Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HxNgq1wSsOshbb-QIPgWDen2-8U.roa
File: HxNgq1wSsOshbb-QIPgWDen2-8U.roa (raw, json)
Hash identifier: LaZ2aZAKbtbvSaAnAQq9TLxmu+FoKnoVI08iL4OYneo=
Subject key identifier: 1F:13:60:AB:5C:12:B0:EB:21:6D:BF:90:20:F8:16:0D:E9:F6:FB:C5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195608340F3022C1319D8B4A4118EB1230F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HxNgq1wSsOshbb-QIPgWDen2-8U.roa
Signing time: Tue 04 Mar 2025 09:36:09 +0000
ROA not before: Tue 04 Mar 2025 09:36:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 2a0f:1207::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:83:40:f3:02:2c:13:19:d8:b4:a4:11:8e:b1:23:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 09:36:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f1360ab5c12b0eb216dbf9020f8160de9f6fbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:f6:71:ea:ea:28:c7:d9:59:65:4e:78:40:
66:58:94:bd:55:2f:ff:d3:40:06:fb:2d:3f:23:d6:
3e:8e:8d:67:9e:de:5d:e2:12:a6:5e:45:9e:00:64:
ca:46:8f:69:18:d2:99:a3:e5:ae:c5:02:21:51:62:
79:03:dc:7f:f2:76:7c:bd:29:b2:5f:9d:d0:e7:72:
c2:81:03:2c:f4:5a:8a:40:93:87:af:84:56:80:c9:
55:d1:7e:1d:00:c8:78:d4:13:c5:94:0c:ab:ee:33:
26:fc:e1:7d:23:a2:0e:78:56:ff:5c:53:11:b3:a1:
6d:a1:2e:1c:a2:ef:46:68:1e:9c:1c:fb:eb:78:7b:
41:43:33:ec:fe:02:81:f2:e9:42:0c:cc:1b:d2:6c:
89:df:8a:02:33:76:97:1b:48:b7:63:25:fa:a6:5c:
92:66:9c:48:1d:63:ed:73:98:d5:f2:c1:4b:7f:15:
d2:d9:ed:34:88:12:5b:fd:3d:b3:87:2c:31:fc:83:
32:56:e1:34:7d:25:5c:cf:9f:b7:fb:c2:bd:6b:fc:
ed:1a:ce:f6:47:b7:44:f1:cd:21:c6:e9:c2:64:1c:
5c:e0:15:b5:84:39:00:1f:d8:2c:d9:06:e1:1f:69:
70:44:4c:ca:19:9f:1c:6c:f7:ba:11:e7:f1:42:50:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:60:AB:5C:12:B0:EB:21:6D:BF:90:20:F8:16:0D:E9:F6:FB:C5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HxNgq1wSsOshbb-QIPgWDen2-8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1207::/32
Signature Algorithm: sha256WithRSAEncryption
02:93:b7:45:91:4a:8e:76:30:60:bb:d6:ce:7d:fd:da:9a:b7:
77:0f:cd:94:a5:ad:32:d8:9c:46:62:99:fb:c8:ef:6d:49:ed:
07:f5:7a:c3:b1:9e:5f:7e:fa:4d:a8:7a:1e:0f:4c:c4:51:74:
98:06:f4:d6:8b:22:49:b8:f3:02:6c:6f:a1:6b:0e:de:cf:e3:
70:84:ee:8b:a2:4e:de:1e:6e:93:54:52:14:bf:0e:e1:7f:ba:
2b:53:1a:b3:33:81:0c:00:60:21:40:db:b4:3d:bd:b5:69:23:
aa:98:2e:01:5d:74:e5:5f:f7:96:c7:43:b9:45:15:68:f8:5a:
71:01:47:f8:53:89:8b:2f:b8:bd:cf:90:52:73:b4:ca:70:5f:
01:4d:0b:9d:35:a3:1f:f6:aa:84:37:7c:18:e7:14:9a:fa:9c:
9e:05:e5:51:f1:50:ca:62:08:c5:53:84:87:da:fb:22:06:70:
e1:5f:1e:a0:f0:a2:75:65:f3:5c:62:f2:12:74:47:20:51:12:
2e:9a:4b:2b:14:cd:1d:b7:99:ac:d0:68:5e:0a:31:cf:b8:41:
5a:8f:9f:86:2d:77:cf:d4:0b:fe:5b:21:cb:a3:06:f8:42:2b:
ba:c6:aa:87:7d:93:0b:1f:0f:18:80:d3:63:4d:e6:fc:58:90:
e9:f3:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:41:46 2025 by rpki-client