Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa
File: Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa (raw, json)
Hash identifier: SaFnthBgRV8E0/cfedWCGZYSk3klgbcSFK1UnXkwx9k=
Subject key identifier: 1F:1E:8D:48:AC:6E:E4:65:05:77:14:E7:4C:59:30:9F:3E:F6:98:88
Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial: 0194236A1AB217F8D4380C67B21A4568BA80
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3624
IP address blocks: 185.117.213.0/24 maxlen: 24
2a06:8782::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1a:b2:17:f8:d4:38:0c:67:b2:1a:45:68:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f1e8d48ac6ee465057714e74c59309f3ef69888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:c5:dc:40:3e:40:d9:04:23:0d:07:f0:20:
53:e8:00:fc:51:5b:73:7a:61:c3:f3:fa:61:5f:48:
ae:5e:ea:88:bb:af:e2:f9:04:cf:37:a0:c6:ed:30:
88:5a:23:ed:2c:4d:67:af:ae:5c:99:f5:98:45:4f:
1f:c9:31:07:35:8f:82:28:5a:ae:a7:08:cb:b9:54:
65:b6:88:61:43:05:e2:42:dc:7e:eb:08:7c:e4:5e:
4f:99:9e:02:e9:35:3c:e5:81:ea:43:f7:34:b3:c5:
7c:6c:61:8b:cb:b4:6d:da:1a:87:3c:00:23:eb:ee:
ab:65:09:1d:4e:5a:1b:f5:b1:db:4c:88:85:c1:5d:
0b:fc:0d:4f:84:3a:10:53:6e:41:fe:66:2f:ae:74:
1b:ac:cf:b9:a8:f2:72:35:83:b3:94:12:3d:a8:8f:
9b:dc:be:79:ac:82:ad:1e:be:53:54:fa:e1:9d:c1:
b6:8d:98:f3:3e:77:76:f0:d1:1d:e2:2b:d9:97:84:
9d:91:9a:57:07:dc:09:a8:aa:53:c4:3a:3c:3a:61:
7a:ef:4c:83:10:e0:f8:42:c1:9a:3a:5c:f3:91:66:
ae:46:2d:3a:d5:7b:2c:20:c8:bb:69:0b:1e:65:9e:
45:35:d5:b2:7a:e6:91:58:4c:e0:d5:cc:8c:cf:29:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:8D:48:AC:6E:E4:65:05:77:14:E7:4C:59:30:9F:3E:F6:98:88
X509v3 Authority Key Identifier:
keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.213.0/24
IPv6:
2a06:8782::/32
Signature Algorithm: sha256WithRSAEncryption
56:e5:95:fe:43:ff:2b:3a:87:0e:17:dd:f7:f6:c0:e4:c5:63:
f9:e8:ab:70:1c:47:1e:a6:fb:8d:57:a8:1e:23:b4:09:b8:c4:
d7:9e:2a:b8:ff:23:0e:db:22:87:9e:d7:52:60:9e:b1:d2:84:
5a:f7:4e:2b:35:ef:9b:7c:3c:89:34:fb:44:13:26:86:ad:bb:
a2:61:b2:48:96:73:da:31:ce:68:75:bc:59:b1:c9:cd:4c:3d:
f8:9b:b1:c1:2a:20:cd:92:cb:98:41:b9:d4:08:c9:16:ae:fb:
63:35:9b:d1:7e:d8:cc:83:e0:43:2c:e0:aa:99:36:44:ea:2e:
7f:85:6c:dd:ff:13:fa:27:24:cb:10:fa:e4:75:c1:f4:9e:5e:
be:c7:18:a4:69:f8:c3:f3:c3:49:30:40:a7:87:54:48:56:b6:
d0:01:27:2e:ae:e7:3c:0d:0f:21:90:4b:1d:f8:b1:7d:39:02:
ae:27:09:5a:4d:cb:b5:5c:5b:52:ba:4e:03:af:2f:8a:d4:1c:
91:42:3b:06:8a:64:03:ef:2a:cb:bd:b2:ca:6b:e2:9f:b4:9c:
03:a0:b1:86:aa:34:30:b4:d9:46:de:0e:98:11:53:1e:a2:ed:
91:44:47:67:85:68:0d:d1:59:f2:0c:29:d4:71:df:a4:42:89:
1c:6b:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:03 2025 by rpki-client