Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HLH9cgQmNVkR7CC7LWNncgsWBJk.roa
File: HLH9cgQmNVkR7CC7LWNncgsWBJk.roa (raw, json)
Hash identifier: H5xQ8C6t2KM3/8KlgCaAwRMvWO2mWGF2Y3QGihpJMDY=
Subject key identifier: 1C:B1:FD:72:04:26:35:59:11:EC:20:BB:2D:63:67:72:0B:16:04:99
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A900AF938DA3A0128058F2FF743C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HLH9cgQmNVkR7CC7LWNncgsWBJk.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59735
IP address blocks: 89.46.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a9:00:af:93:8d:a3:a0:12:80:58:f2:ff:74:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb1fd720426355911ec20bb2d6367720b160499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:b6:f5:c7:75:e6:84:af:c7:3a:e1:77:43:
a4:fc:95:f7:93:4a:7c:26:62:37:e5:69:8f:38:40:
01:d7:22:19:d8:85:a9:95:09:21:42:76:17:71:a3:
66:75:95:d1:f1:bd:1a:2d:e2:93:57:e5:8e:8c:4a:
fd:35:88:89:50:24:ef:48:c4:f1:5e:31:2a:5e:f2:
97:d4:d7:3f:9c:1e:fc:ce:a3:cc:08:24:c6:24:ad:
4c:c4:7c:b3:9a:b2:a8:e2:11:51:83:7c:9f:14:36:
a6:76:3e:89:7a:9e:65:ec:09:79:81:99:b8:18:0e:
1e:19:60:3a:72:26:fa:46:4a:41:fd:b6:41:ed:9f:
fb:b3:3a:36:a8:4e:da:d2:da:3e:55:66:a4:72:74:
a3:62:e9:ed:dc:9e:5d:f6:a6:9f:16:a0:e5:09:1c:
7a:c8:58:88:5c:c0:5f:b7:fb:de:39:47:6a:32:ed:
2a:84:c7:3b:f9:8c:e1:75:63:7b:12:d5:68:25:4b:
20:57:81:17:e1:ee:a3:7b:0b:2a:5c:d9:c5:a9:8c:
d6:b6:55:08:3d:2a:1d:41:c6:bb:2a:c5:1f:cf:b1:
5f:79:fe:8d:9f:03:3f:cb:6c:8f:15:53:56:c6:2e:
6a:53:5f:ca:b0:88:f0:df:42:76:e3:69:63:ee:03:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:FD:72:04:26:35:59:11:EC:20:BB:2D:63:67:72:0B:16:04:99
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HLH9cgQmNVkR7CC7LWNncgsWBJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.5.0/24
Signature Algorithm: sha256WithRSAEncryption
05:10:0d:c9:08:39:44:cb:e2:5c:c0:f6:e8:0c:3c:b8:44:3d:
56:b2:28:d3:32:91:e4:28:84:af:6f:17:5b:6f:d8:d5:4e:37:
e4:ba:05:6a:39:49:f8:5b:66:cc:a4:65:c6:2a:64:01:ef:06:
8f:d8:84:ef:9b:f8:c9:57:13:88:65:c2:4b:56:18:a0:11:0d:
e5:4c:bb:c0:83:77:70:aa:96:34:d7:bf:2f:bd:5a:f1:aa:6e:
8d:c4:90:df:cc:c4:59:d4:db:1f:b0:87:a5:ad:c9:44:26:86:
4d:a2:b4:8d:e7:63:57:de:9e:f2:87:a7:06:d6:1d:6c:66:ce:
37:e4:1d:06:2a:c2:88:c8:1b:72:32:d2:e6:f9:1c:f5:1e:73:
13:11:c3:cf:fb:6d:b7:4f:b1:37:9e:27:cb:32:e3:44:5b:c5:
36:fd:bb:56:bc:d4:fa:0e:19:8f:c8:c2:5d:12:c2:85:2d:0b:
02:59:89:30:6d:fd:c1:65:eb:c1:b3:ec:50:aa:7a:0b:ac:ff:
7e:fd:8b:88:d1:8e:55:82:22:01:2b:2f:f6:65:95:a3:5f:a7:
aa:a1:79:f0:83:c1:2d:f0:2e:ab:08:00:9e:88:3b:8a:3c:c4:
b6:5d:00:1a:fb:31:0d:28:38:20:06:17:45:e3:12:94:c8:6d:
41:e2:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:57 2025 by rpki-client