Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa
File: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (raw, json)
Hash identifier: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=
Subject key identifier: 1C:98:88:7C:3B:C5:A3:FB:03:2C:C2:79:38:4F:36:99:81:69:C8:74
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019427488FDED342BC89EBE66D0355086262
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42349
IP address blocks: 91.233.122.0/24 maxlen: 24
185.203.28.0/22 maxlen: 24
2a0a:e040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8f:de:d3:42:bc:89:eb:e6:6d:03:55:08:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c98887c3bc5a3fb032cc279384f36998169c874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:3f:d9:0f:36:dd:52:f6:3a:b6:e4:17:fc:
84:88:01:d4:f1:cf:85:ab:85:45:cd:f7:96:74:33:
03:d7:7a:1b:a0:6a:d7:7c:01:af:a8:b2:01:a1:a7:
bb:1f:8d:d2:26:96:4d:38:e7:f7:8d:f3:e8:e8:73:
9e:a1:b4:43:4f:36:94:24:ae:d9:02:f9:0f:4e:51:
37:19:56:33:ec:89:07:8d:5c:54:8c:88:4c:39:65:
9c:c2:dd:8e:b4:da:e0:c6:0e:78:6a:10:b1:08:ca:
81:51:90:a8:fe:cb:14:aa:0e:44:c3:35:68:06:04:
0d:5c:42:49:df:e7:fa:5b:06:0e:45:01:89:49:71:
28:ca:cc:21:86:af:61:ae:fc:6f:fb:31:2d:8b:f6:
df:c9:fd:cb:4a:f8:4e:23:e7:85:d4:96:37:e1:58:
9f:e2:8b:aa:5d:4d:b2:8a:67:f9:8b:86:24:94:b8:
fa:cd:28:ab:bc:b7:73:18:fc:e0:74:80:87:c0:37:
ce:f2:8c:0d:92:6b:83:cc:90:70:5c:4c:ea:23:49:
45:c1:41:56:3e:c0:f6:5c:5b:77:17:d0:a8:ce:26:
13:7a:b2:15:33:bc:6e:20:5f:37:96:be:e1:e3:70:
ae:8b:9f:8b:d6:cd:90:35:aa:41:53:d2:15:17:6a:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:88:7C:3B:C5:A3:FB:03:2C:C2:79:38:4F:36:99:81:69:C8:74
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.122.0/24
185.203.28.0/22
IPv6:
2a0a:e040::/29
Signature Algorithm: sha256WithRSAEncryption
55:2c:78:c0:32:88:f8:5a:76:2b:83:c2:16:ad:91:01:9a:a1:
ab:71:85:6e:3c:cf:b7:24:4d:83:bd:ef:a4:0d:5a:2b:87:ff:
11:63:f6:61:c7:02:80:61:e2:18:c2:32:35:6b:9b:28:d3:6c:
44:55:c2:bc:25:e8:a7:69:9c:9d:fd:d8:55:29:d9:fb:57:e2:
6b:c3:17:f5:2d:c3:f3:31:de:ab:a0:09:f9:71:f2:b3:ee:f8:
01:75:d8:82:f4:54:f1:26:c7:0b:27:87:cb:fd:e0:bc:8f:a9:
0d:ff:e9:5d:e6:e9:4d:39:1f:70:b6:0a:e3:0a:00:d6:d7:15:
3a:fa:fe:c0:e5:9c:e3:01:af:b9:4a:4b:3f:60:85:a5:57:47:
01:b8:3b:a7:50:81:87:32:f4:5a:41:b6:c1:4e:85:a9:3e:90:
09:a7:a6:19:bb:4f:00:51:35:e6:9f:4d:a8:e1:0a:2d:c8:cc:
f9:36:18:dd:18:b4:a0:7b:60:36:04:89:d9:e1:37:29:95:95:
d1:5f:31:da:6a:3b:42:f3:fc:2b:44:c6:9f:be:fd:0d:22:84:
3e:d3:d1:ac:11:8c:04:dc:47:b5:66:ce:bc:69:66:8a:6d:fb:
f7:c7:52:42:8b:3e:ee:dc:c7:30:18:54:ae:4e:9b:e7:e6:43:
2d:2c:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:08 2025 by rpki-client