Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hmcTq0ht51TAQ68lvBQEzSS9f_g.roa
File: hmcTq0ht51TAQ68lvBQEzSS9f_g.roa (raw, json)
Hash identifier: 8ukBXow/FuwryekZQZF1ufn8k0YeF/kCXA4kwvSaupY=
Subject key identifier: 86:67:13:AB:48:6D:E7:54:C0:43:AF:25:BC:14:04:CD:24:BD:7F:F8
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F210E3B0F7C89BA8DEF9ACAA3CE46
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hmcTq0ht51TAQ68lvBQEzSS9f_g.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215977
IP address blocks: 193.140.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:0e:3b:0f:7c:89:ba:8d:ef:9a:ca:a3:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866713ab486de754c043af25bc1404cd24bd7ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:11:04:d4:96:8b:79:c4:6f:e7:9d:96:4b:
6f:e8:66:bc:4f:88:e6:b8:e4:65:69:95:99:ef:e5:
4e:9c:8a:08:7b:90:e6:b1:7c:00:99:af:9a:78:71:
bb:4e:98:05:fa:e4:54:d3:fd:9c:ec:94:6c:c0:4a:
b2:c7:d6:d2:a1:fe:e4:e8:74:34:c5:bb:3f:dc:f8:
65:51:f3:4e:9e:7c:1e:1b:18:00:7a:87:21:fa:e6:
70:df:50:19:d6:ec:41:a8:63:da:6b:58:55:17:72:
69:b0:6b:ef:72:77:d5:06:fa:92:eb:ca:ee:4b:2b:
b8:0d:5e:2d:da:16:68:bb:0c:f1:c8:6b:09:c3:3a:
ae:ed:2c:4f:f6:f9:e3:bd:bf:6c:5c:86:58:47:8d:
89:f4:17:b3:9a:4f:20:fa:f6:27:6e:9f:15:8c:6b:
ae:54:fc:c5:93:73:7c:7d:a2:3a:a2:db:9f:78:80:
8c:8e:c9:e4:52:7e:a1:54:d0:d6:89:cc:7d:2c:cb:
dc:77:7c:f0:a7:a7:c7:79:19:9f:6e:a3:5f:6e:8c:
b1:e0:6d:d3:64:40:ea:7c:91:96:59:28:b2:32:a7:
cf:a0:4d:05:f8:f8:58:8e:b1:6a:9e:78:87:e3:d6:
cb:00:96:97:8b:8a:b6:f8:a4:b6:a2:2e:58:51:98:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:13:AB:48:6D:E7:54:C0:43:AF:25:BC:14:04:CD:24:BD:7F:F8
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hmcTq0ht51TAQ68lvBQEzSS9f_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.76.0/22
Signature Algorithm: sha256WithRSAEncryption
47:e6:71:f6:ee:69:c1:a3:96:63:e4:ef:d2:df:ba:11:c1:e5:
2b:05:4f:c7:c5:70:e3:dd:69:b2:0e:b9:e2:7a:31:72:e9:b8:
f8:ff:1d:63:0f:43:d3:33:e1:14:9c:43:3f:4f:fc:57:57:bf:
b3:1a:e3:b8:20:c6:1e:24:56:19:8b:7a:8c:0c:8a:84:94:3c:
bd:cb:7a:b4:aa:61:b9:11:fd:6e:24:fc:e2:e8:3e:d8:2f:9e:
ce:33:29:8f:2d:71:7c:c8:f6:ce:e6:74:b7:b0:a1:fd:50:18:
ec:76:2b:0f:c8:c4:0a:3e:56:54:f3:bf:a8:a8:b9:d8:a0:ee:
1d:17:52:8a:8b:1e:4d:c2:ea:84:41:b7:9b:3d:ee:4b:37:fe:
7e:e4:24:81:3a:fb:e0:f1:ab:ed:de:43:84:4c:c0:35:0f:04:
b3:73:83:90:ee:59:52:e0:e4:3f:f3:02:5c:48:ad:39:61:a4:
d6:58:45:84:ca:50:f1:30:9a:b1:5b:5a:f0:0b:05:a7:b6:9a:
52:ba:a8:f1:b3:5d:b0:c8:a8:ca:2f:64:4e:59:8b:72:23:45:
f8:eb:a0:f2:dc:06:2b:ea:18:ea:93:9e:cb:e7:6f:3e:89:28:
34:33:d6:9d:5b:4f:e2:49:63:91:bd:27:f7:10:d5:f9:cc:e6:
01:da:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:52 2025 by rpki-client