Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvQ3k611UFKDjDQlhvaOwCg2igI.roa
File: hvQ3k611UFKDjDQlhvaOwCg2igI.roa (raw, json)
Hash identifier: MdHifCDs/XeL/2lFdG4k5MSk1kK/izW+JyBQSmUp0Uw=
Subject key identifier: 86:F4:37:93:AD:75:50:52:83:8C:34:25:86:F6:8E:C0:28:36:8A:02
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698C67C548330CD3F3DC25E57CB8C4
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvQ3k611UFKDjDQlhvaOwCg2igI.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34601
IP address blocks: 92.114.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8c:67:c5:48:33:0c:d3:f3:dc:25:e5:7c:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f43793ad755052838c342586f68ec028368a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:40:a2:78:ed:f0:87:56:b3:23:66:4d:77:
43:60:ca:a5:b7:a4:5c:e1:ae:23:9c:10:51:bf:ef:
a4:71:11:56:74:42:81:b0:a8:91:c3:02:50:f7:85:
22:52:60:66:70:6e:ec:70:e0:30:65:4c:d3:9f:70:
70:c1:9b:96:42:b5:b3:8c:a2:d0:97:73:a4:0e:c0:
50:ac:0a:07:a8:35:97:95:de:9e:c5:32:f3:e0:10:
8a:05:3f:e1:35:c4:3a:cd:02:96:31:10:72:f8:99:
99:44:15:47:2e:44:68:e4:75:17:64:35:26:87:b0:
84:9a:48:0e:af:fa:90:06:da:af:a9:7f:53:18:9f:
79:55:2d:4c:88:56:ea:5a:aa:88:8a:4a:b8:2b:7e:
3d:78:c9:11:ba:7e:ea:7a:b8:31:69:30:29:59:59:
38:c2:64:7b:b5:ae:45:5d:c3:49:1b:f8:e9:11:36:
ae:53:8e:8a:b7:34:f4:2e:ca:46:eb:fe:ca:a2:61:
2b:63:38:74:d2:21:c5:71:9b:ec:b4:6f:a4:56:8d:
71:c0:11:61:86:58:cf:25:79:53:e0:83:88:6f:1b:
63:a4:ed:c0:e9:41:a3:68:ef:4f:70:f6:d1:52:a3:
cf:e9:a6:2a:70:52:24:23:5c:6f:97:19:04:7d:5a:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:37:93:AD:75:50:52:83:8C:34:25:86:F6:8E:C0:28:36:8A:02
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvQ3k611UFKDjDQlhvaOwCg2igI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.37.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:38:55:eb:ca:c0:d0:a3:10:bb:98:4b:af:55:ef:7b:c6:4b:
8a:6c:bb:58:1e:62:02:30:59:5e:df:01:4a:86:fe:21:b1:93:
39:93:38:99:66:70:a6:6b:48:38:6d:20:14:c4:d0:be:53:9f:
80:41:fc:ab:4b:fa:54:2b:d9:96:57:0d:02:15:db:55:99:9e:
51:63:65:cf:1c:87:0a:f9:ae:43:78:a8:4b:d8:5d:d6:07:84:
d6:f6:a9:b8:67:21:ba:84:5c:46:e7:58:6a:21:8b:a5:e5:10:
75:92:82:a0:5c:31:18:14:a1:dc:71:84:29:dd:de:ff:15:73:
fc:f6:2f:28:79:10:74:f8:77:13:ce:64:b1:4c:10:27:78:4f:
7e:37:f8:31:84:0b:46:17:12:9a:ac:33:ca:20:a2:91:f0:84:
3e:61:b3:db:eb:87:78:39:2c:f3:c9:bf:03:5d:af:7c:a8:eb:
30:8b:88:5e:15:11:8a:ba:74:6f:82:b5:34:15:fa:03:49:2e:
17:8c:31:40:54:53:3f:63:99:e9:e5:b7:ed:74:f3:70:c2:2d:
f6:36:0c:ab:84:8b:39:e7:06:6e:61:c5:e4:6a:5f:37:73:5d:
54:d1:a3:6d:b0:c5:32:50:d8:58:3b:ec:dc:24:89:2b:a0:54:
23:c3:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:46 2025 by rpki-client