Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/HLg6VWsPMYDiVDNc71bln7BtlmI.roa
File: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (raw, json)
Hash identifier: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=
Subject key identifier: 1C:B8:3A:55:6B:0F:31:80:E2:54:33:5C:EF:56:E5:9F:B0:6D:96:62
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019427B593921A2807CC59EC77D28EA0529D
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/HLg6VWsPMYDiVDNc71bln7BtlmI.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62329
IP address blocks: 194.61.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:93:92:1a:28:07:cc:59:ec:77:d2:8e:a0:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb83a556b0f3180e254335cef56e59fb06d9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:94:d1:73:0a:49:42:f9:50:c2:f7:87:2a:
e8:3e:28:21:1f:2a:10:2c:6e:c7:2d:a0:fd:90:d3:
84:d8:f8:13:20:9f:8c:9e:e7:b3:07:1c:4b:64:e3:
57:6d:9e:da:4f:76:9f:10:dd:3b:35:b9:21:52:3c:
f6:08:2a:6f:4a:57:3f:13:92:49:34:5f:28:90:05:
d0:8d:28:0d:42:89:be:f0:ab:d5:11:c7:12:1a:75:
1a:16:74:40:b7:05:89:b8:f9:7f:8e:9d:cc:10:ec:
e0:3a:67:96:af:ef:46:fc:8c:b2:a6:76:98:10:30:
1d:bc:9c:a1:44:a5:91:33:b2:c2:7c:58:5d:cb:7e:
6b:b1:7a:8f:80:72:5e:0d:09:bf:32:25:a6:71:4b:
97:5d:56:0a:33:33:ec:be:5b:ed:c0:87:a9:bb:79:
7f:f8:5f:9a:ac:5f:68:5d:f8:d9:a8:b8:c6:91:62:
d7:e6:5d:d3:65:82:74:6b:81:98:c6:75:ea:1b:36:
e1:b6:fd:76:69:81:72:5c:58:80:d3:9b:6d:69:6e:
f0:8c:20:74:92:b5:1d:87:3f:ad:c5:04:0f:dd:4f:
f0:6a:4f:9e:56:18:72:82:e3:65:12:fc:f6:42:96:
91:60:64:a3:b7:1b:7f:66:c4:cb:d2:30:9c:d8:e5:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:3A:55:6B:0F:31:80:E2:54:33:5C:EF:56:E5:9F:B0:6D:96:62
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/HLg6VWsPMYDiVDNc71bln7BtlmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:66:c2:ef:c4:ec:bf:ef:9e:f8:82:eb:cc:c7:14:26:e0:53:
47:38:f7:81:39:68:9a:bf:61:88:a8:b6:21:ef:17:f8:87:7c:
78:0f:41:3c:2b:9d:38:5f:2a:af:96:bf:2d:6b:86:1d:4e:7f:
50:43:0f:48:77:c3:9a:b2:46:e9:1f:03:a3:2d:a8:3d:60:b7:
72:78:4d:f4:05:31:91:2b:65:db:64:67:88:bc:39:c5:09:d4:
2b:72:3c:4e:22:29:67:98:26:9e:75:c1:70:21:7a:a1:22:38:
0a:53:93:97:25:1b:cd:77:a9:84:32:e1:bb:23:97:db:8c:54:
55:6b:00:04:87:8c:d1:00:e2:4c:5b:f6:63:eb:51:45:be:31:
f4:6f:8d:7d:8d:e6:7e:b6:93:f3:61:3d:38:56:96:e2:99:5c:
40:f6:59:a2:11:66:3f:5d:3b:6c:18:67:71:e1:3f:11:f0:73:
91:42:ba:b6:6b:3a:e1:db:6c:99:9e:be:11:68:96:26:28:93:
45:2c:8f:b9:28:40:3e:87:e4:32:dd:5d:ee:11:ff:a3:df:77:
be:67:fd:5e:61:77:1c:b8:33:6b:68:48:0b:26:18:14:0a:fe:
8a:78:56:29:3c:b3:16:d1:bc:ff:0b:15:86:8d:2c:d1:07:43:
cc:b9:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:47:40 2025 by rpki-client