Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/H7ZLyfm_R26mv-3BirQg98EN5oA.roa
File: H7ZLyfm_R26mv-3BirQg98EN5oA.roa (raw, json)
Hash identifier: W9q4lMPN0OsuMky1RgDCH79wbEwHHlpUBYXjOIT+QF8=
Subject key identifier: 1F:B6:4B:C9:F9:BF:47:6E:A6:BF:ED:C1:8A:B4:20:F7:C1:0D:E6:80
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A658A341F73F238225EAA7D60F194
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/H7ZLyfm_R26mv-3BirQg98EN5oA.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211280
IP address blocks: 145.62.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:65:8a:34:1f:73:f2:38:22:5e:aa:7d:60:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb64bc9f9bf476ea6bfedc18ab420f7c10de680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:bf:74:c2:8b:ea:39:b5:31:ac:9c:06:86:
1f:0c:7e:6e:45:ca:fd:91:e6:87:30:3b:06:b5:85:
cc:62:58:8a:7b:92:b0:b9:ab:c4:a8:49:7a:30:f6:
f2:54:90:4b:7a:b7:02:96:8a:d0:fa:23:cd:b8:4b:
c0:1c:e5:60:c6:ad:ba:3c:13:b8:5a:c1:5c:17:82:
15:97:36:39:8e:09:bd:ae:cf:10:3d:a5:65:fe:44:
e1:21:4a:84:97:89:57:dd:54:b1:ea:58:62:47:29:
0a:71:d9:9d:41:5d:67:1a:57:f0:7b:0d:e0:a5:77:
f2:3d:e6:65:7f:4e:b5:bd:a2:a2:b2:c6:39:e5:90:
98:76:1a:21:ba:f5:74:26:76:1b:2c:ba:61:5b:0b:
98:57:01:87:28:a9:4b:ce:f4:6c:59:3b:42:b9:8f:
6c:e5:5c:6e:94:87:41:03:41:5d:9f:87:e3:10:4a:
4e:f6:82:f5:aa:f9:ed:d3:87:a2:a8:27:c1:ce:9c:
99:df:95:e7:05:3a:3d:de:9d:64:43:b5:e6:5e:6f:
4b:a2:94:5d:75:12:df:e1:73:24:23:a4:f1:06:d7:
1b:f8:94:e0:77:98:97:dd:49:4f:55:f1:f7:1f:d8:
7c:88:0f:c7:e2:88:9d:d5:21:db:38:c5:47:ed:65:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:4B:C9:F9:BF:47:6E:A6:BF:ED:C1:8A:B4:20:F7:C1:0D:E6:80
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/H7ZLyfm_R26mv-3BirQg98EN5oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.62.64.0/20
Signature Algorithm: sha256WithRSAEncryption
38:91:ca:90:34:46:3d:32:be:91:4f:14:d5:e8:4f:68:ff:e1:
22:7c:72:0d:af:c6:14:fd:e0:4a:07:17:0c:9d:87:ef:84:4e:
de:74:79:d6:8d:93:8a:1e:c4:12:2d:dc:cc:39:dc:cf:39:60:
4e:4c:99:60:d1:25:e1:69:d2:4d:b0:63:4a:f4:77:7d:5a:39:
13:86:40:f6:28:8f:79:6d:89:29:c8:5a:c6:2b:d1:79:dc:b0:
62:eb:93:09:c2:ac:5f:55:40:45:2e:9a:22:31:2c:ba:0a:ba:
85:e2:39:ba:fd:59:3e:0b:c2:64:f3:88:c9:e5:5c:2e:9b:b4:
d0:0c:b5:bd:dc:2d:a8:82:b8:fc:76:29:10:88:7e:8f:d1:09:
a7:6c:61:c4:62:89:14:95:92:3c:fd:63:9c:89:48:3a:d6:0c:
92:8d:5a:e1:7c:a0:52:87:38:35:ee:eb:72:93:91:ed:ee:c9:
c2:a5:47:0a:6c:f3:10:76:80:05:f4:93:f3:d8:fb:0a:ef:b6:
64:b7:f2:57:3f:af:bf:8a:12:6f:d9:89:d9:aa:70:3f:3f:b9:
46:1c:a0:ed:3f:80:29:05:f8:0c:d0:51:30:45:75:12:ad:5a:
11:c6:60:8d:e6:0d:76:a6:d3:0f:7d:30:88:10:7d:cb:e9:d1:
09:3a:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:37:26 2025 by rpki-client