Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hIqJAfSnn9KNywKp0QfHCh8jdEs.roa
File: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (raw, json)
Hash identifier: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=
Subject key identifier: 84:8A:89:01:F4:A7:9F:D2:8D:CB:02:A9:D1:07:C7:0A:1F:23:74:4B
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244562368416B2AAD6A7001D9D9A47A6
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hIqJAfSnn9KNywKp0QfHCh8jdEs.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31418
IP address blocks: 81.45.20.0/24 maxlen: 24
81.45.21.0/24 maxlen: 24
81.45.22.0/24 maxlen: 24
81.45.23.0/24 maxlen: 24
195.53.128.0/24 maxlen: 24
195.53.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:36:84:16:b2:aa:d6:a7:00:1d:9d:9a:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848a8901f4a79fd28dcb02a9d107c70a1f23744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:91:26:64:56:33:7d:02:5a:d3:5c:83:ce:
c9:67:70:3d:18:55:8a:6d:a1:e6:1c:3c:9d:8e:73:
70:0b:ff:70:05:86:3c:8f:50:27:46:6a:a8:1b:4f:
53:8d:60:ba:26:52:b1:07:05:9b:5b:ef:c4:e4:cc:
47:53:9f:24:dd:96:df:00:1c:bf:9b:2f:d9:b6:a4:
67:53:1c:fd:01:cd:7c:b0:e1:a8:24:a9:39:2a:b9:
00:ce:d7:94:25:46:46:9b:2d:cc:f3:d1:f9:a6:89:
e6:cd:55:2f:3d:e3:75:80:43:2b:e4:6b:10:30:17:
ea:1d:74:42:4b:35:80:a4:91:8e:88:ba:3f:60:ff:
99:eb:1b:29:20:ef:b0:14:2d:82:38:9e:cc:5f:0b:
55:02:71:03:11:1e:c6:90:8f:b3:00:9a:e8:2d:d4:
ce:31:5a:cb:6c:79:55:89:1f:8c:a1:99:8a:9e:fe:
0c:c8:fd:b7:60:4d:a5:17:a9:e5:d4:1e:1c:c5:2a:
bf:fb:8b:60:35:f3:4d:07:bd:32:45:37:15:a3:d1:
d6:7d:a1:71:82:c8:96:00:ab:61:c2:16:ce:4c:15:
ea:18:a8:d8:7e:ce:90:27:c6:a8:58:8c:8c:6a:f2:
bc:16:04:b2:dd:8c:bc:46:2a:0f:71:d9:4e:87:3a:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:89:01:F4:A7:9F:D2:8D:CB:02:A9:D1:07:C7:0A:1F:23:74:4B
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hIqJAfSnn9KNywKp0QfHCh8jdEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.45.20.0/22
195.53.128.0/23
Signature Algorithm: sha256WithRSAEncryption
e6:3f:67:d0:28:05:d2:91:d0:63:70:03:78:d8:28:9f:53:88:
f8:12:5e:d8:c1:31:93:3c:c7:45:e9:84:28:3d:ce:2b:6b:ba:
f2:e5:6d:b3:af:2d:ed:f5:d4:ea:fe:ad:28:28:14:be:9a:c8:
1f:29:55:bc:1e:53:20:ee:51:37:da:ce:77:bd:aa:2c:4d:69:
47:4e:a2:e1:3c:66:6f:58:a8:d8:69:81:11:2a:f7:5e:42:78:
aa:07:a6:06:03:13:44:b9:40:40:f5:63:33:8e:4d:d9:ac:43:
0b:ad:3c:71:e0:d6:bc:e7:a8:a6:c1:0c:77:17:3f:3d:97:92:
9b:af:3a:ab:0e:40:5e:71:d6:18:8d:27:79:77:b5:31:dd:24:
e1:e7:79:33:5d:f2:83:63:1a:76:94:4c:82:6a:50:28:32:0e:
02:5c:72:57:47:be:19:ca:3e:d3:11:e2:c4:b6:93:bc:4d:16:
6b:81:1a:49:e9:7b:a9:a5:8c:15:22:77:79:3b:48:21:cd:95:
ee:37:86:85:6b:c1:05:5d:f4:fc:eb:59:0b:9d:e9:40:19:08:
33:9b:f5:2b:13:6f:a9:83:f7:83:a1:e8:a1:9a:14:aa:64:e8:
78:ed:70:0d:07:98:db:99:34:8d:0a:86:91:93:43:46:81:7e:
0c:12:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:39:16 2025 by rpki-client