Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hWxHGfuzSmTd0FIMr_KfsAIPB68.roa
File: hWxHGfuzSmTd0FIMr_KfsAIPB68.roa (raw, json)
Hash identifier: V/0pAac7/FwobVclcBjWWJW/MEd9qAGxJRjdtHljsIg=
Subject key identifier: 85:6C:47:19:FB:B3:4A:64:DD:D0:52:0C:AF:F2:9F:B0:02:0F:07:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCB719D1132B5CA7B61059634C9F5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hWxHGfuzSmTd0FIMr_KfsAIPB68.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59692
IP address blocks: 93.171.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cb:71:9d:11:32:b5:ca:7b:61:05:96:34:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=856c4719fbb34a64ddd0520caff29fb0020f07af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:43:e5:f0:93:5c:60:35:b2:c1:46:19:44:
3c:42:2d:de:73:04:18:7f:25:ef:9d:1f:95:00:4b:
2d:fd:8c:32:f3:f7:3a:63:47:c2:f7:cc:a1:18:1e:
a8:7f:10:c1:d8:c4:84:e3:76:0e:c1:34:44:05:7b:
1d:69:83:86:d6:36:a0:bf:9b:c2:c1:5b:70:94:24:
1b:87:90:1a:3a:6f:36:8e:b6:f3:88:b7:54:7e:73:
94:51:43:73:c0:5c:55:2b:4d:d5:db:c7:c6:5f:3c:
54:5e:0e:b6:e0:69:26:1e:63:69:fb:43:54:91:b7:
f2:08:62:f6:c2:d8:f5:4e:89:80:97:e6:b9:10:0b:
e0:9e:02:d6:64:04:2e:45:b7:d3:a4:e6:d8:9e:d8:
68:bd:03:1d:b1:93:00:c8:f3:47:2e:ea:cc:fd:31:
b1:40:aa:87:1d:60:d7:7b:d1:bd:ea:f8:61:6f:0e:
6d:bb:51:40:d9:bd:e1:38:e6:6d:f6:16:37:5f:3a:
a0:4a:90:5a:e5:7d:7f:4a:8d:07:e6:d0:b0:36:6d:
b5:af:97:68:fd:54:4a:78:40:99:30:bc:78:af:91:
77:22:9a:0c:ca:29:bb:1b:4b:3c:43:02:c5:54:6c:
9e:c8:cc:05:7a:80:b1:42:b9:e4:34:cd:09:f4:6b:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:47:19:FB:B3:4A:64:DD:D0:52:0C:AF:F2:9F:B0:02:0F:07:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hWxHGfuzSmTd0FIMr_KfsAIPB68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0a:40:1c:74:62:b5:39:eb:0f:8d:18:80:f5:05:b6:65:26:
6b:f9:63:1a:7f:5f:02:21:36:6f:ba:50:a2:c8:f3:6f:a1:a0:
c8:c3:17:ea:a9:b0:65:8e:2e:81:a9:82:57:54:ff:d7:52:ee:
56:90:89:c3:a8:22:59:48:9d:7d:86:69:25:9c:31:65:f5:5c:
01:f5:b9:c8:67:ec:36:db:2e:86:c7:2d:3c:02:94:a3:75:4c:
e6:59:d9:22:25:50:21:9f:5c:9f:8b:4b:64:97:37:c5:e2:79:
b0:a0:22:50:53:be:55:45:b3:29:e2:f5:a9:bd:77:3f:d0:d3:
16:24:ee:5f:23:b4:4f:61:2f:49:cc:88:70:32:cb:cf:40:03:
10:3f:ca:86:30:b0:56:79:77:fa:f5:78:41:ca:c8:a2:f0:35:
de:18:c8:2d:4a:b6:35:fb:2e:f8:be:94:65:2a:e7:c3:ce:4d:
ad:6d:28:dc:1e:6e:34:9e:b8:9e:d7:7c:44:04:f8:30:c0:e0:
ba:ec:e5:a6:26:0a:df:4b:e0:55:90:3d:af:75:1a:15:d7:f4:
7d:12:b5:51:7c:88:91:99:d8:94:54:f5:b0:34:9e:f6:c5:22:
b9:0c:c4:d0:e2:b8:a7:94:bc:74:19:ac:e3:39:6e:0e:06:54:
53:0c:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:14 2025 by rpki-client