Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hPSFbns86C9NQYnEsJfc8wLN1X0.roa
File: hPSFbns86C9NQYnEsJfc8wLN1X0.roa (raw, json)
Hash identifier: xe/M/dl0b7+SL80dcc+Egr3fgBtobtOPCYBdN8Kdr1c=
Subject key identifier: 84:F4:85:6E:7B:3C:E8:2F:4D:41:89:C4:B0:97:DC:F3:02:CD:D5:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748459DCF7352997D89A370FA102E2D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hPSFbns86C9NQYnEsJfc8wLN1X0.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20943
IP address blocks: 194.68.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:9d:cf:73:52:99:7d:89:a3:70:fa:10:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84f4856e7b3ce82f4d4189c4b097dcf302cdd57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:d8:aa:90:f2:3e:a1:0c:20:67:ce:08:06:
6b:3c:96:ff:e9:1e:ba:fd:b7:a7:3b:58:f7:69:75:
d8:a6:49:80:91:a4:0e:0f:64:bd:45:a4:8a:85:d5:
c3:56:17:7e:ad:20:49:f0:d8:b6:7d:c2:5a:f2:56:
cf:f3:57:53:d6:91:70:9a:9b:dd:0c:38:5a:ce:3e:
b2:c2:74:fc:2a:29:5b:f4:90:4e:e5:3a:c3:44:ff:
54:fe:bf:34:23:42:7d:c9:e5:5d:51:c1:1d:8a:e8:
fa:80:1a:04:9f:0e:51:47:e6:86:06:00:11:34:0b:
7f:50:25:ea:cc:e9:63:53:d7:9a:45:0f:c8:b5:a3:
aa:2f:55:37:5d:03:19:a1:41:8e:66:df:58:97:72:
7d:7f:9b:62:61:5f:6d:15:27:86:42:ac:59:7a:03:
b0:25:6b:93:6f:70:e6:60:5d:5e:ff:a7:a3:d3:19:
78:7f:60:b4:79:bc:64:8c:f2:ae:74:8e:d8:d9:7d:
77:25:21:4a:d2:cb:27:54:cd:a9:c7:a4:5a:6a:b1:
a6:94:b3:1e:20:57:af:56:40:bd:bd:3f:91:ab:da:
e1:63:1b:aa:81:20:ff:c4:65:db:d3:81:d3:70:78:
f9:bc:f7:b7:45:bf:61:c1:fb:d9:3b:d3:e7:92:47:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:85:6E:7B:3C:E8:2F:4D:41:89:C4:B0:97:DC:F3:02:CD:D5:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hPSFbns86C9NQYnEsJfc8wLN1X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:00:c0:ae:b2:06:3f:95:c9:b9:33:d3:17:c9:cc:4a:7d:9c:
a0:46:a3:8b:7e:6f:86:dd:64:27:d0:fc:c4:01:e8:88:49:42:
03:0a:24:9f:58:dd:41:18:0b:ca:82:fa:76:5c:7b:ce:75:86:
5e:12:f9:9a:75:89:bd:bb:85:07:4f:b6:eb:15:fd:46:ad:80:
26:c8:97:2e:43:ab:31:e1:93:38:28:26:74:c7:59:06:94:2e:
c4:4f:2d:22:c4:ac:d7:32:9d:94:0a:7e:33:01:ad:e7:a5:c9:
df:de:29:74:d5:e4:d8:21:7a:af:7a:78:39:f9:38:c5:1b:26:
b4:54:bc:fa:65:b9:a4:0b:25:a3:75:d1:df:c9:38:28:5f:66:
40:83:94:01:df:b1:97:2b:2f:a9:c2:a5:c8:26:15:a6:41:39:
77:15:c6:12:24:dd:c7:e0:dc:1b:f1:13:36:11:af:3f:cd:aa:
b7:5e:2c:dc:58:89:db:21:08:7b:1d:65:e3:8f:87:01:25:00:
e3:d6:ac:50:21:44:d6:7e:6c:1b:6d:83:a0:d9:a7:97:7f:36:
99:a5:09:74:ac:43:d7:91:07:51:f9:7d:10:7f:60:12:81:3a:
9e:35:01:f0:94:da:e8:64:b2:f1:a9:6f:fd:03:11:43:52:87:
1e:e5:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:24 2025 by rpki-client