Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/h_PujoF1idQej6mkI673sMCS4CI.roa
File: h_PujoF1idQej6mkI673sMCS4CI.roa (raw, json)
Hash identifier: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=
Subject key identifier: 87:F3:EE:8E:81:75:89:D4:1E:8F:A9:A4:23:AE:F7:B0:C0:92:E0:22
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 019426D8A83DDB017C67145A7BF69FCC6363
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/h_PujoF1idQej6mkI673sMCS4CI.roa
Signing time: Thu 02 Jan 2025 11:48:40 +0000
ROA not before: Thu 02 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205753
IP address blocks: 193.169.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a8:3d:db:01:7c:67:14:5a:7b:f6:9f:cc:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jan 2 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87f3ee8e817589d41e8fa9a423aef7b0c092e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:05:a9:fd:87:92:9a:c8:2d:7f:8e:22:be:
0e:de:30:d1:8c:16:a8:f6:df:a2:c2:9e:f8:68:f0:
2a:b5:cb:90:ee:27:db:9f:cf:13:57:46:ab:bc:b1:
4b:fe:de:0b:3b:54:43:90:8b:78:d1:00:f1:6f:5e:
e5:da:ef:f7:b0:fa:68:c5:97:c4:ab:9a:2e:68:01:
12:5f:13:96:d8:a9:a6:9c:20:b0:f8:52:f6:75:8e:
f1:54:dc:4d:70:0e:2d:9e:b3:7e:90:a0:2d:5e:1e:
c9:b3:49:7b:86:89:f8:95:3b:3b:b5:47:62:50:e7:
0a:73:07:ff:74:68:9c:89:6b:7d:a9:e4:59:78:f7:
82:f4:01:20:40:4f:60:8f:f3:98:85:50:ef:8d:d1:
9a:f4:c3:99:17:db:3f:c8:8b:a4:c8:bf:fd:d1:ec:
f0:01:29:c3:2e:2c:00:91:8c:9e:e8:4d:4f:e3:fe:
fa:25:a8:40:52:10:bd:5b:fe:a0:a4:9f:91:3b:91:
d4:dc:38:f8:b5:6a:46:01:c9:c3:ba:9c:55:25:49:
e0:a8:bf:ef:c7:d7:f0:0b:91:19:24:7f:e8:33:14:
7a:dd:f3:fb:51:14:56:65:27:15:23:bc:45:8d:cc:
2f:64:29:53:ad:bc:32:e8:3c:4e:1d:b2:34:d3:9f:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:EE:8E:81:75:89:D4:1E:8F:A9:A4:23:AE:F7:B0:C0:92:E0:22
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/h_PujoF1idQej6mkI673sMCS4CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.135.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4f:43:eb:04:b7:d5:8c:a0:70:d7:df:7f:ca:c8:20:52:50:
24:52:c1:08:f5:2a:40:d2:91:ff:3c:f5:1b:ce:04:21:b7:54:
87:7c:26:18:e5:99:28:3d:83:5c:03:64:a1:27:72:7d:64:e7:
5a:87:d9:b2:a2:b5:c0:a0:d1:13:29:49:56:b7:b9:0a:d6:19:
ab:a6:ca:2c:43:18:c2:e0:fd:85:b0:db:4d:8c:26:b2:a9:0c:
6a:b9:24:a2:dd:54:db:06:c3:7b:af:52:7e:28:8f:c4:b7:48:
22:bd:33:ec:2a:c2:42:bd:17:45:b2:a7:ab:01:fe:46:31:9c:
4e:a4:31:3b:f0:bb:c6:af:c9:cd:ec:83:dc:81:ca:b8:b2:92:
4e:9f:25:e7:f1:1a:eb:3d:42:b8:d2:a8:9b:45:76:97:7a:16:
31:f5:e8:20:c8:4b:ee:3d:67:b1:a7:74:fb:ff:28:ad:4a:ba:
0b:a0:ae:e0:d0:22:b5:69:de:ea:95:25:43:b6:c5:39:32:3b:
9e:13:ad:82:4b:bb:27:1e:3d:6a:ab:98:57:1b:67:8d:9e:26:
3d:b3:19:2c:82:59:0d:97:70:5b:41:ed:80:36:f5:7a:d3:c1:
f1:f0:37:ef:1a:f6:53:1f:ba:dd:f7:e8:36:66:fc:13:7a:49:
97:b6:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:48 2025 by rpki-client