Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/K0HsWHysHMZq685uifFe67OOB8U.roa
File: K0HsWHysHMZq685uifFe67OOB8U.roa (raw, json)
Hash identifier: mIF7jMe84gl1h6EoDmzjdFHUQ2hvrkI5zhJWqQMrx4w=
Subject key identifier: 2B:41:EC:58:7C:AC:1C:C6:6A:EB:CE:6E:89:F1:5E:EB:B3:8E:07:C5
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 0194206840C536DD010C00200F9A5B26DB18
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/K0HsWHysHMZq685uifFe67OOB8U.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39561
IP address blocks: 194.67.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:40:c5:36:dd:01:0c:00:20:0f:9a:5b:26:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b41ec587cac1cc66aebce6e89f15eebb38e07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:22:e5:f5:31:be:77:07:86:b2:3c:4f:85:
ab:dc:b0:7b:85:15:e5:45:1e:00:df:a1:70:a7:e7:
cd:77:c8:a8:e6:6d:eb:73:c6:88:b7:27:79:ee:17:
b7:49:73:ab:0b:90:f4:70:77:7c:d3:a8:bd:86:5d:
80:e1:30:27:48:1b:c4:0a:35:d7:3e:26:cf:b0:bd:
3a:a1:81:91:2f:1b:a2:b8:de:66:d4:80:b6:3a:27:
2e:be:0d:90:56:39:5c:79:64:28:0f:0f:0c:05:9d:
cd:c2:c2:94:3a:f0:46:eb:76:47:d3:46:d0:28:2b:
47:54:50:4d:c9:c8:78:12:ef:42:b6:dc:f4:63:de:
89:b1:0d:72:f3:fa:6e:9b:2a:ac:bb:3f:47:e0:f1:
21:e6:3d:b7:10:8d:48:12:fc:4d:b1:df:1f:5b:c1:
95:d2:e6:54:88:81:2a:ce:b0:34:e2:cd:cc:53:ae:
28:96:9c:58:5f:7b:3e:e7:01:b1:58:28:7b:70:c6:
e6:0a:c1:53:ea:17:3f:85:d0:e7:67:ff:d0:c9:da:
c9:3c:e3:bf:9f:15:50:f7:72:75:6c:77:5a:4c:67:
2b:2f:1c:6d:63:06:dd:d3:8a:31:91:00:d2:3f:22:
a2:fc:45:9f:14:b4:23:4f:5b:1e:7e:fb:9c:43:68:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:EC:58:7C:AC:1C:C6:6A:EB:CE:6E:89:F1:5E:EB:B3:8E:07:C5
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/K0HsWHysHMZq685uifFe67OOB8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.73.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e9:5b:70:5e:10:64:3b:83:75:8c:06:70:9c:a0:39:01:0f:
66:db:35:0d:03:91:ce:e6:ff:ca:e4:ad:e4:2c:8c:9c:5e:a0:
ba:b2:3c:cb:8a:59:21:ec:5e:39:7f:d1:61:be:ef:59:a1:4d:
8a:ee:e5:03:a2:13:cd:77:96:25:be:4d:78:06:32:25:e7:b7:
c9:fa:53:67:e7:97:d3:78:4d:3c:52:67:e0:2c:b2:22:64:8a:
cd:69:94:65:25:81:73:42:53:4d:b6:d9:d0:6e:6f:4b:9b:b2:
51:1a:ad:41:64:a5:ce:39:32:2a:e0:da:f5:60:6d:b2:07:9d:
2c:22:18:e6:a2:9e:98:3c:39:73:c1:92:e5:5d:a7:e1:9e:a9:
22:48:34:88:e7:5d:77:12:17:85:94:f1:99:9a:f5:80:8e:35:
5d:4e:08:d7:74:52:bb:30:84:6e:a3:a3:b6:fb:19:36:90:bb:
98:a7:ac:87:84:02:aa:f0:88:60:e5:8f:40:5e:f3:e1:47:03:
d4:9f:ae:80:12:61:86:c0:28:59:bf:70:5e:82:ff:2b:eb:c5:
76:8a:44:60:04:f1:af:6b:84:96:3e:0c:81:97:71:59:14:82:
83:0d:3f:88:58:7f:a1:50:75:2a:82:42:25:c2:77:57:54:d9:
36:50:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:07 2025 by rpki-client