Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HAAgWHqkdMRqmc19opiIk4QvLvY.roa
File: HAAgWHqkdMRqmc19opiIk4QvLvY.roa (raw, json)
Hash identifier: oRIuNu55ggWAnnK4TABpGs4LY3bJP2HWLbZZqvpkzPI=
Subject key identifier: 1C:00:20:58:7A:A4:74:C4:6A:99:CD:7D:A2:98:88:93:84:2F:2E:F6
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D77250DE581398BF3397AF89906E3A
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HAAgWHqkdMRqmc19opiIk4QvLvY.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210918
IP address blocks: 5.1.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:72:50:de:58:13:98:bf:33:97:af:89:90:6e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c0020587aa474c46a99cd7da2988893842f2ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:7f:5f:99:8a:40:19:47:ac:50:a3:95:da:
03:a5:38:4c:c3:7d:10:2a:d0:da:ba:50:31:eb:dd:
0a:fb:0b:fe:37:b2:f1:a2:69:75:99:c5:e9:05:ee:
9f:62:50:d9:8c:ca:09:6f:00:af:50:8c:33:e8:0d:
60:4e:a2:27:15:01:96:5e:fd:4e:59:f7:f6:88:60:
dc:91:e9:c9:a6:20:dc:8b:ec:5e:98:3f:09:bf:b6:
86:43:ed:bf:39:69:d9:f3:e3:55:ce:15:b8:0d:f4:
04:60:6d:be:b5:91:f9:a6:ea:fc:7c:05:88:90:08:
bb:58:3c:92:17:fe:72:c5:97:50:bc:ea:85:cb:ca:
91:76:4c:7f:c4:09:99:e6:4a:8e:b7:3f:9d:9d:3f:
13:9c:d5:1f:54:7d:8e:ce:c4:d7:e8:83:0b:e2:6e:
3d:c0:02:54:5f:fd:0c:6d:28:93:be:a4:9f:14:b4:
f3:89:f1:ad:7d:43:3b:37:32:88:2b:b2:05:f3:09:
ff:d7:2e:02:ec:5f:f2:90:7c:08:e2:c6:89:76:a5:
2a:1e:a8:b7:40:37:9e:ab:c8:fd:84:ad:9d:64:25:
67:a9:4b:31:50:13:a2:44:21:5f:4f:2b:f9:0e:0d:
3e:4c:41:8f:90:a5:ad:01:81:4f:17:69:7f:23:51:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:20:58:7A:A4:74:C4:6A:99:CD:7D:A2:98:88:93:84:2F:2E:F6
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HAAgWHqkdMRqmc19opiIk4QvLvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
Signature Algorithm: sha256WithRSAEncryption
30:48:00:c5:44:95:30:b3:97:47:5a:e8:f0:03:4e:45:28:e5:
a1:22:77:6a:e7:4f:e9:e9:06:80:00:7b:db:01:6c:a8:fd:d2:
e0:6e:c2:e4:14:b8:89:ed:9f:00:43:f5:73:0a:98:c2:18:5e:
a5:f2:5a:29:c9:cc:24:5a:88:00:93:55:cb:c5:a1:f5:74:a4:
85:fb:d8:b0:65:76:5a:3b:8b:fa:cf:ea:f4:5d:54:63:e8:45:
01:97:89:58:f6:ae:0e:ad:7b:36:a4:2d:bf:08:aa:d2:5c:8d:
5c:e7:0a:a9:3c:3a:cd:cf:34:a4:e9:e5:43:3e:ea:b4:79:fd:
c1:b9:41:aa:b0:db:b3:8e:ec:1d:39:a7:2d:a3:c8:ab:a4:44:
e0:05:4a:e0:6a:ff:65:34:08:e3:40:6b:ec:06:81:3a:0c:84:
fb:dd:03:63:9e:74:12:1e:6b:21:f9:75:40:43:e6:2a:19:4f:
62:96:7c:36:5f:78:0a:80:29:23:77:35:a5:03:4a:4e:3b:51:
db:1b:08:a2:e3:8d:55:f5:0e:d1:d3:da:cc:46:2c:a3:b8:a2:
0e:35:b0:72:c6:c8:fa:ce:8b:68:99:e3:12:84:d7:0c:12:92:
f2:3b:6e:c2:cf:2e:1b:51:42:8c:e0:d4:ef:d6:70:63:70:9f:
11:d2:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:52 2025 by rpki-client