Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa
File: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (raw, json)
Hash identifier: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=
Subject key identifier: F0:70:7A:80:13:07:D4:E5:C2:0B:81:D2:1F:18:CC:04:93:C0:5C:D3
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 0194258F7894C3E7ADE125015C23F7EA1CDB
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35432
IP address blocks: 176.56.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:78:94:c3:e7:ad:e1:25:01:5c:23:f7:ea:1c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0707a801307d4e5c20b81d21f18cc0493c05cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:9c:8c:42:f5:7c:62:0a:5e:49:17:12:f7:
6a:3a:c4:52:08:5d:3c:1b:a2:28:39:27:3f:cf:84:
66:d6:9c:1c:49:5a:d7:f2:0b:1f:b1:d6:a4:06:a3:
dc:da:e6:8c:86:86:7b:c2:bb:e0:79:56:d7:2e:b2:
16:0a:b2:be:af:d6:92:3e:82:00:d4:48:b2:3e:e8:
ab:eb:01:cd:a6:65:af:76:ff:e3:5b:8e:f9:35:c3:
76:25:de:9b:de:fa:df:ca:13:c3:55:f7:04:26:19:
ce:9f:00:11:2b:2a:f6:1e:b6:06:2d:4a:d6:3e:ce:
6f:0f:0b:d7:bc:85:5b:0d:79:64:0a:99:2d:9a:d6:
9a:7f:a2:22:1b:49:0a:4c:60:d7:58:45:da:22:9f:
9d:a6:fb:ce:dc:5d:ec:2f:01:73:fa:1d:17:7e:de:
5e:db:ef:9e:87:c5:a0:3c:67:92:79:7a:ff:b1:a1:
6c:32:29:54:c1:71:64:d6:6c:a5:8b:ea:6b:42:85:
f3:43:17:d8:d2:83:e5:ff:ce:ad:8a:f6:72:30:85:
e3:c3:ca:33:36:c7:cb:cc:9c:b5:1b:0b:cd:4b:d8:
7f:2f:0a:12:24:32:94:f9:a8:93:9e:97:1f:17:6e:
6c:fb:c2:f3:ad:2b:a8:b7:5e:3d:fd:d0:ff:cd:34:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:7A:80:13:07:D4:E5:C2:0B:81:D2:1F:18:CC:04:93:C0:5C:D3
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.168.0/24
Signature Algorithm: sha256WithRSAEncryption
71:12:ed:7d:50:c8:58:d4:02:79:b9:28:e1:c8:da:a6:39:4f:
76:cb:57:1b:6a:02:ea:00:ed:2d:47:1e:76:33:3e:78:4c:b4:
de:4f:55:a9:dd:f9:df:a5:d9:a8:e8:ec:58:15:f7:ad:74:0b:
4c:6e:f9:69:7c:5d:10:4b:cd:13:6a:e2:49:08:33:30:21:12:
92:7d:1b:6f:16:ce:d4:01:0d:11:75:4c:4a:db:ca:6d:46:da:
d8:6f:cd:0f:8d:44:84:c8:04:7a:51:92:ba:f7:9d:a2:53:f9:
0d:41:47:80:fc:11:dc:df:64:e6:c4:3c:e0:77:81:68:49:0e:
e3:4a:85:10:3a:5e:17:28:f3:b4:2f:f5:88:7a:8e:2d:37:e4:
88:ad:59:0d:ca:a4:1f:0a:6a:fe:71:31:57:34:ef:dc:56:af:
82:8c:01:3e:87:e5:95:46:d5:7d:ea:38:9e:18:32:8a:aa:a2:
8d:4a:42:26:c0:43:dc:8d:4d:b6:cd:02:4c:20:90:89:0e:d5:
44:14:c2:24:2b:b0:57:bd:b8:1d:d8:d0:6d:fd:33:f5:31:69:
3c:f9:7b:ad:dd:5f:15:a4:46:b2:80:cb:af:76:cb:8a:ff:80:
e7:d6:f5:2c:da:d9:90:fc:4e:6d:ab:5d:2b:a1:b5:77:71:e8:
16:d2:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:59 2025 by rpki-client