Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/hm311e8NJq4CeLUwG2WwDwuRkEo.roa
File: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (raw, json)
Hash identifier: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=
Subject key identifier: 86:6D:F5:D5:EF:0D:26:AE:02:78:B5:30:1B:65:B0:0F:0B:91:90:4A
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 019424B32692BEB6FBB84962CBFA03CDEC40
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/hm311e8NJq4CeLUwG2WwDwuRkEo.roa
Signing time: Thu 02 Jan 2025 01:48:28 +0000
ROA not before: Thu 02 Jan 2025 01:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.116.188.0/23 maxlen: 32
2001:7f8:15::/48 maxlen: 128
2a04:80c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:26:92:be:b6:fb:b8:49:62:cb:fa:03:cd:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 2 01:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866df5d5ef0d26ae0278b5301b65b00f0b91904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:6c:2d:9c:a9:f0:aa:a5:6d:1d:bc:19:59:
fb:81:7c:43:5f:a9:a2:44:e6:60:90:f3:ba:4f:7a:
60:99:80:23:d6:a0:9b:22:bd:a2:fa:ed:64:95:f3:
74:37:32:91:23:05:3a:ba:e6:cf:42:44:20:05:57:
08:aa:18:3c:40:22:ec:cc:36:7c:fb:a3:8c:f3:b1:
5c:b6:fd:9c:29:f4:fe:95:c8:aa:ae:50:48:29:b2:
d9:66:b4:9f:ac:bb:af:3e:d2:f3:7c:65:e1:2f:8f:
d7:dd:8a:45:e1:e6:d3:b9:31:61:0b:0d:36:16:35:
0c:67:c4:b1:3e:46:b3:fa:72:11:df:c2:cc:0d:c7:
55:e1:a0:5f:03:22:ca:09:d7:f2:63:81:e1:43:ea:
1d:69:92:d4:db:20:f0:00:28:c5:17:f6:2f:c1:c9:
44:17:cb:69:a3:0e:03:80:d0:82:dc:d2:7f:95:8a:
53:66:99:9b:48:4a:58:4e:b1:42:da:45:80:aa:31:
01:a6:d1:82:20:e7:7c:49:18:9d:64:cf:eb:d5:1c:
2a:a2:06:9a:21:96:0d:5a:ab:40:fe:18:46:bf:0e:
51:70:28:82:12:69:cd:7e:33:b2:2a:4e:b8:8e:72:
91:80:e3:a1:bd:8c:95:bf:01:1c:f8:58:9f:4f:72:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:F5:D5:EF:0D:26:AE:02:78:B5:30:1B:65:B0:0F:0B:91:90:4A
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/hm311e8NJq4CeLUwG2WwDwuRkEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.188.0/23
IPv6:
2001:7f8:15::/48
2a04:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:79:24:91:81:a1:d4:59:56:1d:07:4c:f4:fb:86:81:47:80:
45:7e:e0:e7:41:a1:56:61:aa:0b:50:7d:e3:ea:31:74:fc:3a:
5f:93:9b:24:5b:fa:13:97:b5:2f:8e:b2:97:be:59:a8:7c:19:
e6:ff:6d:68:a6:9e:8c:c8:c6:2f:29:d5:be:af:54:06:65:52:
89:df:88:1f:78:27:e9:26:9d:35:74:74:e8:d6:1e:4e:80:82:
e9:e5:61:00:62:de:a1:8a:47:c9:46:1c:99:5f:73:6a:d9:a4:
cf:35:d8:d7:f5:96:e6:85:2e:70:84:85:71:b8:d0:16:29:a2:
2e:d5:28:1f:08:0f:cb:93:11:f0:40:20:ea:ff:ab:a3:3a:fb:
ef:bd:f2:38:33:97:5f:ce:07:e7:85:e9:10:0b:c5:95:0a:e6:
1f:40:0c:90:db:05:a9:f4:92:f6:c0:4d:96:0a:b0:3e:fa:92:
00:ca:f9:67:ca:a2:08:45:e6:1b:90:78:2b:65:f2:20:25:59:
0b:cd:71:44:49:3e:8a:21:a8:8b:b4:10:12:64:7d:08:6f:13:
2e:66:bc:6a:76:9d:60:85:6a:9d:ca:66:e7:9d:44:38:08:55:
05:7c:96:24:ef:a7:e8:cd:d7:e5:78:23:9d:1c:5a:c9:8e:c5:
bf:ce:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:07 2025 by rpki-client