Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/414nKkHebTOgTqZ_q2PSfPTH6Dw.roa
File: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (raw, json)
Hash identifier: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=
Subject key identifier: E3:5E:27:2A:41:DE:6D:33:A0:4E:A6:7F:AB:63:D2:7C:F4:C7:E8:3C
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 0194206857D727E339CD2723CE94599CC278
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/414nKkHebTOgTqZ_q2PSfPTH6Dw.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 185.253.8.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:57:d7:27:e3:39:cd:27:23:ce:94:59:9c:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e35e272a41de6d33a04ea67fab63d27cf4c7e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:ea:8e:cc:75:8b:ec:e1:48:6d:5e:f3:94:
26:05:ad:d3:fa:a4:fe:13:d5:6a:70:92:bf:e2:d0:
f7:4d:87:81:f2:92:15:6f:00:b1:4d:5d:a7:57:3b:
ca:06:a2:8f:92:54:62:2c:04:54:16:b6:9b:4d:5b:
e7:f4:3f:ba:3b:3f:a5:a8:1c:fc:9b:0f:3f:e9:53:
5b:e6:70:83:52:33:f7:19:1f:38:6f:3b:d4:5e:9c:
b0:c5:6e:9b:3b:5b:32:26:c5:62:9a:4f:c1:a2:13:
c7:ed:99:56:e1:54:06:fd:59:d8:0b:49:e3:bb:d4:
be:63:17:15:fc:a5:4d:49:4c:ae:59:ff:00:d7:e3:
bb:01:95:34:ab:a9:1c:68:35:c0:83:7b:1f:bc:f3:
91:16:c6:68:6d:1e:c4:85:ae:e1:0e:b3:d2:ba:c7:
c6:c0:fd:72:8d:2a:52:20:57:02:3c:4c:32:6d:f4:
e2:22:57:59:a2:6d:b9:1f:df:8d:40:41:54:ca:c9:
1d:22:9c:19:9b:78:89:da:9f:64:ad:23:ec:aa:70:
46:41:d4:a1:7f:15:de:86:ed:e3:a1:41:c1:50:fa:
b3:85:ca:6b:4c:0a:2e:69:de:9e:51:69:6f:ee:7f:
56:50:4a:26:fb:1c:66:24:28:da:cd:5d:55:36:3f:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:27:2A:41:DE:6D:33:A0:4E:A6:7F:AB:63:D2:7C:F4:C7:E8:3C
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/414nKkHebTOgTqZ_q2PSfPTH6Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.8.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:51:f1:18:fb:02:81:28:bc:b5:cd:36:c1:a6:30:54:0c:
12:3a:cb:4e:4a:ec:c9:ef:ff:90:91:86:98:f7:fb:d8:d6:8a:
3c:3a:9c:b6:e4:5d:38:62:91:b9:2d:69:03:75:6d:19:6b:8a:
53:74:13:e9:d4:05:40:f2:21:6a:d2:28:6d:03:65:56:33:fe:
b7:e7:a8:f5:a2:84:d7:f6:67:eb:b5:81:41:4a:ac:42:89:a1:
f8:42:1e:56:b5:4c:dd:bf:1d:0d:f4:32:31:d4:0d:5a:4d:11:
36:3a:52:a4:d1:52:91:06:05:e2:25:f5:a4:de:3f:8c:30:16:
93:bd:3a:8a:b1:34:d3:e4:f7:eb:74:7a:ac:14:6e:5b:a0:0b:
a7:50:96:7c:66:99:a7:ca:e3:9c:81:2d:6d:22:76:24:4e:ce:
a0:3a:fd:4c:aa:a4:b3:27:e5:7a:59:f3:f1:de:0f:0e:38:1d:
1d:b1:d5:86:6a:69:88:0f:f6:71:e7:fa:48:a4:3e:62:a5:44:
a8:53:0d:8d:4d:de:e3:e5:7d:cd:7b:4e:8d:6d:eb:19:44:df:
e6:e6:71:af:ff:27:17:84:65:4a:fa:9f:0f:af:4d:78:e3:a6:
e0:a9:d3:d1:87:9c:b8:9e:91:c1:14:d3:cf:d0:6c:0a:32:52:
bd:50:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:40:02 2025 by rpki-client