Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa
File: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (raw, json)
Hash identifier: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=
Subject key identifier: 22:5C:25:1D:32:6A:3C:B5:8C:1F:F9:73:D3:22:B0:05:12:78:10:53
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 0194274831B1B141A2BFCC5418231884ECA7
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 2a0d:ed80:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:b1:b1:41:a2:bf:cc:54:18:23:18:84:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225c251d326a3cb58c1ff973d322b00512781053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:33:76:9b:70:74:76:9d:87:4d:6d:1d:09:
82:00:71:84:f8:32:64:0d:d3:79:17:94:d9:30:dc:
60:e4:d7:99:37:86:4f:33:f2:2e:a0:a0:17:4b:be:
6d:7b:34:69:41:ef:c4:53:c8:51:1f:d8:bb:66:9f:
3e:cd:82:2a:70:05:6d:ac:80:ac:0e:3b:57:cf:bc:
18:0d:62:91:78:bb:e1:d6:78:62:2e:f2:99:ea:65:
38:7d:17:f8:c2:d8:81:1f:eb:d8:c4:6e:5d:a1:e8:
f4:82:eb:3d:1b:df:50:5c:8a:61:87:da:de:08:24:
9a:90:b9:05:4b:6f:f5:56:09:92:c9:79:52:5f:8f:
b7:f9:46:db:1b:de:c2:d1:b1:20:10:75:9b:5d:a5:
94:52:bb:d7:ac:fb:29:2b:93:98:95:ad:43:75:8c:
36:2e:ce:17:9b:ed:18:e6:c4:e9:a8:1b:2a:78:9b:
0a:69:3b:6e:d9:fb:03:77:2c:f1:14:ce:97:98:86:
e3:51:6b:b7:30:10:e1:f8:66:ac:92:0b:82:cd:94:
0a:41:ac:41:2a:b0:29:16:28:ec:b6:e0:14:2a:fa:
f3:ee:04:e4:03:95:70:4f:3b:0e:70:86:e4:c8:1e:
37:97:5e:26:95:33:05:71:f7:79:08:5c:79:4a:5f:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:25:1D:32:6A:3C:B5:8C:1F:F9:73:D3:22:B0:05:12:78:10:53
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ed80:101::/48
Signature Algorithm: sha256WithRSAEncryption
89:cd:cf:3c:91:21:e7:7d:60:1f:8b:8b:17:c8:7e:0c:99:3a:
eb:ee:4a:4f:72:1c:e4:79:9f:56:cc:1f:50:fd:82:39:f4:87:
70:d2:20:2b:dd:58:c8:0f:6b:61:7d:a5:88:0d:e9:55:e3:64:
9c:66:d9:03:db:ea:e0:28:f0:b4:cf:f2:a6:2d:a9:6a:ec:e8:
cc:9d:55:51:6b:83:98:63:19:21:2e:2f:f2:b9:ac:75:9b:d4:
03:2b:d6:71:d5:a1:97:4b:36:e0:1b:5d:9f:34:70:07:40:be:
06:3a:d4:c9:f3:3f:1f:b3:82:de:79:d0:db:f8:d8:da:d1:91:
2c:a8:04:cc:76:6d:10:10:e2:53:9e:67:a0:ea:be:8f:5f:1e:
25:72:02:8d:fb:04:17:d4:01:b8:a2:6b:1a:d9:ff:42:66:0f:
2e:a9:66:5d:91:43:94:66:1e:8d:65:6e:dd:7c:d7:4e:90:93:
09:bb:90:f2:6e:97:d8:7f:65:0c:2c:71:8a:5d:f4:d4:6a:64:
2a:04:e1:3c:f5:96:ef:fc:3f:4e:2a:2a:49:26:c9:29:04:24:
20:66:2c:16:0c:ca:f0:57:bc:bc:62:58:76:d3:ce:29:a2:9e:
04:8a:9e:03:b9:a8:e2:85:b7:81:a4:56:e0:70:aa:f4:75:6f:
5f:e3:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:34 2025 by rpki-client