Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/H2VZSmbjuhR3ac6MIKzeglyIYks.roa
File: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (raw, json)
Hash identifier: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=
Subject key identifier: 1F:65:59:4A:66:E3:BA:14:77:69:CE:8C:20:AC:DE:82:5C:88:62:4B
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019423D7D093294C455348F5AE23388F1587
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/H2VZSmbjuhR3ac6MIKzeglyIYks.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133398
IP address blocks: 79.141.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d0:93:29:4c:45:53:48:f5:ae:23:38:8f:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f65594a66e3ba147769ce8c20acde825c88624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:e5:75:e3:cb:5a:35:02:d3:54:36:53:63:
81:fe:bc:7e:de:c8:24:ea:02:41:cb:f9:32:3e:61:
fa:00:99:e5:f3:52:bc:57:e0:e1:21:1a:1d:b5:23:
97:3e:a8:32:61:fa:80:06:31:00:9d:88:0c:9f:ff:
66:49:dc:96:2e:38:df:94:1d:ca:50:03:65:0a:2e:
56:48:87:4e:dd:f7:d8:be:09:ce:64:1d:8a:d8:66:
67:05:73:78:a0:6c:56:87:55:5f:89:75:fb:a0:2d:
76:f6:f8:95:96:fc:13:d0:ef:5f:5e:ed:12:29:b0:
42:3f:c7:8c:3c:4b:a9:04:7c:19:93:c3:b7:19:5d:
20:06:32:85:ed:1f:15:50:2a:f1:ff:88:5f:18:1e:
e0:24:db:eb:fd:97:1d:7f:e3:49:96:79:71:1b:81:
92:9c:23:61:d1:d4:39:84:6a:ae:e3:a5:d8:06:12:
2f:ad:da:35:da:8f:46:1c:f2:db:a4:8c:7e:ff:c7:
5d:fc:7f:f3:72:fc:82:71:b5:31:a5:03:33:f8:7a:
9d:1f:ce:26:51:f1:ae:36:cd:fa:8e:25:b3:6f:ec:
ea:3c:23:6c:ae:c3:2e:db:57:27:6b:c1:67:a6:6d:
7d:69:95:05:b3:9f:1a:aa:bb:fc:35:de:15:fa:46:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:59:4A:66:E3:BA:14:77:69:CE:8C:20:AC:DE:82:5C:88:62:4B
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/H2VZSmbjuhR3ac6MIKzeglyIYks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:f0:3d:27:91:1e:a9:2a:1d:98:f3:b6:ca:5f:ef:71:cf:59:
5e:cb:ef:aa:2c:39:0e:46:38:c6:9d:24:47:92:3a:31:80:f1:
ab:30:4c:d5:86:2f:77:9e:11:59:99:1f:78:06:41:a4:85:7e:
1d:e9:70:67:af:0e:04:55:43:7f:c8:d1:4a:c9:a2:6c:5b:83:
2d:59:b6:a7:07:d0:de:3b:56:8f:1e:3e:de:a6:0b:89:d2:3e:
0a:90:76:81:be:be:8d:9f:e9:5b:82:29:53:eb:5b:64:3e:ce:
31:5c:1a:04:81:2b:e0:58:dd:ca:90:0a:d8:7e:75:a6:01:3f:
1d:e5:8d:05:6d:98:c3:a3:cf:25:7e:be:fb:3f:ba:27:11:28:
d5:3b:fc:7c:15:92:2a:3a:11:cd:0f:27:a4:17:fd:bc:dc:cc:
7c:9c:75:3c:0b:25:e1:9b:57:d5:a0:5d:80:52:48:83:f6:db:
dd:a0:1a:91:f9:d7:9c:c3:a3:f1:6a:8c:e5:a2:dc:bd:c1:e3:
27:87:87:2e:9b:d9:e0:a9:c1:13:68:a9:c0:66:48:01:3f:75:
d6:09:23:cc:e8:c1:1b:19:de:88:bb:7e:b5:f6:f3:83:14:30:
85:8f:0f:73:7d:ac:66:79:3f:66:47:9d:1d:87:97:58:a2:59:
79:12:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:30 2025 by rpki-client