Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa
File: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (raw, json)
Hash identifier: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=
Subject key identifier: 1F:9C:B7:43:F7:55:F8:7C:E8:F8:00:B4:7E:BA:DA:F6:52:F1:35:46
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0194221F8F95BD825F2891B16A04A5CC13F4
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202863
IP address blocks: 81.94.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:95:bd:82:5f:28:91:b1:6a:04:a5:cc:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9cb743f755f87ce8f800b47ebadaf652f13546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:f8:f7:b2:46:38:7c:4a:c7:63:f7:44:16:
14:1a:27:e8:fb:96:f8:72:52:19:7f:27:c7:2a:3d:
c1:35:5c:b7:1c:46:f3:97:98:81:a4:d5:82:e6:9c:
b2:71:a9:e4:74:67:87:06:f6:55:be:0c:2a:5e:55:
d8:eb:c5:17:e2:9d:6d:12:7e:4e:2d:bc:3c:47:ed:
48:02:84:db:0a:67:ec:de:ca:59:01:61:f0:e0:c9:
d7:83:1a:03:2d:eb:e3:89:40:04:c1:00:b4:af:4e:
88:84:90:c4:f7:2d:1c:d8:00:35:46:9b:f8:21:ad:
de:2b:aa:3d:25:e4:b5:ca:fa:e5:8f:e2:69:f2:15:
94:43:d2:cb:b6:dc:63:d6:11:11:e5:17:84:85:9d:
d9:4f:b3:18:c8:b9:63:3c:58:e5:9b:ce:32:83:63:
fe:1e:00:19:b1:30:e3:e4:56:e9:25:f2:d2:39:ef:
4c:6c:32:9b:a9:13:aa:57:82:76:c5:97:1f:b0:53:
a0:bb:6e:75:35:73:30:71:7d:fb:ae:73:8c:e4:1a:
1b:1e:fe:fb:c2:e2:9c:1f:79:f2:91:d7:28:6d:66:
23:f3:4e:71:0b:19:6f:54:17:5e:63:8a:a0:2d:1d:
83:d3:d2:6b:a0:9b:2c:b6:87:85:c7:b1:62:b5:8c:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:B7:43:F7:55:F8:7C:E8:F8:00:B4:7E:BA:DA:F6:52:F1:35:46
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:12:8a:28:94:5a:bb:9f:2f:6b:4d:dc:3e:29:26:53:b0:01:
bf:27:84:aa:07:a9:ec:80:0a:b6:0d:39:76:ce:ad:e8:42:19:
0a:4c:b6:2c:b1:9a:bf:b9:59:1b:6c:9d:ce:c6:5f:7a:b7:b6:
83:75:05:86:9b:0e:d6:11:45:f0:7a:8e:72:9d:8b:0e:1f:ef:
48:fd:07:2f:74:f0:59:0f:7b:27:db:a2:ea:2e:44:ad:38:ec:
57:7b:b4:08:ee:65:9b:80:39:6a:26:a5:ac:fb:d2:20:06:4f:
e2:b2:57:91:a1:9e:45:4f:c5:e8:e0:ae:8e:0d:98:a3:ff:d1:
09:df:ae:1c:e1:80:df:d4:49:16:09:f0:11:75:59:b0:1d:b6:
55:29:ee:f7:39:78:47:3c:a9:7f:33:70:64:40:05:d9:c1:af:
f4:70:62:09:c3:04:2f:f0:65:31:4b:88:d1:c5:5e:45:0e:58:
f5:30:99:c1:05:53:2d:0f:15:82:ba:32:1c:5b:91:8b:93:88:
23:46:de:96:e0:fe:e8:0b:20:01:fe:2c:6a:86:6a:d9:6c:06:
e3:6c:3e:8c:10:aa:d2:09:4a:2a:5e:a4:ff:66:48:ae:df:5c:
b4:0e:39:46:41:b0:ac:a1:1b:ce:b3:67:ae:65:fb:03:73:19:
a8:85:81:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:14:30 2025 by rpki-client