Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa
File: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (raw, json)
Hash identifier: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=
Subject key identifier: 1E:85:6A:96:F8:F6:0E:31:95:75:92:CE:BC:A8:37:4C:5A:B9:AC:B3
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 01941FFAAB85BD834166FCAFF7D7BDA8C5BB
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210085
IP address blocks: 178.17.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:85:bd:83:41:66:fc:af:f7:d7:bd:a8:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e856a96f8f60e31957592cebca8374c5ab9acb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:a4:e1:37:f1:36:40:86:fe:a8:9e:aa:24:
5a:9e:55:b1:62:3e:91:10:78:2e:3e:b5:2f:25:b6:
53:cd:4a:79:46:54:34:49:6b:92:dd:0d:6b:4a:55:
e6:7b:bd:4d:95:f0:1b:e9:cb:16:57:9c:41:1c:43:
8c:91:a3:85:4d:4b:c1:87:63:2c:a6:82:6c:30:48:
f6:f4:9c:e5:f3:e9:9f:13:c4:e4:c4:a7:13:70:ad:
67:ee:98:51:f5:30:e3:b6:59:a0:52:0f:2c:31:fc:
1d:21:16:f4:49:d0:74:c1:3a:ad:5b:55:8b:25:6c:
bc:7b:e5:a4:6f:9a:1f:92:5e:21:59:45:a9:b6:12:
bd:7c:34:b2:f2:dc:e5:1e:26:b2:db:15:59:db:36:
d6:19:69:31:79:56:2d:29:fe:c7:f3:bc:7c:16:57:
7a:1d:05:1e:5d:83:f4:8b:39:f0:1e:d5:15:6e:a9:
ba:c0:ef:68:db:3a:ec:f0:ba:ab:85:45:ad:4b:1b:
4f:c9:48:0e:bd:23:d6:47:8b:c3:b6:cd:81:63:c8:
c4:9f:66:65:01:99:41:73:ed:40:de:f8:ea:96:54:
73:d2:a5:5c:63:94:b9:42:43:dc:b1:4a:c0:c5:36:
04:f3:13:ec:c9:db:52:6a:ba:e8:79:00:08:9d:c0:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:6A:96:F8:F6:0E:31:95:75:92:CE:BC:A8:37:4C:5A:B9:AC:B3
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:12:6d:ad:99:41:30:4d:36:68:3c:15:c3:f4:97:98:56:38:
45:f4:1b:43:2e:65:5c:21:d6:2c:a2:56:cd:91:fb:39:c7:61:
b9:fe:09:fa:30:79:03:53:a1:41:15:44:76:ec:54:9e:f6:09:
2e:de:e7:79:3b:d1:36:76:5d:d1:ca:86:c4:4b:a8:a4:e2:21:
b8:01:9b:e2:19:0f:a1:c5:a0:28:87:2e:2f:d7:eb:4f:46:b3:
c9:bd:34:96:c9:c4:96:e8:4b:97:b7:c3:90:49:08:21:da:84:
11:49:b8:5b:d3:32:74:62:b9:5c:0e:0e:0a:26:1a:d5:26:28:
d0:5d:4e:92:dd:bf:93:76:66:d9:63:53:2e:e6:02:2a:66:24:
95:8d:98:57:92:ce:95:3a:81:1c:4e:6c:4c:bc:53:ab:a8:6c:
cd:ea:ae:3c:ad:51:91:56:37:1f:09:cc:b5:ee:ba:07:3e:5a:
f7:c4:ac:e8:c0:0f:a4:c0:96:46:a7:ac:95:13:c9:e2:18:82:
17:79:69:2a:4b:71:bc:37:38:23:1b:d1:92:2c:8c:52:91:e7:
31:f9:f5:dd:e3:5b:eb:30:cf:dd:8e:52:03:14:28:46:b6:87:
d1:86:f0:e4:26:08:94:fd:31:69:d9:90:f6:ca:67:ee:47:ce:
3c:f8:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:01 2025 by rpki-client