Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa
File: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (raw, json)
Hash identifier: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=
Subject key identifier: 1E:57:C2:F7:27:EF:18:DE:C3:1C:A2:B8:B6:FD:B7:64:ED:99:CD:32
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01942067EE86AD63E87E02E6243DD53E9749
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199968
IP address blocks: 185.7.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ee:86:ad:63:e8:7e:02:e6:24:3d:d5:3e:97:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e57c2f727ef18dec31ca2b8b6fdb764ed99cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:75:04:a3:e5:a2:b3:65:4b:5c:9d:a2:f0:
36:a6:39:ff:d9:eb:cc:8d:16:9a:0a:48:60:a0:e8:
4c:57:4d:dc:d5:80:3e:0e:c3:24:49:4b:4c:a4:44:
79:de:92:d7:f3:05:6b:e6:96:63:72:96:e5:42:75:
c8:35:02:e0:43:4a:a9:06:0b:04:b7:52:cc:1a:52:
51:c2:fe:9b:b1:54:95:aa:49:34:aa:b0:1d:3a:72:
51:d3:e2:20:54:d4:d2:5d:5e:8d:f5:8f:b3:56:3a:
c8:03:69:30:50:5b:06:27:8b:ea:bd:42:c0:43:d6:
2e:9c:5f:d9:a4:28:6b:f6:0f:ea:fc:f2:5c:7d:92:
55:e8:97:bf:cc:f8:c5:df:2c:df:52:6f:d2:07:74:
e9:78:74:bd:9d:e0:7f:2b:58:65:85:c9:e8:56:08:
43:6b:a9:5f:31:9d:c4:59:0a:39:3d:81:7d:ab:04:
38:a0:22:9c:88:b7:4a:ba:13:77:25:03:f3:35:40:
3c:ff:b3:47:d3:66:42:75:2e:29:1d:f1:af:71:52:
33:11:fb:95:3f:52:c7:86:13:ae:4f:d9:45:39:7d:
34:e1:38:0a:ac:fd:35:cd:86:b3:b5:81:76:70:32:
55:7a:b2:ef:dc:e5:25:16:60:fc:20:62:77:11:00:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:C2:F7:27:EF:18:DE:C3:1C:A2:B8:B6:FD:B7:64:ED:99:CD:32
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:96:84:0d:2e:9e:95:dc:ec:cc:9a:fe:69:59:50:2d:f8:31:
db:9f:42:2f:ec:55:c8:37:74:eb:80:76:a9:4d:54:93:ff:c4:
30:d0:28:65:00:14:6a:66:67:90:e4:d7:85:07:4e:d5:f1:a3:
69:04:0e:1e:d4:4e:33:c7:e7:e4:3d:2c:e3:1a:03:90:2e:09:
69:7c:7b:22:da:21:31:05:99:f1:a9:43:55:2e:e8:9a:4d:e8:
30:31:97:6e:ea:03:85:9a:92:c0:8d:fc:4a:d6:2e:4d:e7:87:
d3:e7:ba:0b:d1:fc:fd:d6:de:e2:f3:d9:7f:c7:0c:e5:9a:13:
0c:1f:0b:88:e5:d4:ce:72:84:38:92:4d:6f:eb:0f:78:20:98:
87:ad:b6:73:9d:cb:80:07:6f:50:37:4b:f9:44:2c:de:f0:7a:
78:66:f6:28:7c:00:15:27:ac:7c:8b:d0:a7:3e:3e:40:e8:82:
3b:03:19:ec:53:18:bd:c5:8a:b3:31:9f:da:29:b6:04:07:a5:
d4:bf:b6:82:e1:1c:d0:a9:7a:14:2d:86:ca:e1:63:c7:4b:6a:
94:0e:47:c8:dd:1a:84:e3:92:fc:46:86:47:5e:63:c4:9d:34:
50:7e:83:1d:cc:8d:67:f9:18:ce:bf:a6:ac:b5:70:70:09:ee:
0e:1c:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:08 2025 by rpki-client