Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/HrIwTwMD6cd99R3d7bEiTOryXZg.roa
File: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (raw, json)
Hash identifier: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=
Subject key identifier: 1E:B2:30:4F:03:03:E9:C7:7D:F5:1D:DD:ED:B1:22:4C:EA:F2:5D:98
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 0194236A44443508000E7E91872002DF7148
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/HrIwTwMD6cd99R3d7bEiTOryXZg.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35332
IP address blocks: 91.220.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:44:44:35:08:00:0e:7e:91:87:20:02:df:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eb2304f0303e9c77df51dddedb1224ceaf25d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:e5:a4:4f:1d:26:0e:01:8a:d7:06:50:b0:
45:8b:38:91:a7:0e:f3:da:2e:2b:9e:1a:e3:e4:82:
35:1e:b1:03:75:1c:6a:51:80:41:d3:4c:38:79:ce:
ab:ee:d7:90:14:ea:ac:61:91:9f:21:b0:70:c5:be:
5f:99:a7:3f:68:62:7e:e1:a8:7b:9a:74:37:be:a4:
67:74:b7:a8:0a:ff:ce:b4:fa:52:8f:5f:2e:44:31:
ce:dc:cf:db:9b:d2:62:7a:a3:e5:78:e8:ad:a3:bd:
50:0b:e8:4a:34:10:7d:96:59:2d:5a:60:d5:a8:17:
36:a4:6e:ae:f5:db:ff:95:2e:7f:44:28:47:f9:3c:
56:0e:79:5c:ce:58:48:d7:9b:ef:89:94:49:cf:3d:
ff:5d:fc:54:f9:12:2e:27:a7:31:fb:00:f1:f2:b4:
8d:26:aa:02:41:31:ef:e7:5e:05:27:85:6c:91:d3:
b1:91:8f:10:cd:8d:e4:2e:5c:dd:e7:8a:f8:ac:0b:
2c:61:d8:7c:d9:ee:96:ec:f9:20:01:07:5d:d5:19:
5b:2b:7b:c1:7c:41:97:9c:ce:eb:90:7b:01:88:9e:
98:ca:9b:7e:a0:61:af:35:5d:4a:57:3c:e6:d3:af:
46:4a:7e:ed:82:6d:9a:a4:d8:03:50:11:c0:bd:d1:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:30:4F:03:03:E9:C7:7D:F5:1D:DD:ED:B1:22:4C:EA:F2:5D:98
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/HrIwTwMD6cd99R3d7bEiTOryXZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.21.0/24
Signature Algorithm: sha256WithRSAEncryption
43:10:cc:ae:93:13:b8:4d:62:82:ce:d5:ba:ad:38:20:e2:9d:
6b:82:52:56:85:5b:df:a9:99:63:ba:23:78:ed:d4:23:9f:76:
1f:d9:7a:9e:8d:15:69:f9:a5:51:94:36:09:0f:0b:a2:c2:1f:
b1:aa:d4:c1:e0:a4:e2:e8:26:6f:09:0a:35:47:8d:43:8d:07:
8f:4c:f5:08:6d:c1:e4:3d:b0:b6:7e:b9:5a:06:4d:40:24:e2:
05:68:7c:ad:0c:e9:c3:03:57:49:8b:0d:f5:e2:e9:e7:5f:5d:
ab:b6:eb:c5:b8:02:af:30:8f:a1:e7:5b:03:c5:01:2a:ca:71:
ae:c6:07:14:ba:46:06:79:4f:61:6c:0b:8a:ca:a7:d0:e3:6a:
f6:d7:07:e0:dc:fc:a0:3d:de:bc:d2:12:98:31:14:4f:0f:97:
41:8d:b2:2e:a2:29:37:5d:f8:ef:90:88:56:8d:d0:55:4c:75:
01:a1:2f:ba:21:da:92:a9:3b:8e:f0:90:2e:4e:24:be:e6:33:
60:5f:20:96:14:25:c5:35:91:cc:7f:25:8d:02:d1:45:db:41:
b3:f5:a0:71:ab:81:d9:df:fa:2e:bf:a4:aa:a7:db:15:a2:c4:
68:12:ef:e6:31:91:63:d1:7e:42:4d:4c:a3:24:08:06:4f:5b:
3d:a3:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:02 2025 by rpki-client