Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa
File: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (raw, json)
Hash identifier: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=
Subject key identifier: 86:C8:2F:C4:2F:91:62:92:6A:24:F8:87:DC:43:8F:3C:1B:6F:98:3B
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 01942067C941B591FE730C93295FB831FEA8
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43507
IP address blocks: 78.156.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c9:41:b5:91:fe:73:0c:93:29:5f:b8:31:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86c82fc42f9162926a24f887dc438f3c1b6f983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:18:f5:c8:a2:5a:d2:6a:c4:89:ae:07:40:
6e:ea:67:5b:24:04:b0:a1:1a:9a:81:ca:51:42:b1:
a7:af:00:dd:6e:f4:df:bb:fc:1f:27:d1:40:6f:44:
4b:68:2d:6f:4e:07:da:14:0e:fb:ad:9f:ec:b0:e9:
be:f5:2a:34:84:bf:4e:cc:f0:19:e9:d0:c7:37:1a:
6a:50:dc:50:5f:7f:a4:f2:56:63:a2:db:ee:61:47:
3d:b7:55:c9:66:c5:27:c8:68:22:41:93:b7:78:d4:
f6:2c:06:1d:4e:63:ca:a7:2a:61:b1:59:02:7d:cd:
e4:8e:8b:e0:d3:b1:bc:c0:b5:eb:e7:5d:a5:ef:7a:
64:2a:ee:9d:90:3c:c0:94:9e:4b:40:4f:e7:5a:67:
f2:73:e6:f6:1f:04:c4:e9:c8:c8:e3:4e:1c:9d:c9:
d4:9a:73:e0:06:13:3b:72:ef:0d:0d:9b:d2:75:c2:
a4:f3:24:84:94:2d:a2:26:6f:98:c1:7b:56:f5:a8:
21:d4:ad:fc:ce:5d:b4:50:78:9e:b2:88:08:1e:4b:
53:d4:1c:c0:9e:a7:c5:a6:0b:d3:13:d7:b1:d6:39:
93:b4:92:51:cf:24:7e:8e:80:57:26:ea:51:30:2e:
8e:be:37:37:ae:dc:c0:97:ca:37:d4:cf:cb:49:c7:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:2F:C4:2F:91:62:92:6A:24:F8:87:DC:43:8F:3C:1B:6F:98:3B
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.32.0/19
Signature Algorithm: sha256WithRSAEncryption
50:d8:1f:08:b6:5d:0b:0c:a0:13:a0:a1:da:58:a8:72:e3:4d:
50:09:02:d2:8b:ce:e2:05:f3:20:97:ce:7e:5a:d4:27:8b:69:
24:4d:36:1d:5d:27:eb:2b:d4:7e:23:98:9e:ec:68:6e:a5:7d:
30:6e:bf:40:26:f2:41:00:cf:4d:29:b3:6a:cb:05:34:29:7d:
22:2b:20:b7:b3:eb:98:e4:e8:65:e4:62:7e:db:1d:06:e2:ce:
17:22:10:aa:98:c5:44:e7:87:50:57:8e:03:22:62:f8:32:4d:
6a:61:b8:56:11:33:d0:9d:a5:ff:58:08:1a:37:c6:09:00:58:
26:1a:7c:f1:9c:12:e7:f3:65:14:a5:96:0b:65:18:ea:82:68:
e2:4c:64:d6:93:fc:5d:16:c0:9e:ee:b6:d2:d5:45:17:22:b7:
57:fb:4b:4b:c6:8c:85:b9:44:15:93:c9:c5:be:f6:cb:7e:01:
9b:e8:43:0d:1c:ff:24:00:3e:f8:0e:c6:86:15:7e:7c:43:18:
4c:ec:a0:3b:d1:b9:da:e7:2c:d3:ad:f3:3c:2d:43:41:b3:0a:
af:82:25:a4:c3:08:7c:da:28:21:ea:91:5a:1d:32:15:b4:e0:
36:2c:d9:3a:e6:69:61:55:ac:e5:bd:74:21:0d:f9:97:8c:8e:
d1:28:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:44:35 2025 by rpki-client