Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HqmyIUSqYnAiYq88FP_3go7QZo0.roa
File: HqmyIUSqYnAiYq88FP_3go7QZo0.roa (raw, json)
Hash identifier: Xbwuc9hNvKirLfBuwWokz1nJ+z5feRljB2EqCqOmnp8=
Subject key identifier: 1E:A9:B2:21:44:AA:62:70:22:62:AF:3C:14:FF:F7:82:8E:D0:66:8D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0194AC0921BAE8EA1F0E99667CA78CAA6AEB
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HqmyIUSqYnAiYq88FP_3go7QZo0.roa
Signing time: Tue 28 Jan 2025 08:31:07 +0000
ROA not before: Tue 28 Jan 2025 08:31:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213530
IP address blocks: 195.136.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:09:21:ba:e8:ea:1f:0e:99:66:7c:a7:8c:aa:6a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 28 08:31:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ea9b22144aa62702262af3c14fff7828ed0668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:cd:0f:a5:58:f6:38:3c:d5:e4:df:88:50:
84:64:86:ce:9c:40:1e:c6:ee:2d:86:61:a3:53:d1:
7d:2d:59:6c:19:c1:b1:84:f5:c6:77:40:4a:0b:8e:
6d:b0:39:f1:4d:40:7d:5c:40:9f:1f:cf:40:e3:91:
8a:a5:3a:43:fa:e6:d2:60:a2:85:33:27:36:d9:e8:
e4:73:55:cf:59:23:27:2a:bf:74:4c:3d:fd:40:e7:
f2:f3:d0:63:26:51:51:d7:c7:e9:bf:04:b8:fd:e2:
ec:82:cb:3d:12:a7:05:00:f4:21:b4:4b:9f:69:a1:
64:f6:a6:2d:20:16:fb:21:1b:39:01:df:8e:a8:e9:
c2:74:2f:f6:42:44:0a:39:e9:96:77:1c:f3:2e:e2:
ef:8d:5f:6b:11:20:e8:9a:3c:7d:4f:e8:b0:c3:96:
73:0f:df:ac:21:64:8c:54:99:25:6a:0c:f5:fb:bb:
58:74:c0:45:42:8a:e9:86:a6:cc:7a:35:b6:e5:62:
f6:26:7b:65:67:81:d1:7c:83:7f:67:d1:46:18:2a:
0e:c1:33:78:95:f9:51:cb:1b:4f:80:02:89:88:fc:
af:4f:8b:98:1d:a3:3a:43:52:91:c0:4a:b6:10:66:
74:b4:b5:bf:b8:f1:dc:01:26:6a:c2:f1:f8:a0:e3:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A9:B2:21:44:AA:62:70:22:62:AF:3C:14:FF:F7:82:8E:D0:66:8D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HqmyIUSqYnAiYq88FP_3go7QZo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.123.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d8:b4:ce:0f:ce:bd:81:38:ab:4c:39:4d:ef:f6:f7:bd:4f:
37:d5:03:16:72:32:ea:0b:83:10:60:7d:6f:1b:bb:7c:d9:72:
69:fd:59:52:96:48:92:99:5c:ed:06:45:fd:ac:9d:d4:13:fa:
e7:d7:d2:0e:1d:83:5c:38:fb:25:fa:75:f6:1a:5f:bd:27:ee:
1a:51:d3:c9:b6:7c:89:24:5d:34:d3:4f:c0:93:68:3b:12:bb:
1d:29:d7:3a:e9:c4:cc:34:f0:fd:67:37:06:ab:d7:46:a7:1c:
f5:fe:75:37:12:93:9c:36:8c:43:98:6c:b1:83:51:7f:ef:96:
c0:c4:e0:e2:25:32:3d:43:51:f6:ab:d0:55:b1:69:b5:e6:6b:
cb:55:70:d5:62:12:d1:b1:78:19:d6:05:db:a7:57:53:fa:87:
f9:58:17:e5:47:74:b8:d1:17:47:0b:7a:40:be:77:6d:46:fe:
67:71:83:7b:9f:50:53:6c:2a:32:0f:76:81:06:fd:ff:64:e5:
9a:d8:cf:1c:85:fa:01:af:67:aa:d0:32:b1:c7:7e:b4:33:1b:
cd:3f:35:b7:35:83:bc:86:9b:87:f3:b0:07:fc:21:c4:f7:16:
58:1d:0b:fb:00:fe:39:e9:ab:2a:b6:d1:c4:2f:fd:3c:b9:d6:
7b:c1:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:07 2025 by rpki-client