Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/HkTCrKZqDwa8EUL4YflDFIxvuSo.roa
File: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (raw, json)
Hash identifier: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=
Subject key identifier: 1E:44:C2:AC:A6:6A:0F:06:BC:11:42:F8:61:F9:43:14:8C:6F:B9:2A
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D94C8D540BCEF2FB3F58C7D21E7344
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/HkTCrKZqDwa8EUL4YflDFIxvuSo.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47441
IP address blocks: 93.174.72.0/24 maxlen: 24
93.174.73.0/24 maxlen: 24
93.174.74.0/24 maxlen: 24
93.174.75.0/24 maxlen: 24
93.174.76.0/24 maxlen: 24
93.174.77.0/24 maxlen: 24
93.174.78.0/24 maxlen: 24
93.174.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4c:8d:54:0b:ce:f2:fb:3f:58:c7:d2:1e:73:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e44c2aca66a0f06bc1142f861f943148c6fb92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:98:5d:89:b1:b7:14:a2:99:20:e6:eb:52:
ae:e1:d3:62:5c:59:6a:b4:fa:80:1a:17:b4:23:69:
88:5b:50:ce:95:e4:82:83:bb:37:62:65:d2:23:17:
a2:2d:9c:cd:91:19:30:01:5f:9b:6a:1d:df:72:41:
23:a8:f8:70:7c:4a:6e:2c:87:3a:a5:ad:c7:35:72:
c8:1c:8f:c8:ae:f1:3a:44:9a:5d:73:e5:4d:c1:69:
63:f1:72:2b:73:83:a6:d8:d6:73:11:d6:fd:f8:00:
87:2d:54:2f:ca:d7:94:c8:3d:76:ab:f1:1f:8f:97:
ce:2a:f6:39:2c:fe:09:a8:53:3c:cb:7a:69:61:12:
e6:62:74:1f:c0:85:79:98:d8:d8:a0:ad:08:6c:b5:
71:1b:5c:77:7b:56:35:7c:5e:94:0e:20:97:46:93:
2d:83:e6:f4:59:ca:8e:d4:b3:fd:e0:8f:bb:91:89:
4a:b8:20:a5:b9:45:d9:ef:43:55:8a:62:42:85:a9:
76:91:03:f0:88:53:be:cd:c9:7c:c3:a8:ad:e2:c4:
05:8b:71:c3:3b:a2:1c:1f:8d:b2:fb:65:19:a7:75:
f6:cc:6a:23:0f:7c:0b:d8:d9:9a:c5:36:a3:44:d0:
95:bd:84:92:3c:e3:19:40:b9:16:71:23:56:52:ea:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:C2:AC:A6:6A:0F:06:BC:11:42:F8:61:F9:43:14:8C:6F:B9:2A
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/HkTCrKZqDwa8EUL4YflDFIxvuSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:28:07:45:5c:7b:77:45:12:3d:03:74:02:e1:f8:c9:6d:34:
d0:46:a9:8f:0e:80:2c:48:01:64:63:8e:fa:aa:c8:4f:ca:d6:
71:ea:a3:7e:69:fd:6c:d1:34:94:d1:9f:57:db:83:a7:9c:53:
62:9f:fb:04:37:7e:fa:0f:75:19:4e:6b:93:2f:dc:84:8f:c6:
d4:6e:cb:29:9d:fd:83:47:57:55:cb:80:4a:98:8c:62:72:bc:
24:54:b3:d9:4b:22:49:c5:e5:e2:55:79:81:c4:db:6a:76:40:
10:94:c8:f7:8a:c5:b0:c9:20:b1:da:3f:8a:f2:fd:23:97:2a:
44:34:cf:a4:31:91:d1:b7:de:a6:12:af:40:87:47:04:86:35:
93:13:c7:de:ed:0b:9c:b9:15:15:68:0d:66:3b:07:87:2b:67:
e8:9c:2d:2f:16:41:f6:3f:1e:4c:a1:bb:64:2f:c6:e9:3c:32:
b1:5d:7c:56:78:c7:66:ae:76:a3:c9:b7:e8:fd:d5:aa:1a:00:
c4:1a:2b:fc:63:80:4b:ad:11:5f:22:de:14:b2:7d:8f:8e:36:
50:61:73:f3:95:0b:1b:93:12:15:8d:75:26:e2:35:8d:dd:b2:
02:6c:c9:7f:e5:83:46:c3:1c:09:74:23:74:9f:b1:87:c8:5e:
b0:8a:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:02 2025 by rpki-client