Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa
File: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (raw, json)
Hash identifier: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=
Subject key identifier: 1E:FC:C4:8A:9F:72:BB:B0:49:F7:18:E2:34:CA:D9:D6:CB:8F:FB:C6
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0194274803410E08591E29F9599DD930D3B6
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208848
IP address blocks: 37.60.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:41:0e:08:59:1e:29:f9:59:9d:d9:30:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1efcc48a9f72bbb049f718e234cad9d6cb8ffbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:b9:57:52:39:c7:67:1c:83:e5:f2:8a:52:
a7:51:a1:a4:38:2e:4c:0c:10:35:03:df:60:24:f5:
30:46:4d:88:aa:0f:81:ce:ad:73:e9:e8:6c:f9:7b:
eb:be:30:38:2a:aa:70:9b:6d:9e:8c:d9:30:dc:bc:
43:08:be:df:df:08:0c:58:eb:f1:3c:f3:81:9e:4a:
53:e8:24:ea:72:a3:22:e5:11:9d:30:e1:aa:a6:74:
a4:48:68:7c:0f:61:64:a3:97:1d:ea:ff:6d:a0:0f:
8d:86:52:76:4f:08:55:c4:be:d5:d8:3d:18:29:30:
be:44:73:52:37:3e:27:5f:9d:33:71:80:70:bd:30:
33:ca:ed:af:62:4f:50:9e:e5:41:9b:31:24:4f:82:
01:a7:fb:fe:a0:75:b2:04:5b:bf:7c:ea:15:5f:1c:
40:78:92:9c:b4:aa:af:2a:9d:6a:85:2c:5c:f7:21:
2e:9f:44:d9:a6:dc:fa:5d:ee:d1:fa:2b:24:fb:6b:
6a:d6:49:63:2f:94:37:cf:33:e4:0c:f4:fc:8d:36:
53:fc:32:bc:72:d6:ed:b4:d5:19:b5:08:ce:6a:61:
dd:dd:03:25:3c:82:a1:00:51:fc:05:1a:bc:57:cd:
c4:69:6c:11:13:da:2f:f6:b0:64:b8:a2:63:c3:6a:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:C4:8A:9F:72:BB:B0:49:F7:18:E2:34:CA:D9:D6:CB:8F:FB:C6
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.28.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cd:51:61:9b:0f:79:ba:52:c8:01:04:69:80:bf:5d:7c:cd:
34:15:8e:62:41:40:78:9e:8c:c6:ff:11:77:0b:ff:2c:67:35:
d3:83:27:8d:ec:80:54:6d:47:ae:5c:c2:d2:c2:e5:e4:84:2e:
d2:16:0d:14:08:2f:c4:9a:48:bf:42:e8:41:07:95:cc:6d:d8:
1f:4b:ce:3e:c1:c3:b3:c6:02:99:04:f7:17:52:ae:e9:5c:c1:
b5:30:21:a1:39:0e:5e:d1:dc:53:f5:e0:d8:15:59:20:37:49:
f3:c9:b4:e0:14:1a:ec:f1:55:d3:95:0a:c2:ac:40:78:43:66:
11:86:43:47:94:5f:00:65:5a:0a:94:d3:93:4c:e0:4b:e6:fc:
ec:e5:4e:9a:53:1b:c5:50:b5:83:23:50:4d:76:84:63:5a:68:
c8:d1:f0:7f:79:87:a5:3d:5f:b7:93:58:2b:85:79:d2:22:17:
9d:5b:23:cc:64:28:27:cd:5f:cc:c3:db:94:cf:0d:33:07:bc:
2d:5a:8d:de:9f:dc:24:b8:55:b4:e7:4f:8e:e1:f0:13:ce:11:
33:3e:e0:27:8c:5a:fc:08:14:c7:05:aa:da:96:10:fe:a4:f2:
6a:bf:77:47:1a:86:22:5e:26:10:60:a0:04:74:64:1e:29:02:
80:80:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:36 2025 by rpki-client