Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/hB542mtzHKT020gCO89hSyCxonc.roa
File: hB542mtzHKT020gCO89hSyCxonc.roa (raw, json)
Hash identifier: j/lQ9BlUT6QGpvUslj4RoqcnFBim1XosHeLetncd7vA=
Subject key identifier: 84:1E:78:DA:6B:73:1C:A4:F4:DB:48:02:3B:CF:61:4B:20:B1:A2:77
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D98A254A0F51ED2D7E8EF809544F7F
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/hB542mtzHKT020gCO89hSyCxonc.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41911
IP address blocks: 46.250.96.0/19 maxlen: 20
91.241.120.0/21 maxlen: 22
91.243.0.0/19 maxlen: 20
176.110.0.0/19 maxlen: 19
176.110.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8a:25:4a:0f:51:ed:2d:7e:8e:f8:09:54:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841e78da6b731ca4f4db48023bcf614b20b1a277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:06:e1:7d:07:37:1d:e5:48:f5:1f:96:a3:
d6:cc:91:c2:b3:df:db:e6:f3:79:20:b3:b4:f4:75:
d4:6d:82:2f:2b:21:4b:3b:18:e0:cf:54:a3:9a:96:
bc:78:4e:2c:5c:4d:ef:bd:b4:5c:ed:49:39:ee:bd:
f1:27:9d:aa:d2:92:51:b1:c1:50:43:c2:01:06:6d:
b5:0a:75:e2:36:1b:21:cd:60:63:1c:3a:4c:82:4a:
82:85:66:50:69:68:41:54:59:c5:b0:5e:e8:3b:e4:
ab:e0:c3:bd:a6:ca:b4:86:ea:c0:62:f2:f8:18:c3:
07:0e:4a:a3:56:0c:2c:b6:3f:79:36:bd:b7:c4:fb:
ef:1f:58:a7:a2:ba:3d:1f:6b:34:bf:97:ec:03:dd:
76:b1:1c:9c:59:48:f7:37:fa:36:4f:09:5d:e1:b6:
2e:8f:c2:03:6f:b5:4a:89:09:86:87:a7:7e:dc:30:
35:9e:b9:33:74:e3:a4:79:16:de:da:eb:ea:27:da:
c4:1c:ed:27:8e:0c:52:32:03:3e:51:9c:eb:a6:96:
27:70:20:a9:94:1d:77:95:d4:93:5b:3b:81:98:ca:
4c:8a:84:b4:c6:04:16:45:9b:5f:f2:87:db:84:eb:
42:6d:05:fb:f2:ec:9f:ff:72:0c:78:dc:38:a3:b9:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:78:DA:6B:73:1C:A4:F4:DB:48:02:3B:CF:61:4B:20:B1:A2:77
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/hB542mtzHKT020gCO89hSyCxonc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
91.241.120.0/21
91.243.0.0/19
176.110.0.0/18
Signature Algorithm: sha256WithRSAEncryption
21:c1:23:b3:d4:c0:9e:14:78:a4:6e:88:27:bc:55:c4:f9:18:
41:dd:25:b4:85:56:19:a7:8e:42:8c:5e:a2:7b:b2:c6:cf:bc:
2f:b3:e3:41:67:9f:78:dc:d1:c2:db:69:a8:c3:9f:0b:8e:59:
21:bb:4f:07:0f:47:09:b2:49:de:b6:1f:1a:ef:e9:ff:af:e3:
53:0d:7b:44:19:fa:5b:88:30:b4:a7:75:f2:61:5a:9d:44:cb:
40:62:78:02:0c:69:97:e2:52:a3:ad:0f:32:ef:aa:09:77:61:
5f:d0:9d:57:6e:24:19:2a:bc:0c:84:70:a1:29:b4:55:7e:ed:
79:ef:73:a7:d9:e8:37:d5:b5:e1:d4:50:64:08:7f:9b:34:dd:
7f:c3:f5:b5:78:8d:63:34:28:5c:21:34:be:36:77:b2:d1:ab:
07:1e:8c:cd:79:35:bb:e4:45:63:60:24:54:85:e7:c7:ea:56:
cd:7d:01:3d:c3:99:54:00:d4:d0:75:17:e0:88:7c:5e:a1:cd:
88:2f:9b:2c:95:4b:5d:b4:70:98:b7:01:76:a5:96:9b:c0:cd:
1b:64:1b:41:34:e8:65:50:7f:37:51:ca:28:56:1d:e0:cf:54:
99:92:96:e4:36:32:86:36:12:40:95:04:54:17:71:eb:58:0a:
70:08:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:18 2025 by rpki-client