FBE7792A687C46EB19
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsO2ddxYNUh63IyQzaKMYcSlO-8.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59525
IP address blocks: 146.120.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c9:f8:11:65:92:fb:e7:79:2a:68:7c:46:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ec3b675dc5835487adc8c90cda28c61c4a53bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:17:f0:95:a4:26:f1:f0:f8:67:a7:54:db:
0a:35:42:1e:4b:ec:64:d3:d8:f8:05:0e:3f:7e:85:
be:73:a6:e3:ff:9c:6f:dd:02:0c:e7:66:28:69:89:
ea:a3:e0:eb:ae:bb:6a:02:ec:81:86:a0:d4:9e:ca:
98:8d:90:7d:f6:f7:e2:dc:58:fd:03:09:ef:ce:2c:
f2:74:6b:67:3d:69:9c:bb:51:6e:05:68:15:50:d3:
4e:3a:52:b8:e2:3c:5c:d8:65:15:95:76:52:31:ba:
97:7a:a8:03:b3:fa:2b:aa:06:e9:ac:eb:a9:0e:02:
a5:91:89:88:ff:7c:f1:d6:96:d2:0a:31:d4:4c:86:
cd:cb:52:2a:51:d9:4e:81:f1:9a:c0:7f:25:b4:a9:
d4:e2:b3:f9:51:56:e4:13:7c:5f:1c:49:03:17:23:
03:1d:e5:18:af:19:93:a1:14:11:1e:c0:3b:77:9d:
dd:6a:ba:8e:54:ff:50:0e:c4:07:57:1c:b0:8c:be:
a1:73:f6:87:28:7b:8f:25:c5:6e:5b:c6:78:86:1d:
26:f4:d8:16:b7:b9:3b:c0:9d:65:85:04:58:f8:ee:
4e:88:3a:f0:7e:cc:f8:37:f4:bc:02:41:32:d5:a5:
f5:37:17:96:de:f8:0f:f1:68:49:3e:9e:85:c1:9e:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:B6:75:DC:58:35:48:7A:DC:8C:90:CD:A2:8C:61:C4:A5:3B:EF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsO2ddxYNUh63IyQzaKMYcSlO-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:58:93:96:b0:be:db:5d:c8:88:94:70:3b:0c:ab:14:97:b2:
3c:96:3a:53:da:3b:9f:7d:87:ee:b5:4a:66:c3:b3:9d:cf:3e:
e0:1d:2c:e8:19:98:b6:c6:17:85:fa:12:f6:60:e2:16:a8:77:
94:03:4c:23:43:0b:60:c4:b4:ee:04:7a:26:5e:4d:ef:c1:90:
99:57:74:c5:9d:95:ed:e6:19:db:e4:34:52:e0:8c:9d:d2:d5:
90:98:aa:39:32:85:d7:bd:4c:84:6a:6a:7b:b0:65:e5:33:6c:
30:56:e3:66:cb:ec:8e:eb:20:24:d7:9f:5f:90:5f:d5:d5:11:
6f:ed:78:34:9f:4b:6b:7b:c8:d8:b6:f2:4f:01:80:2e:c4:c7:
71:57:e1:1a:3b:56:0b:79:6e:83:83:11:1b:7d:f5:65:59:3a:
86:25:38:b1:39:79:84:ad:f4:ce:84:e7:1d:c0:eb:3f:55:93:
ec:f5:6e:3e:a8:3b:7b:32:85:d6:d8:cc:9c:64:b6:97:a1:7a:
35:4f:06:b0:5c:74:e9:71:28:a2:7e:4d:b7:d9:c5:54:25:4c:
d3:1f:27:a0:21:67:25:9f:a5:ba:5d:da:73:b7:c0:1d:10:12:
a9:af:f1:7a:73:d2:1d:de:ec:13:76:86:b2:f0:ce:8b:5f:b3:
90:c9:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:38 2025 by rpki-client