Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/hLdZE5q1FOXSO44ZofCjRXN9z7I.roa
File: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (raw, json)
Hash identifier: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=
Subject key identifier: 84:B7:59:13:9A:B5:14:E5:D2:3B:8E:19:A1:F0:A3:45:73:7D:CF:B2
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0194A7ED2ECDDC55B9BDCE75E223DF0505E7
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/hLdZE5q1FOXSO44ZofCjRXN9z7I.roa
Signing time: Mon 27 Jan 2025 13:22:06 +0000
ROA not before: Mon 27 Jan 2025 13:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15694
IP address blocks: 78.41.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:ed:2e:cd:dc:55:b9:bd:ce:75:e2:23:df:05:05:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 27 13:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b759139ab514e5d23b8e19a1f0a345737dcfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:24:a3:d4:81:c1:d2:d8:1e:f1:14:ba:0e:
d2:83:0c:02:5f:99:dc:86:25:b8:0f:b2:4e:01:34:
bd:64:bc:dc:77:76:2b:05:db:b7:0b:c6:9a:83:19:
ed:88:ea:c2:b4:3a:b3:8e:84:7b:ef:04:e2:0d:66:
0f:d0:8e:8e:e0:46:17:c8:6f:0a:2c:9c:bc:c1:66:
ba:70:03:98:a9:1b:38:47:28:7a:9b:28:30:56:c2:
f3:81:79:09:ee:72:88:b3:a4:59:e5:70:d6:0e:62:
45:83:3d:1a:63:10:db:96:da:c5:a3:20:e1:d7:7d:
91:f8:7d:af:13:5e:70:78:f9:6d:27:62:7b:92:4b:
f3:c5:9b:8c:1a:96:fd:0a:74:3b:8e:a7:1e:07:02:
d5:1a:df:06:34:3c:fe:72:dd:09:01:a8:fd:dd:3c:
2d:9b:e3:e9:96:66:04:24:20:b0:02:b2:29:7c:13:
65:9f:cd:04:74:4d:bd:37:37:fc:17:c8:5a:90:01:
bb:9d:d6:3b:35:57:9f:8e:44:bc:d7:22:5e:f1:4e:
e6:17:ed:e7:50:0b:41:d9:2b:35:28:8e:61:e4:3b:
90:31:c9:66:f6:3f:1a:76:95:0e:02:10:e2:11:ec:
0d:f6:63:f8:be:0c:5e:fe:86:94:76:73:31:1a:3b:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:59:13:9A:B5:14:E5:D2:3B:8E:19:A1:F0:A3:45:73:7D:CF:B2
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/hLdZE5q1FOXSO44ZofCjRXN9z7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.58.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6a:0e:c6:66:35:64:95:6f:af:db:0a:e8:d9:14:60:02:16:
a5:54:1c:00:c9:cc:61:4c:40:38:83:0e:e9:89:d1:2e:13:d7:
12:31:a6:e1:2f:bc:ed:3f:b7:21:b2:9c:9f:52:16:03:d9:e4:
0a:17:2b:52:5c:68:4a:db:fd:89:32:37:fa:06:4e:f1:46:5f:
6a:b9:3e:22:36:48:b9:1b:1e:a5:6a:6c:c1:d6:60:30:ad:27:
99:c9:60:eb:e4:6d:cf:d0:29:af:df:cd:94:0f:19:8d:7f:28:
8b:89:ac:95:c6:1b:c1:02:c5:4f:b7:da:0d:64:96:fb:14:15:
c3:89:93:9c:44:7b:f9:6d:9d:b2:81:f4:05:77:53:2d:0d:94:
09:2d:14:3c:96:28:b8:80:c1:3e:22:ec:58:cf:44:db:4f:d2:
34:58:64:61:95:ca:d1:01:3d:1c:ef:b9:e4:39:f5:47:15:70:
f5:bc:ec:63:84:cc:c7:ff:f3:02:95:95:f5:0f:71:34:49:17:
72:5c:71:93:0e:9b:84:05:3c:cf:67:93:1b:1b:61:47:57:16:
6c:15:43:93:6a:dd:cc:13:7c:39:74:6b:60:35:fd:8e:21:6c:
fe:67:36:0c:37:d1:9a:a2:74:23:d0:8d:ca:1c:5b:2c:f9:35:
3a:00:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:38:53 2025 by rpki-client