Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa
File: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (raw, json)
Hash identifier: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=
Subject key identifier: 86:38:46:3E:2C:B7:50:50:6B:F4:03:64:44:23:03:32:6B:4F:6F:26
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 019421B21668E0243660C84559D36C6E33E0
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.40.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:68:e0:24:36:60:c8:45:59:d3:6c:6e:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8638463e2cb750506bf40364442303326b4f6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:ec:fd:b2:ff:c3:17:bf:c1:a8:d3:58:93:
15:f4:bd:73:3c:b1:b6:22:b6:6e:c3:55:20:2a:bf:
ef:3b:38:d3:51:ef:ed:f0:95:7b:71:04:bd:82:25:
5f:ef:12:6f:ac:d2:09:fb:85:54:f9:8b:6f:11:6b:
5a:5e:d3:f1:93:85:6c:e0:01:1d:85:8e:f4:59:ca:
05:11:43:f3:32:00:d6:fc:0d:b9:1b:d9:94:5d:71:
10:80:34:d4:8d:2c:1e:d5:78:6d:b8:18:fb:90:2c:
18:e5:90:47:17:75:73:13:38:20:3d:0b:f8:9f:59:
41:79:94:5d:8b:58:3d:bb:44:40:46:d9:96:d8:41:
45:e0:6d:f4:e9:92:db:7f:03:5a:56:0a:03:be:ab:
6a:f2:a8:66:d8:75:1f:40:66:51:64:a1:07:76:15:
2f:9d:23:e5:88:85:0b:f8:a1:3c:4c:2c:96:53:ae:
9c:00:5c:ac:5b:b3:b9:b4:e1:b0:b4:3f:d8:c7:c7:
52:bd:29:7e:5c:43:36:87:8b:78:05:0e:b7:9c:32:
53:8c:1f:64:96:58:7f:29:fe:44:93:e4:73:ae:b9:
81:c0:96:7c:9d:4b:63:f9:c8:a4:13:a5:86:a2:ca:
ba:0c:8d:9f:e3:9e:59:27:a2:53:7c:94:e1:28:35:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:46:3E:2C:B7:50:50:6B:F4:03:64:44:23:03:32:6B:4F:6F:26
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.40.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f5:51:d0:88:be:d9:55:8e:72:94:06:bc:91:2f:ba:6d:63:
a6:99:17:8a:8c:71:eb:b0:6a:7b:22:60:d3:5c:49:ee:a4:ef:
7b:89:a2:ca:eb:b1:fb:0c:6b:89:05:9c:df:ca:2b:70:9f:aa:
70:bb:2a:45:f0:1f:d7:7d:4a:40:dd:f8:5c:37:25:a6:3a:7b:
84:86:c9:6c:5c:33:cb:2c:05:fc:75:dd:fd:89:d8:f7:17:fa:
07:3c:11:3e:82:8a:7b:2b:79:95:81:97:7d:b7:1f:2b:dd:8e:
90:dd:fe:45:05:e5:49:c6:6a:91:b0:97:17:52:0a:cf:aa:58:
2a:3b:10:13:9c:d1:5f:5c:6f:7f:bb:d3:2b:73:aa:be:21:ae:
cd:b9:fe:5b:77:50:1d:13:e4:37:73:58:f2:6b:c9:ef:d1:ca:
27:a5:e3:00:df:52:84:42:5e:d7:37:71:53:fe:77:b6:b3:46:
20:55:6e:a4:e6:a0:65:19:bc:ab:96:d7:ca:0d:2b:6d:c6:d7:
78:4d:4c:a1:26:e8:af:d4:e6:66:73:3f:6c:96:4c:a3:9f:1e:
89:f6:96:20:b2:ed:c5:84:d5:7d:fe:bb:dd:14:39:e6:09:c9:
63:d3:e1:72:0b:9f:dd:73:a3:14:9b:70:60:b9:d9:27:38:66:
5e:78:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:15:17 2025 by rpki-client