Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/HuWSmht5WAvI31ALVxohsMAOFVU.roa
File: HuWSmht5WAvI31ALVxohsMAOFVU.roa (raw, json)
Hash identifier: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=
Subject key identifier: 1E:E5:92:9A:1B:79:58:0B:C8:DF:50:0B:57:1A:21:B0:C0:0E:15:55
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 019734D3AFDAED02FF8A75D0F7C4FCD68FFC
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/HuWSmht5WAvI31ALVxohsMAOFVU.roa
Signing time: Tue 03 Jun 2025 08:06:17 +0000
ROA not before: Tue 03 Jun 2025 08:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.24.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:d3:af:da:ed:02:ff:8a:75:d0:f7:c4:fc:d6:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Jun 3 08:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee5929a1b79580bc8df500b571a21b0c00e1555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:81:e7:97:0e:3e:3f:b2:fc:8b:47:94:a9:37:
90:6f:40:d0:d2:b5:ee:2c:9e:ca:8e:98:2c:6f:fe:
84:84:92:03:27:88:03:13:d7:68:de:c3:ff:6a:56:
6d:65:70:a3:09:af:3c:42:cc:be:9d:5a:d7:e6:8a:
5d:06:36:e8:13:aa:d3:dd:33:fe:8c:f0:75:73:d0:
ca:1f:79:45:95:18:60:48:bb:3b:2c:b3:64:01:f9:
eb:ee:05:d8:24:1a:e7:f4:14:54:ea:43:2f:74:f0:
80:fb:16:3f:40:de:d4:82:49:1a:70:df:38:19:b9:
f6:b7:10:83:b0:d8:a4:a8:e2:6e:d6:c3:87:dc:20:
0b:93:38:9a:23:b3:bf:ed:49:a9:43:6a:39:f0:d7:
1d:50:da:55:65:ed:0a:77:ff:42:2c:f1:42:5d:4c:
9a:35:f6:cd:b2:56:b3:90:c8:eb:67:2f:52:57:e0:
74:6f:2d:fa:56:70:4e:11:23:93:6d:57:44:44:66:
f0:ce:b4:b2:c7:1b:39:00:1c:d5:32:3f:f5:67:eb:
8e:bf:c1:5e:86:b2:ac:a2:94:25:41:95:f7:b1:9f:
b8:59:f1:b5:73:7d:68:b6:ff:01:12:e7:ff:f0:03:
06:66:a0:2f:e8:73:ba:13:fe:69:a1:1a:5b:54:94:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:92:9A:1B:79:58:0B:C8:DF:50:0B:57:1A:21:B0:C0:0E:15:55
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/HuWSmht5WAvI31ALVxohsMAOFVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.80.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5d:53:d4:92:62:99:36:27:4e:11:b9:05:f3:c9:01:d7:0f:
20:be:38:4b:17:3f:2c:8c:36:74:13:0f:70:77:ec:23:ab:9e:
4c:81:65:d4:54:03:2d:8b:6a:f1:61:e0:21:53:b8:22:04:34:
31:45:f5:99:4d:7e:cd:07:8d:59:93:e9:3b:90:c2:83:cf:37:
5a:6d:8c:9e:a8:e4:e7:6b:f2:51:61:05:ee:6d:71:47:32:87:
cb:22:1d:5d:3c:24:ef:39:03:e9:23:90:49:61:ec:c8:19:db:
54:ff:f4:68:bc:86:b3:67:6a:b1:da:fa:d4:93:95:fb:45:ac:
dd:23:45:69:df:d6:95:81:84:2e:12:a4:be:68:de:12:77:10:
c1:db:38:b1:ae:96:29:d0:27:74:c2:c3:40:e7:e4:01:79:d3:
e0:38:f8:94:3b:51:e5:c2:78:a6:96:89:ea:46:7b:a8:cf:38:
80:3d:cc:f8:25:7c:f6:0e:1b:a7:58:95:15:84:22:1e:78:af:
6b:1b:f0:b9:b6:47:39:f8:00:02:c9:0f:35:ec:8f:09:09:ca:
a5:74:8b:70:57:92:1e:9e:86:fc:2c:5c:b6:a9:9e:68:fb:18:
bd:81:9d:c2:64:20:4b:f7:3c:a8:79:6c:eb:ef:61:78:9c:52:
72:17:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:02:33 2025 by rpki-client