Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hTHwPGeSpaiezOh845cV45d6Qns.roa
File: hTHwPGeSpaiezOh845cV45d6Qns.roa (raw, json)
Hash identifier: ux4g6LjfNE5RSKb6+d+NWMjtqx785qGYH3qHYYAiok8=
Subject key identifier: 85:31:F0:3C:67:92:A5:A8:9E:CC:E8:7C:E3:97:15:E3:97:7A:42:7B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484F690F1DB3CA67353634B2ED05C7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hTHwPGeSpaiezOh845cV45d6Qns.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34946
IP address blocks: 193.183.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:69:0f:1d:b3:ca:67:35:36:34:b2:ed:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8531f03c6792a5a89ecce87ce39715e3977a427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:77:e1:08:a5:c7:39:93:35:b0:b8:9e:d6:
ed:5f:46:06:87:57:f5:68:e8:f8:86:58:b1:c4:7c:
3b:d7:5a:55:9b:22:a4:00:6f:b6:0b:f8:09:d6:4f:
cf:0f:41:06:19:6f:8f:03:ff:a4:24:f2:c8:dc:43:
c1:f1:15:44:9b:7e:28:33:41:54:2e:27:f2:de:65:
1e:28:4b:26:2d:0e:32:7b:01:67:61:79:04:5c:18:
44:b3:67:05:28:9f:c3:29:8e:6e:40:91:e8:f1:dc:
40:3c:a0:9f:14:3f:5a:f1:1d:8b:cd:e1:4b:5b:4a:
61:8d:e2:20:84:19:56:a9:55:85:d2:86:8c:f0:88:
36:a1:d8:3e:41:81:ce:b3:24:e6:dc:37:a8:30:8b:
78:6f:09:50:a0:be:ab:42:40:09:7f:61:a3:65:76:
b7:90:9a:d8:17:bd:43:40:37:6e:59:72:07:55:bb:
55:3e:39:f5:fb:30:9a:1c:63:f5:03:fb:62:65:ee:
73:3c:e0:ae:85:eb:91:96:ab:e8:3c:b4:d0:86:a7:
17:2c:1e:dd:79:b6:5d:31:11:84:3f:0d:51:5a:84:
5b:75:bf:17:a5:17:ea:f8:8d:72:c0:78:c9:f1:8e:
66:e3:7f:6b:99:88:99:13:a9:79:d7:da:c3:ee:03:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:F0:3C:67:92:A5:A8:9E:CC:E8:7C:E3:97:15:E3:97:7A:42:7B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hTHwPGeSpaiezOh845cV45d6Qns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:51:21:ce:62:37:09:fa:a0:0f:55:c9:5c:1c:c3:34:c9:7b:
aa:d7:49:35:45:e8:f6:98:6e:0b:32:e2:c5:27:4f:86:15:31:
e0:c6:af:29:f3:99:ca:d2:cc:bc:64:e0:5c:e5:90:39:63:3d:
f0:3b:da:72:bb:13:ef:59:c5:ef:76:82:d5:fc:02:af:5f:f6:
f9:1e:41:80:b8:a4:ab:8e:dc:b8:96:5b:b2:aa:7e:33:e6:94:
d7:c0:34:d6:26:c0:ea:48:50:13:a3:49:d1:4f:a0:e5:23:56:
a4:08:05:ef:4c:c6:b5:ce:11:6a:2c:92:f8:0d:48:51:1a:f0:
c0:e2:8e:82:fe:dd:4b:da:9c:bb:54:60:85:0e:56:89:e6:93:
ba:45:23:29:ee:f9:19:13:c8:6b:d7:9d:18:40:c3:5e:ba:3b:
fa:5e:be:ec:1f:35:34:b7:8c:0d:f9:a6:1a:ad:ab:f7:0d:f9:
5d:0b:15:f7:b6:04:fb:71:8f:0f:d8:ba:c5:af:52:24:44:67:
41:d9:3a:cf:1f:91:d4:c4:ce:b2:d4:93:73:b2:d1:e1:fb:7b:
c3:a2:84:59:4e:45:de:90:9b:7b:97:3f:40:b2:13:d7:40:61:
6e:04:e8:98:d4:a3:b6:1e:94:86:d1:b6:24:47:a1:d8:5e:60:
b1:3c:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:38 2025 by rpki-client