Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/hLQXaatH7tOfK30W86b9zuTHKXk.roa
File: hLQXaatH7tOfK30W86b9zuTHKXk.roa (raw, json)
Hash identifier: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=
Subject key identifier: 84:B4:17:69:AB:47:EE:D3:9F:2B:7D:16:F3:A6:FD:CE:E4:C7:29:79
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 01942522338F9C36682459672E164ADC19F2
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/hLQXaatH7tOfK30W86b9zuTHKXk.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 91.209.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:8f:9c:36:68:24:59:67:2e:16:4a:dc:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b41769ab47eed39f2b7d16f3a6fdcee4c72979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:40:70:cc:ce:75:fe:77:40:c8:1e:6c:32:
aa:cb:7b:40:9a:79:7a:ee:d6:6b:ea:62:b2:97:b0:
2f:d6:83:ea:84:35:8e:8c:ad:9e:d3:77:e3:8e:97:
49:b4:bc:ec:d1:07:e8:aa:4d:8a:23:9c:8e:53:e2:
a7:64:d1:fb:a4:5f:8e:58:53:93:01:bc:8b:48:01:
83:bc:16:8b:b4:63:82:91:24:02:42:9c:62:d8:19:
36:4c:6c:05:81:c6:34:13:52:ef:cb:94:cf:7e:53:
76:b5:8d:5d:1c:30:5b:35:6d:a7:cd:56:29:ea:f9:
ca:fe:ef:d2:70:e6:85:77:fd:95:53:9d:b3:9d:5f:
2c:b1:d5:8d:e4:b0:46:60:94:07:6b:4a:3d:a0:70:
7b:89:12:d6:04:b1:55:af:61:64:62:30:5d:40:58:
af:25:1c:e5:2e:0c:0f:d3:87:b6:d1:0d:47:25:44:
5e:0f:ee:ae:e6:87:d9:33:2c:67:a7:a9:6f:f2:57:
f8:70:fb:c3:2e:98:81:2d:19:3f:d9:52:6a:a5:ab:
3c:27:b9:21:cb:c5:34:52:56:82:fc:1b:6c:66:37:
44:62:e7:6b:16:c5:5a:1e:64:3f:e9:ae:76:39:79:
0c:e6:8a:74:94:18:ef:93:2e:07:8f:ab:d9:e8:c8:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:17:69:AB:47:EE:D3:9F:2B:7D:16:F3:A6:FD:CE:E4:C7:29:79
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/hLQXaatH7tOfK30W86b9zuTHKXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.87.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2f:e2:2a:ee:00:20:73:fd:7d:6d:3e:96:ea:64:2d:3d:5b:
a8:94:fc:32:50:14:aa:1c:90:44:1d:98:fe:97:ee:f0:9c:a5:
95:56:f0:6c:e5:36:9f:32:de:b6:d3:1f:62:b5:3e:a3:31:f2:
c0:2e:f5:61:08:34:93:54:eb:96:44:fb:7c:19:3c:a3:32:a3:
97:8e:22:d7:72:cf:02:b0:e5:d7:ba:88:30:f5:57:1b:e5:60:
a9:c0:87:01:e8:cb:f0:44:e7:54:16:93:5f:52:dd:00:5c:c7:
2f:11:13:9b:62:ef:8a:3e:15:dc:66:93:47:0b:28:ce:37:e1:
b9:04:1b:21:d9:27:da:df:e4:19:a0:b5:3d:d6:11:e5:05:23:
be:5a:f7:4e:ee:37:a8:bc:24:73:93:f4:fa:4b:2e:29:b0:42:
0b:6b:2f:c0:ea:1e:f7:d9:d5:3c:26:f5:7a:f9:29:c2:4f:d4:
b6:93:5c:1e:d2:d8:ef:fb:32:88:45:53:fb:2e:84:17:a1:6d:
90:7a:6e:4f:7d:70:a0:ae:27:f7:7b:c3:93:d4:1c:de:3d:da:
5b:69:a2:b9:e5:7e:99:17:4d:a5:91:bc:6e:f1:06:03:e8:79:
95:bd:bd:1d:75:f9:5a:7a:9f:d5:4f:15:34:1f:33:17:47:3d:
8d:3f:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:40 2025 by rpki-client