Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsdhLsVpPMkHOVMT1aYyxX0BQyA.roa
File: HsdhLsVpPMkHOVMT1aYyxX0BQyA.roa (raw, json)
Hash identifier: vfcke+rFK43RQYhII7yz3wbEpqHFhNUGlQl1unQXigo=
Subject key identifier: 1E:C7:61:2E:C5:69:3C:C9:07:39:53:13:D5:A6:32:C5:7D:01:43:20
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590033AC832AFC6BA4E386EE8D94186
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsdhLsVpPMkHOVMT1aYyxX0BQyA.roa
Signing time: Thu 02 Jan 2025 05:49:42 +0000
ROA not before: Thu 02 Jan 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209398
IP address blocks: 95.46.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:03:3a:c8:32:af:c6:ba:4e:38:6e:e8:d9:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ec7612ec5693cc907395313d5a632c57d014320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:34:27:fe:68:5a:55:7b:7d:b4:3b:e5:91:
56:ef:20:2a:a2:8e:b9:a7:f9:f7:47:1d:8f:0f:5f:
07:87:56:50:b2:20:19:3e:a0:83:85:b0:4b:74:93:
34:9c:f2:48:a1:93:5f:e2:53:df:7a:04:d5:f3:59:
b7:ef:d7:28:20:c6:45:7f:69:6d:a5:6b:79:b2:ed:
33:9f:b2:6b:a1:08:78:70:f2:8d:46:9f:d6:b6:8c:
ea:5c:3f:2b:5f:39:21:03:80:da:fc:45:3b:b5:22:
cc:82:cb:66:f3:6f:b2:7a:7c:fb:c4:85:1d:69:ec:
07:4b:81:df:47:21:a0:d1:69:d8:2c:6b:b0:67:ec:
44:83:7a:b5:46:20:6d:f0:1a:0c:e5:14:4c:76:ca:
e0:27:1e:a8:3c:32:1f:ac:d4:d0:d3:16:38:ab:dd:
b4:d9:e0:65:c8:f7:86:71:44:a6:56:19:98:e3:20:
98:d3:7b:12:57:b8:00:e3:08:b2:f0:7f:09:cf:82:
bf:10:11:c1:97:01:70:ba:a7:28:7d:71:81:8a:79:
bb:70:00:7b:a9:64:b7:3b:ca:38:76:9f:12:f6:db:
d0:37:4a:c8:23:e9:aa:bd:05:3c:b3:71:6e:39:06:
09:15:3d:eb:80:2c:97:81:a9:fb:40:d9:ee:e3:ba:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:61:2E:C5:69:3C:C9:07:39:53:13:D5:A6:32:C5:7D:01:43:20
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HsdhLsVpPMkHOVMT1aYyxX0BQyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a8:b9:0b:24:05:94:46:b2:2d:23:55:bc:62:5b:fe:db:0c:
5b:b5:cd:fd:61:5e:2a:d1:c5:a7:1e:8c:d6:12:91:ba:a6:df:
02:79:85:e1:86:ac:50:8d:7d:eb:9b:30:5e:66:ef:9e:b6:1b:
98:5a:c4:bc:f3:69:71:e6:31:ef:9d:52:11:6d:39:50:07:7c:
a7:f2:b3:40:bf:fe:e1:39:b6:fd:5c:3b:f9:14:28:96:98:6f:
00:5b:ac:29:d7:ec:0e:bf:c3:b7:d4:b0:22:31:c2:73:f5:a5:
07:15:10:d7:21:a4:9f:6f:26:fc:6a:18:35:dd:70:d3:cf:a4:
48:1f:e6:0f:e7:1b:df:bc:a5:94:89:7a:a7:59:f3:c0:ae:ca:
2f:de:58:fa:55:d7:d2:c3:ca:90:1d:b7:e2:78:4e:da:93:c3:
05:35:5e:d2:c7:cd:9b:e0:95:b8:9d:17:2a:13:ca:30:7c:20:
56:e8:ce:90:d2:66:c2:38:e9:9c:67:54:8f:d3:3f:78:84:cc:
80:a9:7f:76:0a:b5:4f:a0:c5:e0:7f:04:c3:e6:cc:0c:dc:28:
ee:ee:0c:07:cf:6d:2f:84:b4:b9:11:ad:a3:d2:22:7c:86:bc:
e9:ad:6b:ca:94:ab:a1:95:01:f3:d6:4b:ca:d6:26:35:ef:bb:
ba:05:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:56 2025 by rpki-client