Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/H6gjp969pDik2dbvAHkeDvA39EU.roa
File: H6gjp969pDik2dbvAHkeDvA39EU.roa (raw, json)
Hash identifier: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=
Subject key identifier: 1F:A8:23:A7:DE:BD:A4:38:A4:D9:D6:EF:00:79:1E:0E:F0:37:F4:45
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 01942444F26BEC98DC15A8CCD5CE1AA5675F
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/H6gjp969pDik2dbvAHkeDvA39EU.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42
IP address blocks: 194.0.36.0/24 maxlen: 24
2001:678:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f2:6b:ec:98:dc:15:a8:cc:d5:ce:1a:a5:67:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa823a7debda438a4d9d6ef00791e0ef037f445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:ed:30:13:92:df:94:52:00:5a:fd:7e:c5:
7b:74:fb:bd:e0:93:a6:c3:a8:5f:ce:3f:77:47:f3:
fd:56:8b:36:a5:1e:c8:fd:3c:65:b4:31:ed:0f:0c:
69:31:fa:b2:36:ea:b0:58:4b:e6:8d:0e:e6:c1:08:
17:5b:de:ac:81:b3:67:28:ae:5c:26:cf:a5:50:ec:
26:87:61:26:b5:66:08:69:ce:17:95:59:05:83:96:
3f:c8:21:d2:c0:0a:78:6b:82:75:fd:cb:b1:1d:ec:
81:d0:6d:bd:ee:28:e3:ca:4e:6f:e9:48:83:28:59:
a7:49:5e:29:dd:05:24:22:11:03:80:02:ff:f1:a5:
f7:b6:92:a9:1f:41:da:1e:09:bf:cc:97:f4:17:c5:
c3:30:4a:25:7d:17:d1:13:88:b0:e5:66:e5:79:63:
1c:7e:61:ba:91:54:a2:5d:98:3a:46:4a:d3:0f:70:
8f:7b:f8:bf:2a:eb:9d:d8:56:e1:87:70:b9:f2:dc:
a0:c8:ba:ee:fd:d7:42:98:a5:e9:c1:76:49:01:07:
b6:dc:e6:52:0a:e4:bb:4d:3b:13:11:08:b5:d8:6e:
b7:19:99:d4:11:0b:d3:cb:6b:98:7f:6e:91:24:c2:
6e:0a:39:c8:8d:66:ff:8c:77:c7:7e:6a:55:4c:e2:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:23:A7:DE:BD:A4:38:A4:D9:D6:EF:00:79:1E:0E:F0:37:F4:45
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/H6gjp969pDik2dbvAHkeDvA39EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.36.0/24
IPv6:
2001:678:4c::/48
Signature Algorithm: sha256WithRSAEncryption
63:a3:22:e6:90:7c:2f:f7:20:64:0b:76:a5:23:25:1e:ee:1d:
39:38:2a:a6:40:20:9a:64:16:19:66:92:27:87:15:62:3c:e5:
98:1f:12:24:a9:7b:e6:fd:3f:5b:8e:73:e2:2c:d9:e7:1d:a1:
86:fa:2b:5f:d2:cd:83:c1:cc:9f:4d:de:6f:e2:74:c7:9a:33:
89:f1:c2:53:45:df:b1:a2:aa:a5:19:e4:2e:f8:84:ae:97:95:
44:83:22:61:d4:37:62:2c:47:bd:83:22:a4:be:7f:f2:1a:b9:
02:38:a5:56:51:cd:4b:79:40:97:85:e4:c4:06:df:87:f7:0a:
e5:22:ba:c9:96:11:02:87:92:67:4b:0a:70:a0:e0:6a:c1:55:
08:8e:7b:0c:3e:87:69:4a:0a:10:5c:d4:1b:d9:78:d3:b8:41:
57:27:cb:d6:e5:7c:29:d5:91:79:b8:b2:bb:fc:f9:3c:65:0c:
a8:88:4b:7f:a5:1d:19:39:55:b8:ff:66:3b:79:b4:1a:27:2e:
55:60:5c:85:5d:50:1d:5d:77:67:25:16:64:56:f1:ab:a1:61:
94:e6:5b:9c:0a:24:fc:b7:aa:d5:f8:05:c1:2c:a2:f0:ed:36:
da:73:01:f3:20:5f:27:17:9e:d4:28:10:7d:0f:b4:54:a0:4f:
75:c7:02:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:28 2025 by rpki-client