Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHBfv0gyzb0m2U6I6dE-aHWYpY4.roa
File: HHBfv0gyzb0m2U6I6dE-aHWYpY4.roa (raw, json)
Hash identifier: 0+tbt9mtt2yyyNfT+iWtEwCv5JVWWvW8t9rpTlBCP/0=
Subject key identifier: 1C:70:5F:BF:48:32:CD:BD:26:D9:4E:88:E9:D1:3E:68:75:98:A5:8E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276068736F0BDEF464D8042712178B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHBfv0gyzb0m2U6I6dE-aHWYpY4.roa
Signing time: Thu 02 Jan 2025 17:54:16 +0000
ROA not before: Thu 02 Jan 2025 17:54:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60647
IP address blocks: 86.105.4.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:60:68:73:6f:0b:de:f4:64:d8:04:27:12:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c705fbf4832cdbd26d94e88e9d13e687598a58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:73:f7:46:ba:ad:5b:57:02:2c:9e:fc:1c:
1a:3b:b9:79:e8:c6:47:db:c7:0f:15:06:c0:13:12:
68:83:b8:c3:c3:8a:60:09:8d:c0:47:4c:c8:c1:39:
e8:39:41:f0:9b:a3:e4:39:e5:47:89:6b:83:0d:fb:
78:c7:0b:5e:ed:5c:e6:5f:60:5d:80:99:cd:01:14:
5f:73:4d:97:e1:b8:74:ca:02:3f:79:28:91:fd:52:
7c:b0:a1:81:1d:d0:14:0f:8c:45:67:d6:7c:b8:c4:
6b:bb:15:ea:51:33:fc:35:61:7a:3b:af:48:c3:25:
fa:a1:e7:ca:d7:7c:40:10:37:16:28:26:fb:85:fd:
10:f1:0e:40:e8:25:eb:c4:ad:4b:d5:be:99:c6:f3:
9f:3a:60:28:82:f1:ee:c1:0f:a8:30:55:c3:d1:ef:
6e:bb:b4:f8:57:a3:99:9b:50:46:ab:5e:61:b4:b2:
65:cf:da:03:43:d6:4a:60:a9:8c:60:ee:42:2f:b2:
28:0b:6f:97:65:51:c2:b4:31:40:5f:f3:fc:79:c8:
c0:42:ff:d8:c0:15:43:f9:79:f1:8d:64:9d:22:4e:
21:b2:fa:a3:00:4b:cf:d6:a8:89:a7:59:9a:59:f2:
91:8f:65:5a:be:8a:a7:0d:f9:4b:03:a7:98:7d:0c:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:5F:BF:48:32:CD:BD:26:D9:4E:88:E9:D1:3E:68:75:98:A5:8E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHBfv0gyzb0m2U6I6dE-aHWYpY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4a:fa:9f:34:97:4c:10:9a:af:79:dd:b8:c5:d3:4d:1e:d3:
14:89:f7:64:cc:cd:58:d3:da:49:e2:8b:f8:47:89:c7:78:de:
a5:52:e6:58:86:4b:6c:80:b2:46:60:0b:30:06:5d:95:e5:72:
72:b4:25:21:11:7d:f2:c3:28:b6:a6:bf:54:80:89:f9:df:56:
48:eb:a7:7c:9d:ad:61:3d:36:92:cb:ec:01:37:73:38:53:93:
53:5c:fb:40:46:6d:df:41:58:40:a8:6d:cc:97:69:b6:77:be:
6e:02:59:49:88:2d:ff:09:11:cd:c0:86:17:c7:09:da:cb:70:
85:82:30:17:bc:60:94:77:9c:ae:46:f3:62:03:50:58:1e:7b:
c2:82:03:93:48:e0:22:25:b2:aa:69:a1:a5:9d:1a:df:fd:e7:
9d:2c:fe:e4:7f:81:39:b8:d7:e4:73:26:ec:ea:3b:86:38:9c:
ef:10:b8:58:0d:27:9b:83:73:25:e5:be:3b:02:fa:41:75:19:
11:19:e0:9f:22:fb:f7:20:b8:a8:76:5d:07:3d:b0:03:ba:02:
34:4a:8d:1a:b2:23:b4:b1:57:54:f0:e7:14:60:34:f6:d7:82:
3c:b1:8b:cc:15:82:b1:45:8d:53:87:29:ff:2b:5f:42:d0:53:
c4:d9:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:54:22 2025 by rpki-client