Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa
File: dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa (raw, json)
Hash identifier: 2ty1voZTaeGxLdtc1mMuAWwNMar29AXn22fPjzO6Bio=
Subject key identifier: 74:79:2B:84:97:77:35:3D:3F:91:82:0A:C3:48:DF:3B:7F:1D:5D:84
Certificate issuer: /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial: 019425FC15B7C8C1321836CD5B37C5723CB5
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59943
IP address blocks: 193.200.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:15:b7:c8:c1:32:18:36:cd:5b:37:c5:72:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74792b849777353d3f91820ac348df3b7f1d5d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:e5:06:5a:a7:b7:4d:a4:1b:99:4a:6a:0c:
04:fe:30:ce:1f:18:88:46:04:9e:78:d5:ad:40:a0:
5e:bd:a4:67:6a:ba:99:5b:51:e1:82:be:83:33:b7:
ed:83:04:ef:37:86:3a:c8:85:57:67:da:a6:b0:5c:
31:a3:06:ab:70:c1:94:df:f1:61:6f:67:d0:db:0b:
cb:1a:37:b5:93:26:61:d7:7f:b2:15:5c:0d:38:3d:
cd:82:0d:47:86:c2:93:63:b3:49:f6:1d:36:98:be:
b4:c5:dc:36:02:31:49:f5:54:36:9b:03:44:fd:5c:
e6:1a:cb:03:34:e7:95:69:bb:27:d8:10:d1:06:07:
2f:3e:7d:3d:81:bd:f9:3e:97:23:ba:eb:de:59:c5:
0a:85:4e:50:08:5d:e5:8a:1f:2e:9f:8b:c3:8c:fe:
34:f8:01:89:f0:dc:12:cc:dc:56:a5:15:5f:69:c2:
6f:82:c6:76:2f:8c:cd:38:53:22:90:21:5d:2c:79:
b5:18:73:ea:e4:85:e8:18:43:f4:37:4a:ab:9a:5d:
4a:23:53:56:f0:f3:6a:3f:95:14:c7:85:30:0f:e4:
74:6b:e5:df:0d:00:a9:ea:42:80:85:fa:e8:1a:bd:
54:fe:7f:4c:02:61:06:0e:bd:63:ce:eb:6f:5a:c2:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:2B:84:97:77:35:3D:3F:91:82:0A:C3:48:DF:3B:7F:1D:5D:84
X509v3 Authority Key Identifier:
keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.29.0/24
Signature Algorithm: sha256WithRSAEncryption
13:db:e5:5d:7d:f2:f8:48:85:6f:2b:3c:73:3d:4a:7b:ad:3b:
00:75:e9:75:1c:5c:76:61:d8:36:a6:df:3c:ef:05:f3:2a:29:
9a:b9:b9:6e:3d:3d:b8:c7:c8:e2:b9:84:90:c8:7a:a9:d6:66:
1e:5c:9b:b4:fa:5d:fd:45:24:22:4c:36:78:7e:0b:56:57:5f:
94:69:08:bf:24:6a:9d:1c:c7:3a:40:c9:cb:2a:62:af:2c:18:
f7:c4:6c:08:89:c9:f1:cd:ad:81:51:11:c8:37:49:7b:f6:17:
85:c2:30:9d:9e:2c:c5:39:fd:c6:06:88:b6:61:0e:74:d6:d3:
b8:0c:31:49:b2:1f:78:de:6e:c9:22:4a:83:cd:2b:77:59:b2:
60:24:3f:78:82:45:66:51:e0:f9:3a:d8:78:39:bf:1c:f3:47:
43:4b:a2:07:e8:f2:34:22:08:54:cd:31:9a:e9:09:d9:6d:92:
96:82:21:10:d1:28:c8:77:ee:29:13:8a:1e:6f:f6:7d:3e:2f:
1a:ee:f5:8d:83:c8:54:aa:2d:4e:5a:a0:e7:f1:65:f8:b0:47:
cf:bd:51:e4:ca:c2:5d:67:ca:01:75:4c:cb:35:44:04:7b:ef:
5a:5a:47:62:6c:64:8c:cd:a2:a0:e2:b7:2b:c8:4b:26:fb:d7:
b2:bf:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:37 2025 by rpki-client