Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/hgUVlBMr-3weLeCDxLmYbzcEvDs.roa
File: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (raw, json)
Hash identifier: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=
Subject key identifier: 86:05:15:94:13:2B:FB:7C:1E:2D:E0:83:C4:B9:98:6F:37:04:BC:3B
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4BB1CF5512CA87C81534B465A1D2
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/hgUVlBMr-3weLeCDxLmYbzcEvDs.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57831
IP address blocks: 2a07:8f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:b1:cf:55:12:ca:87:c8:15:34:b4:65:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86051594132bfb7c1e2de083c4b9986f3704bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:94:0e:ab:14:cc:8a:c3:c3:0c:cc:60:99:
00:0a:c4:d0:01:d2:99:2d:24:28:74:09:a6:63:8b:
89:a9:81:8c:4a:11:88:f7:03:8c:6f:60:68:89:d1:
fc:73:24:62:01:59:76:ad:03:38:9b:2c:7b:f7:c4:
6c:5e:24:ed:39:0c:52:50:95:ac:7c:84:23:72:c2:
5f:55:0d:4e:66:6c:23:25:14:ca:73:e9:60:18:a4:
e5:b6:72:7f:dd:b0:0a:c0:94:ad:33:9b:01:e1:d2:
e5:f7:8f:9d:0a:20:fb:f8:08:f4:5e:63:6c:47:d4:
88:ba:ae:27:a0:13:0f:cf:06:ab:1b:d2:96:23:22:
34:e5:ca:ff:e0:45:02:32:fb:1a:c6:60:e9:2a:cf:
47:36:22:26:2f:17:79:50:c4:c0:b7:01:29:3a:12:
30:8a:60:59:75:26:a3:19:0c:6d:54:b3:ba:8f:0f:
eb:33:b4:72:97:64:5b:36:66:c0:ad:4e:a9:7c:c5:
74:64:81:c0:4f:88:be:30:7f:73:59:42:5c:c5:fb:
d2:63:62:1d:93:81:df:94:d3:30:eb:d7:a5:18:60:
23:83:4e:67:1e:b1:ad:b0:e2:a1:4b:82:3c:44:ee:
a6:39:ee:9a:92:a8:73:58:99:c3:3e:94:7c:5d:c9:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:15:94:13:2B:FB:7C:1E:2D:E0:83:C4:B9:98:6F:37:04:BC:3B
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/hgUVlBMr-3weLeCDxLmYbzcEvDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
82:68:b3:fa:ff:ff:4c:17:1d:22:64:1e:3a:71:42:84:56:b3:
05:01:b6:40:aa:26:2e:7e:f0:97:00:fd:78:30:02:52:ff:96:
d6:b0:89:76:ff:a9:d8:3e:c1:90:47:96:54:a7:67:a5:bd:24:
5e:fa:81:62:62:92:19:e4:58:05:d1:5d:d2:63:d8:54:3c:52:
70:fe:f1:70:78:c6:be:f3:9c:52:80:75:42:8c:2c:0a:ee:1b:
ce:a3:14:52:ba:8b:e7:24:87:17:10:3e:31:c5:f6:7b:45:ef:
fd:c2:fd:5c:7c:53:48:34:b9:97:e2:22:6f:80:6d:d8:6a:a2:
19:ea:cc:7d:1d:15:dd:51:b9:64:3b:2a:78:e6:91:94:2a:e0:
df:4e:34:ad:24:2a:58:75:69:0d:d5:05:c6:60:28:27:e7:42:
42:35:4b:ea:11:97:15:e7:0a:9b:40:f8:a3:c0:5e:ad:8e:09:
34:83:e4:36:aa:59:01:cb:17:ef:d5:72:57:1a:6c:fe:3a:41:
e6:bc:34:07:ef:a6:36:89:18:b9:9b:9a:c1:35:b4:b7:0b:43:
8f:0d:55:38:13:5a:d5:f7:80:86:ef:9c:cf:d5:53:08:21:f2:
bc:4a:ed:c8:5d:8b:0c:27:50:f4:52:21:f8:f0:60:70:db:ad:
32:b1:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:19:38 2025 by rpki-client