Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/HlthH4j3pMmbo-FQP8AAkjQIPT4.roa
File: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (raw, json)
Hash identifier: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=
Subject key identifier: 1E:5B:61:1F:88:F7:A4:C9:9B:A3:E1:50:3F:C0:00:92:34:08:3D:3E
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 0194214412D45E9523DC9AD6D27A6FAAEF58
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/HlthH4j3pMmbo-FQP8AAkjQIPT4.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12353
IP address blocks: 193.109.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:12:d4:5e:95:23:dc:9a:d6:d2:7a:6f:aa:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e5b611f88f7a4c99ba3e1503fc0009234083d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:3c:01:82:b0:d8:3a:5d:65:e5:d4:f2:17:
8a:87:a0:12:8e:bf:a1:0d:d0:bf:fc:e2:2f:44:fb:
55:c8:4b:8a:60:d7:20:24:9b:6a:d8:2f:a8:43:9f:
78:37:43:41:af:df:e9:0c:b3:7c:cc:72:ba:1b:6d:
f5:15:76:9c:ff:0b:38:03:16:5e:29:d1:aa:c3:24:
b1:d1:f7:8a:a8:3f:f7:b4:e0:ad:ac:d0:15:c6:76:
1d:d4:ad:5e:5e:6e:e6:e5:6c:d1:b2:12:d4:d8:c6:
10:ba:77:e8:91:32:68:9f:02:50:fc:c5:c6:47:57:
14:77:6d:94:61:39:b6:71:64:05:b3:6b:f3:d7:67:
58:a4:36:b4:cf:87:18:d8:60:20:49:fc:c4:c4:b1:
32:81:83:97:0d:b9:3f:1b:19:60:1c:ba:a3:91:14:
ca:0c:00:f9:5c:5c:91:29:a3:cc:6e:8f:06:cc:29:
96:4a:6c:92:ff:d1:8a:19:35:7a:a1:6f:1d:92:f8:
c9:71:d9:90:5c:20:7d:a2:64:99:2a:b1:5d:b2:6c:
e6:3d:67:24:67:b8:53:c7:1e:e1:61:d7:7a:42:21:
c9:51:1c:b8:67:ae:65:f9:58:0d:32:5b:a3:95:88:
f0:cd:a4:69:87:01:10:1d:44:f6:a5:88:e0:6c:a4:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:61:1F:88:F7:A4:C9:9B:A3:E1:50:3F:C0:00:92:34:08:3D:3E
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/HlthH4j3pMmbo-FQP8AAkjQIPT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1f:37:d1:89:3e:f4:b5:b0:b5:bd:30:54:7a:2c:8a:02:5c:
f1:c9:91:c3:b4:47:34:5b:f2:ea:9c:a0:f6:15:c4:55:d6:9a:
6b:c4:43:6c:27:1b:a0:4c:2f:af:2f:8a:f4:23:8b:08:c1:b5:
e2:a5:f7:13:5e:ca:0e:a5:50:e0:5c:3d:09:84:ca:f3:9b:b9:
34:a2:1d:5e:fd:6c:1e:74:c6:86:e4:55:be:6c:4f:b9:73:4c:
5f:89:f3:21:a0:a0:10:92:24:58:40:2e:6c:8a:1e:b0:da:80:
71:9a:1a:24:d3:a1:07:9a:44:a6:73:8d:de:9a:32:f9:79:c4:
41:32:0c:f1:70:b7:66:ba:7d:07:8c:61:1b:70:71:2c:bd:30:
c9:65:3d:ce:a7:45:ea:e4:ee:73:a1:8a:48:d2:38:7a:66:a9:
ce:fb:07:ee:fb:8a:44:53:de:2a:26:39:66:d3:8e:91:51:e2:
05:ad:1c:0b:d9:31:33:42:8b:c8:c6:22:69:af:75:fc:91:ac:
21:5b:cc:3e:e8:bb:26:03:3a:a5:12:12:7f:c8:ad:71:25:10:
80:cc:58:65:79:98:25:ec:8b:07:f2:01:90:41:b9:92:2f:2b:
75:ca:1c:5c:56:44:74:57:c2:b9:89:b0:92:2b:6a:2e:3c:b1:
26:5d:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:23:33 2025 by rpki-client