Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HhSwhplflA24lbk7RcWrozDPdq8.roa
File: HhSwhplflA24lbk7RcWrozDPdq8.roa (raw, json)
Hash identifier: dYaHQTqxJEi+ZT/tP4653NZRh9ON2lPcq8n5zpQSYkQ=
Subject key identifier: 1E:14:B0:86:99:5F:94:0D:B8:95:B9:3B:45:C5:AB:A3:30:CF:76:AF
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC32C0E4826638F17A84DD9E99B309
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HhSwhplflA24lbk7RcWrozDPdq8.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 87.236.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:32:c0:e4:82:66:38:f1:7a:84:dd:9e:99:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e14b086995f940db895b93b45c5aba330cf76af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:cf:eb:b3:10:3e:a1:ec:53:5b:0b:62:c1:
e1:e4:47:c5:04:9c:43:72:7d:93:4b:3b:93:25:da:
b2:d8:70:39:4f:ef:92:de:c7:6f:e2:6f:aa:8b:4a:
e8:8d:c9:62:f5:67:0e:6e:66:fc:a2:20:e1:5c:02:
bf:a6:77:c1:a9:72:2c:68:a1:e8:2d:00:1e:5c:cc:
08:a2:ac:b4:01:e2:21:b4:e5:bf:b8:78:21:53:4d:
36:cf:8b:d7:2b:1d:b1:1f:50:02:e9:88:d4:d1:ad:
33:6d:7f:82:dc:37:bd:69:13:82:95:90:93:d1:ea:
fb:d4:14:d5:23:4a:b8:de:98:d0:24:99:94:60:57:
d1:b1:85:df:f7:76:47:61:1f:7a:52:fe:aa:6e:a1:
bb:bc:65:e7:81:91:1b:1e:97:7e:d5:db:6f:1c:30:
8d:f7:33:c2:06:1b:39:b2:bf:bb:5f:51:ec:3e:df:
72:1a:96:51:87:e0:43:67:d6:50:43:9f:2a:d1:4e:
b2:39:60:3a:3f:92:cf:20:68:71:3c:09:d2:2a:54:
39:a1:b6:2a:c2:63:3e:3c:c5:17:58:c6:be:d5:77:
4b:6d:b5:7a:3d:09:d0:7e:1a:4e:23:01:1f:8e:d3:
7c:72:fe:02:6c:cf:66:cf:08:21:95:75:a1:5f:fb:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:B0:86:99:5F:94:0D:B8:95:B9:3B:45:C5:AB:A3:30:CF:76:AF
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HhSwhplflA24lbk7RcWrozDPdq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b6:11:26:db:5b:a5:c2:27:28:39:7a:39:29:19:08:d7:a1:
5d:96:64:5e:3d:71:13:e9:ce:00:fb:1e:fd:a6:04:52:ee:07:
3c:86:4d:50:c7:c1:eb:4f:a8:c6:8f:d3:00:cb:36:b2:10:39:
5c:39:64:d3:c4:04:a6:f2:75:56:47:07:f0:6f:0c:9e:30:23:
aa:a9:7a:52:a8:6f:b9:9e:f3:1b:10:4d:be:ff:b0:59:a6:81:
c1:45:65:9a:54:d0:9b:48:5b:1c:52:92:95:60:24:60:f4:8f:
14:0b:3e:4d:66:b8:ec:f0:01:20:88:a6:9a:20:7a:6c:64:bd:
05:8e:25:ac:d3:b3:73:e7:ec:d1:73:1e:f4:29:00:d9:c6:4e:
0c:9a:49:8a:13:da:77:87:30:61:c6:49:f6:98:d2:3c:b4:e8:
eb:a2:b1:91:91:99:51:85:82:e3:23:ed:21:b7:8b:05:c3:89:
ae:2d:bb:20:b7:c8:0b:a3:b8:54:90:84:b7:4e:9d:41:17:8a:
5a:71:8f:2d:ce:78:98:f5:64:fa:d7:61:7d:8c:3c:cc:0d:b1:
ec:40:7d:8b:4a:ee:0c:71:73:c8:b8:16:2b:3e:71:ed:72:27:
68:f3:b7:ea:2c:06:aa:fb:75:e2:33:e9:ea:c2:f9:64:b5:dc:
0e:c3:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:44 2025 by rpki-client