Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/hPT4622el3NZQW0fczNtJahIA9s.roa
File: hPT4622el3NZQW0fczNtJahIA9s.roa (raw, json)
Hash identifier: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=
Subject key identifier: 84:F4:F8:EB:6D:9E:97:73:59:41:6D:1F:73:33:6D:25:A8:48:03:DB
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 0194B78B4A4EFFC83045BDDD64A32A6DC745
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/hPT4622el3NZQW0fczNtJahIA9s.roa
Signing time: Thu 30 Jan 2025 14:09:06 +0000
ROA not before: Thu 30 Jan 2025 14:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209434
IP address blocks: 91.212.99.0/24 maxlen: 24
194.24.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:8b:4a:4e:ff:c8:30:45:bd:dd:64:a3:2a:6d:c7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Jan 30 14:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84f4f8eb6d9e977359416d1f73336d25a84803db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:6f:71:0a:86:f9:2c:84:c8:d1:5d:67:da:
cb:ac:d1:48:48:22:16:f5:9e:8d:ae:87:cb:f1:43:
21:27:b6:cd:e6:59:71:b6:6b:62:b8:f5:8d:f9:da:
18:22:5e:43:59:61:53:79:59:34:a6:87:5f:dc:12:
5d:91:38:92:e6:f8:09:2e:a7:ff:f6:28:cf:ba:0c:
e0:bd:09:55:14:7c:f3:ea:be:01:36:a0:17:0b:58:
00:4c:60:d0:50:3b:84:eb:90:be:d4:c9:7d:6f:55:
58:13:17:f4:62:55:87:c4:1e:a6:1c:2a:95:c1:5e:
0f:e6:a0:db:f0:1a:5c:7a:87:b4:26:a3:a1:d9:71:
cd:f2:f4:20:a2:86:47:d4:2a:b5:a4:55:a0:d2:24:
d9:6c:14:42:15:4a:93:a5:0b:28:43:25:c8:2b:ac:
04:8d:5d:6e:e8:0b:bf:d8:66:14:e0:be:77:24:c6:
44:d9:d0:7c:3c:1d:53:26:10:3c:55:2f:00:60:0f:
77:8f:07:3c:4d:a6:db:65:56:3d:0d:b7:d9:2f:1c:
9a:00:7e:38:92:d2:de:13:13:bf:e7:3e:96:98:dd:
04:71:e2:03:a0:41:e3:a4:a5:c4:8e:65:92:96:4a:
e0:8e:33:6d:63:97:72:dc:d1:fd:44:ca:7c:46:d7:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:F8:EB:6D:9E:97:73:59:41:6D:1F:73:33:6D:25:A8:48:03:DB
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/hPT4622el3NZQW0fczNtJahIA9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.99.0/24
194.24.231.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5d:dc:55:d3:64:20:bf:f8:c9:b0:5a:11:93:2d:9f:26:4c:
19:1d:1f:0a:cf:9f:80:fc:da:1e:86:3b:c2:ff:15:fa:30:4d:
77:da:99:fc:94:53:47:cc:d9:2b:6d:6c:e9:d5:8d:ab:4c:c6:
04:02:3c:f5:a4:b6:0e:22:4d:6c:3a:7c:cf:f3:47:5e:11:82:
13:d9:26:8b:e5:8a:86:1c:59:1a:26:ca:e7:84:86:b7:8d:95:
1b:5b:c8:10:34:b5:fe:2a:d0:86:a1:fa:2c:18:e7:e0:ce:a8:
90:22:ba:39:31:0b:8c:1e:32:6c:c5:88:2a:94:e0:0f:e1:ee:
4a:4e:b3:99:37:44:d1:2a:a4:f6:ce:41:ea:cd:6d:33:cb:43:
a6:58:9a:3a:4e:09:28:1d:17:1d:c2:98:4a:cf:b0:f1:8b:0c:
5e:f4:79:35:ed:5d:fb:55:55:49:e9:77:b4:a8:98:0d:f7:f3:
4e:ce:75:bc:c0:dc:f0:12:98:ac:14:2c:9f:33:fa:49:54:4e:
13:3d:50:50:cf:5f:48:a9:64:a8:47:b6:7b:91:66:df:82:b1:
28:aa:97:77:96:99:cc:97:de:9f:89:fb:42:2e:6e:75:65:70:
8e:5a:38:87:bc:66:f9:f7:08:7d:7a:36:aa:8d:98:7a:b8:95:
0a:4e:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:40 2025 by rpki-client