Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa
File: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (raw, json)
Hash identifier: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=
Subject key identifier: 1F:17:8C:97:72:3B:7D:60:AB:4C:A0:B7:50:A1:3C:B7:9C:55:D0:32
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 0194266B6D73E067CEBDBF84A9CBA08BF541
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 194.127.108.0/24 maxlen: 24
194.127.110.0/24 maxlen: 24
194.127.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6d:73:e0:67:ce:bd:bf:84:a9:cb:a0:8b:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f178c97723b7d60ab4ca0b750a13cb79c55d032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:a3:57:b4:a5:b5:61:73:13:ba:57:c3:4b:
07:80:4b:6e:8b:e2:d5:05:53:a8:97:72:ce:67:bc:
54:b5:d6:76:46:a3:55:6d:49:c3:09:34:61:b7:20:
a8:be:df:70:ac:6c:bb:57:ed:59:b8:8c:65:98:32:
e7:cc:ff:b0:c3:75:62:88:75:d0:59:4b:92:fa:13:
f4:cb:7d:84:ad:21:74:80:39:07:c7:9a:41:d9:4e:
d8:ab:51:cf:2f:72:96:56:33:ac:30:b8:cd:83:81:
79:ed:15:cc:27:7a:72:8e:7d:99:cd:60:26:58:7b:
11:71:6b:79:f0:aa:eb:67:5c:ce:fa:55:01:8a:3f:
1a:30:62:cc:dd:f2:ae:e3:18:86:61:59:96:e0:bc:
c6:c8:ea:9e:8e:21:ea:6a:e2:9c:db:00:d0:89:c0:
fc:f9:b6:03:e2:41:35:94:32:5a:d7:c8:97:27:db:
e9:e0:19:5e:f4:12:f5:a1:f3:d9:30:ea:5c:1e:61:
8a:d3:95:08:33:e7:74:69:ee:ab:4d:70:df:43:36:
1f:0b:29:6a:d7:1e:0e:a7:f5:19:07:48:6b:ca:b5:
e5:35:30:30:a5:e2:3f:fc:44:b3:53:44:0d:0c:ab:
7a:2e:2b:ec:85:86:94:e0:56:46:09:03:50:2f:d1:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:8C:97:72:3B:7D:60:AB:4C:A0:B7:50:A1:3C:B7:9C:55:D0:32
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/24
194.127.110.0/23
Signature Algorithm: sha256WithRSAEncryption
af:02:cd:48:a2:47:0f:72:2f:54:c4:bc:4d:69:67:97:91:00:
de:ff:4a:e3:fa:f8:d9:8d:d1:64:d2:ad:82:10:b6:16:c1:2c:
a2:db:ae:21:8e:99:74:fd:d8:32:c3:9a:6a:27:ee:f5:84:da:
c8:c6:73:83:1b:6d:71:32:f9:ce:8c:3b:a3:49:71:b9:ab:f9:
79:38:ad:eb:12:ee:b8:82:bf:6c:ad:8e:7e:dc:13:39:d9:d0:
60:1b:9d:c1:f7:8d:1e:4b:8a:be:95:27:bc:dd:b7:d8:39:95:
cf:09:97:3f:11:e2:3d:20:4a:ca:51:71:e3:e9:cc:c2:18:6a:
ef:15:3a:f4:3d:a1:c8:05:36:b9:ac:38:72:70:68:30:83:7e:
f7:a3:a1:9a:87:d0:ef:99:9b:16:26:43:af:f5:8f:65:ea:6e:
cb:f3:bb:92:5c:42:b4:5f:07:58:6a:2f:47:9a:90:39:0b:a8:
6e:26:b2:c4:8a:f1:19:aa:68:9a:c5:78:e0:21:15:3b:45:93:
65:e2:8c:dd:d5:f0:b1:82:af:1e:35:84:d8:f0:7e:d5:5f:5b:
f3:4b:cb:57:e8:49:62:02:dd:3c:a5:43:66:fd:b4:6c:b5:cd:
c0:7c:a4:2a:24:2c:95:2d:f9:0f:3b:3c:1e:89:97:18:42:30:
a9:67:2a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:20:03 2025 by rpki-client