Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/hGQAPrEg70xi3dTAsr6AkflPwzQ.roa
File: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (raw, json)
Hash identifier: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=
Subject key identifier: 84:64:00:3E:B1:20:EF:4C:62:DD:D4:C0:B2:BE:80:91:F9:4F:C3:34
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01942823286F3D5E18BB444E5F498B066F7E
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/hGQAPrEg70xi3dTAsr6AkflPwzQ.roa
Signing time: Thu 02 Jan 2025 17:49:40 +0000
ROA not before: Thu 02 Jan 2025 17:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210118
IP address blocks: 217.198.184.0/24 maxlen: 24
2a11:f940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:28:6f:3d:5e:18:bb:44:4e:5f:49:8b:06:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jan 2 17:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8464003eb120ef4c62ddd4c0b2be8091f94fc334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:7f:af:43:50:e1:b3:73:0c:13:b0:95:31:
c1:9b:b2:a1:cc:92:38:66:32:1a:83:80:07:01:d6:
41:f3:3a:d5:6e:2f:b0:52:20:af:cc:5c:57:b0:aa:
46:94:82:77:de:4f:fb:7b:1a:46:3b:3e:2f:2b:06:
b8:c2:64:a0:8a:1b:94:dd:b1:ff:2d:3e:77:db:d5:
25:6a:63:0b:2d:3b:1e:ed:50:ac:35:62:7e:6a:a2:
c8:25:37:72:d9:1a:da:ef:e2:21:9f:ab:06:7b:0f:
4d:e7:79:7a:2b:a6:e2:a3:10:e7:08:04:dd:4d:f7:
1f:b4:8b:94:0e:60:71:bb:db:33:26:c1:d6:ae:ba:
41:a1:cf:6d:da:4f:b0:b9:e7:cd:ff:ec:e5:d9:0b:
5f:75:51:32:a5:67:30:17:de:13:75:ca:68:4c:bb:
d6:35:4d:ff:f9:a5:ef:4d:33:a1:5b:cd:ac:76:44:
2c:42:b8:bb:b7:29:55:86:42:4a:12:71:a5:f0:b8:
9d:2a:33:91:c1:71:9b:26:30:49:a8:3d:61:b2:d7:
50:1b:80:31:35:9d:c9:97:63:56:43:65:8e:44:12:
35:59:42:98:da:69:1f:77:05:56:b9:a8:1b:88:b0:
6f:20:84:e0:c4:cf:d8:bc:e5:99:30:d6:34:b8:2b:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:00:3E:B1:20:EF:4C:62:DD:D4:C0:B2:BE:80:91:F9:4F:C3:34
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/hGQAPrEg70xi3dTAsr6AkflPwzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.184.0/24
IPv6:
2a11:f940::/29
Signature Algorithm: sha256WithRSAEncryption
08:02:82:ee:3d:a5:c1:40:ca:c9:82:4b:71:ee:a7:47:3f:a6:
67:23:c8:fa:1d:fb:ed:4a:f8:1a:b4:32:c1:89:c7:cf:c9:97:
47:fb:1d:f5:f5:91:60:33:95:c4:9e:0a:94:51:7b:ba:a0:d7:
33:0e:0a:41:e2:a4:99:d5:95:eb:64:fc:0c:80:eb:91:b2:ea:
aa:45:10:60:71:87:3e:58:34:f8:57:f5:e7:c7:ad:49:40:9d:
21:a8:b9:54:6c:16:4a:4e:b1:01:94:9d:9f:b5:17:e0:79:ca:
d5:b9:d9:d4:76:c1:2a:f7:69:1f:87:ac:24:2e:51:2b:e2:9a:
f0:3c:a1:ad:ed:25:52:9e:07:86:58:e6:30:23:53:02:b9:38:
9f:c7:1a:eb:58:14:57:04:5f:ca:0e:92:3b:90:8e:34:ed:82:
09:c3:0b:91:20:47:68:a6:a4:57:09:cd:91:9c:4d:bc:f8:3b:
3a:39:19:ff:fa:7f:2f:64:83:27:7e:7b:0c:ee:f2:7a:fa:02:
f6:60:6e:8f:ab:c0:b1:ac:ce:21:cf:71:b4:9d:5c:11:32:03:
cd:6a:d7:df:32:e3:dd:c0:5a:9d:28:a6:ed:4e:00:c9:1c:90:
03:d1:1f:81:04:b3:93:b4:bc:40:a3:ac:2b:9e:b2:61:96:60:
d8:90:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client