Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa
File: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (raw, json)
Hash identifier: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=
Subject key identifier: 1C:B2:45:A4:3A:6E:B9:8E:51:B8:CA:D0:6E:DC:EE:04:93:46:40:9B
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019421B1D9FA336D5CFF20EF919FD7C0E30A
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212755
IP address blocks: 91.233.197.0/24 maxlen: 24
2a0a:b440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:fa:33:6d:5c:ff:20:ef:91:9f:d7:c0:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb245a43a6eb98e51b8cad06edcee049346409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:1c:fa:40:c2:70:70:fe:72:de:e3:52:1a:
10:17:2d:5d:41:5e:93:81:ff:32:8e:47:7f:46:9e:
a6:d0:5c:22:08:53:32:28:93:f8:42:22:33:f9:8d:
f1:95:98:58:75:e0:6e:1f:2d:c8:3b:74:d9:bb:1c:
a1:ec:9e:7a:7a:54:31:57:e2:f0:b5:52:79:7a:fb:
6a:d2:dd:84:24:5b:3a:ea:af:99:57:91:c4:9b:d1:
5e:32:86:83:ab:07:a8:de:38:07:43:73:98:63:36:
42:a0:ea:2f:43:1c:99:e0:1d:7b:df:0c:c2:99:5d:
42:14:67:82:c9:d8:88:11:33:0d:d0:a0:d2:05:a4:
2b:91:56:40:ec:89:dc:9a:7f:c6:1b:a6:aa:3c:80:
b8:5a:9f:dd:44:6c:e2:70:14:56:53:9d:7a:95:6c:
4c:0f:a1:00:3c:01:c0:75:a6:b4:3e:f4:5a:a3:ed:
9a:b3:4a:59:17:33:bd:77:ed:26:47:d6:91:28:c3:
55:a5:d0:3d:9f:7b:78:7d:f2:50:55:1c:b5:f7:86:
1d:a8:d1:bf:47:6a:bd:33:b3:47:47:0f:87:f1:38:
e1:38:24:f3:d0:1e:15:d8:8d:7a:5e:0d:13:ca:6b:
03:51:f8:00:07:9e:97:6e:c2:56:d2:e0:f2:b1:c3:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:45:A4:3A:6E:B9:8E:51:B8:CA:D0:6E:DC:EE:04:93:46:40:9B
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.197.0/24
IPv6:
2a0a:b440::/29
Signature Algorithm: sha256WithRSAEncryption
6a:77:09:91:50:1c:81:86:3f:33:a3:25:2a:62:d1:75:1e:2e:
55:e7:dc:48:17:9f:ca:29:d2:d6:9c:84:8a:8c:09:97:85:94:
0f:37:52:a2:1b:88:4a:fa:5f:f5:d7:39:07:75:d7:0a:aa:38:
fd:fe:51:0e:c3:9c:81:ea:57:d8:48:fd:11:99:2a:77:53:fe:
a9:da:60:6f:ed:2e:6c:91:35:7e:44:cf:65:f3:af:96:b0:95:
79:fb:a2:02:37:d1:fc:69:6f:4c:f0:32:b7:77:1c:9a:8e:d9:
75:32:85:2a:c1:47:ed:03:5c:d4:7f:08:93:09:f5:af:93:bf:
88:10:69:99:f5:c2:e5:a5:8a:e2:e5:f6:55:10:c5:1c:9b:d0:
d4:58:72:38:e0:e5:f2:23:c6:9e:80:a4:07:9f:21:31:f8:f6:
61:88:bf:bc:1c:8f:18:b3:bb:82:5d:20:75:b2:45:6a:03:24:
53:ad:76:32:94:31:17:bd:f4:8a:f4:37:7e:0c:37:31:b8:42:
be:e0:75:fb:d5:4e:09:50:42:57:9e:1a:42:4f:68:46:93:d2:
e2:ba:0a:49:85:d7:93:05:ae:05:b6:67:46:cd:4b:bf:89:27:
6c:73:33:30:2c:b6:94:78:40:35:5b:ab:e6:7f:e7:58:2f:7b:
8b:c0:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:17 2025 by rpki-client