Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa
File: HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa (raw, json)
Hash identifier: W8tzfEVYuZk67nGO3GJK/wSiRVXk9GPJqQ4Zpo1nq8A=
Subject key identifier: 1D:B8:17:EC:E1:31:FB:C8:3D:55:34:2F:62:F6:C3:FD:ED:1B:3C:9E
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 019427B6870647FD7BBA70596DF74429598C
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35202
IP address blocks: 5.180.116.0/22 maxlen: 24
2a0a:6400::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:87:06:47:fd:7b:ba:70:59:6d:f7:44:29:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1db817ece131fbc83d55342f62f6c3fded1b3c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:13:9d:56:c5:1c:84:78:81:ed:91:6e:da:
64:4e:ee:1a:06:2c:c1:a2:c1:17:8c:b5:ef:56:d5:
cc:47:cb:14:df:00:81:04:0a:da:ad:72:73:ed:cf:
c4:e1:9f:61:bc:e8:6a:4c:da:09:28:c3:a5:49:79:
14:90:f8:96:ca:97:49:70:54:36:ec:d3:54:44:e8:
3d:9f:6f:de:b4:38:8b:51:17:3c:99:7e:c6:4e:88:
09:1b:d1:94:87:f0:7e:19:9f:b6:86:ef:77:a3:b1:
3a:83:35:f1:97:a1:20:b8:2b:f4:fd:07:ed:f3:8b:
86:59:97:87:4e:33:79:ad:1e:60:67:f3:72:47:52:
41:56:9c:03:78:02:20:59:4c:e1:2c:78:e8:ee:f9:
98:82:09:c9:3c:f2:d6:b8:d8:b7:e0:8c:3e:73:90:
2c:45:2f:cf:47:6e:7e:65:6a:0a:fc:bc:1b:13:1b:
5e:51:16:c4:b6:aa:2a:b8:4a:bb:53:94:15:7c:88:
82:2f:00:b8:3c:19:02:b3:b0:d7:2c:cb:83:74:52:
3c:aa:9a:f2:e0:99:2a:aa:5d:f1:43:d8:f2:ac:19:
08:7b:63:1b:b6:28:0f:a7:40:8f:76:66:49:e4:3f:
86:00:ce:c2:b6:7f:c6:b7:6f:ff:0f:c8:97:a5:43:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:17:EC:E1:31:FB:C8:3D:55:34:2F:62:F6:C3:FD:ED:1B:3C:9E
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.116.0/22
IPv6:
2a0a:6400::/29
Signature Algorithm: sha256WithRSAEncryption
c7:cd:15:69:31:8a:a0:18:f0:ef:1b:9d:55:52:22:80:cc:40:
eb:85:ec:82:e7:77:54:64:2c:6f:3b:d9:8d:ed:b4:91:93:80:
7e:d2:7b:ac:76:a8:b6:29:d0:f5:dd:18:70:fc:26:7f:93:0d:
c4:67:5b:cd:ea:2c:89:34:f9:18:18:67:83:07:22:cc:c5:3d:
df:a7:20:30:6a:be:5d:af:11:a1:d3:a4:4d:1d:2e:8b:f7:57:
06:d5:8f:a3:4c:77:3a:71:66:08:0d:9b:c2:29:f4:8b:54:0e:
c6:47:77:4b:48:e4:08:fa:28:f4:99:75:87:6e:e4:d9:9a:fc:
e5:a5:c1:08:7e:3e:ea:3b:39:3a:44:55:a3:f9:c3:41:aa:15:
e0:e6:35:af:f6:4d:4d:05:2e:cc:cc:96:60:a0:69:f2:85:15:
78:d4:96:53:d9:5f:eb:dc:5e:4c:d0:93:0a:b7:ab:3f:e9:4d:
2b:60:e2:bc:49:7b:87:c3:f7:39:a3:79:1a:93:fd:f9:1b:59:
2e:42:a9:45:bb:42:a8:0d:b0:dc:6b:25:8f:c0:27:45:13:c5:
9b:bd:2f:ee:84:1d:46:1e:4e:87:4a:6a:e9:57:8b:37:8d:35:
c9:16:c7:16:c8:50:dd:d8:94:81:26:74:3b:f3:82:e2:7d:30:
1d:12:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:31 2025 by rpki-client