Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/H6AhUHbx8OlryRkBD15AK_97AFI.roa
File: H6AhUHbx8OlryRkBD15AK_97AFI.roa (raw, json)
Hash identifier: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=
Subject key identifier: 1F:A0:21:50:76:F1:F0:E9:6B:C9:19:01:0F:5E:40:2B:FF:7B:00:52
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC57ECEFFEAF0951F50616C7F158D5
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/H6AhUHbx8OlryRkBD15AK_97AFI.roa
Signing time: Thu 02 Jan 2025 07:48:02 +0000
ROA not before: Thu 02 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203918
IP address blocks: 185.117.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:57:ec:ef:fe:af:09:51:f5:06:16:c7:f1:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa0215076f1f0e96bc919010f5e402bff7b0052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:81:99:23:d9:b0:5d:40:13:aa:4d:58:4e:
0b:8a:09:d3:c0:c8:c4:9c:9c:c3:0a:72:fe:6b:47:
02:6f:38:c3:e4:a3:44:12:e2:09:3b:50:0e:1d:9a:
c2:63:da:8c:ee:fe:3e:75:6e:11:7b:a6:3b:ef:a3:
68:df:9c:6c:42:83:a9:c1:a1:8b:cf:53:cb:14:0f:
b1:aa:f8:1d:2f:8e:cd:83:99:7e:a6:fe:da:71:e2:
71:82:7a:b6:e5:dc:03:3e:dc:c2:9a:0f:d8:8c:a3:
14:48:f9:4e:90:71:08:5f:b8:d6:f1:61:33:d3:79:
51:56:20:42:6f:11:c0:3f:a3:16:08:2d:6c:06:de:
f7:1e:28:43:1b:77:ac:6b:7c:52:55:8e:78:fe:41:
20:3e:f2:7b:ff:3e:09:89:d4:38:d9:21:f7:27:9d:
a1:c1:72:ea:af:5c:66:bc:d7:e2:07:94:f1:04:21:
2e:00:ef:8d:bb:37:bf:62:99:f9:43:df:79:32:ec:
2b:eb:c6:6c:b4:cc:53:ad:a6:9c:fc:a9:d6:f2:da:
96:17:cf:c9:e7:ad:c9:f3:31:0b:7b:fd:20:dc:17:
9c:04:4d:c5:2b:3f:18:ff:99:9e:2d:9b:16:70:0e:
c3:2b:aa:6c:a1:dd:98:d3:62:7e:f3:2a:a0:2e:1a:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:21:50:76:F1:F0:E9:6B:C9:19:01:0F:5E:40:2B:FF:7B:00:52
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/H6AhUHbx8OlryRkBD15AK_97AFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.83.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5a:8c:73:6f:1f:f6:ea:6b:0f:10:9e:67:a2:ed:52:26:53:
be:21:8f:71:ab:fb:58:fd:25:07:ae:0f:25:ef:34:b3:1b:ed:
22:d4:c3:3b:48:0c:12:ac:8e:cf:dd:e8:c1:d1:79:41:10:5e:
c4:7d:c0:e0:94:3f:6a:5a:74:b1:fb:3f:b1:ae:43:89:19:db:
42:27:7b:5f:64:a2:97:89:7b:30:16:a9:91:3b:c5:65:43:93:
1f:25:e2:8a:6c:d0:5d:f4:72:15:f3:13:82:27:f6:9b:5e:2a:
35:bf:fd:c9:68:b7:69:31:77:07:f2:90:9f:4a:36:a2:d9:db:
ee:33:3d:f5:12:10:b9:e2:19:83:68:d4:23:87:8a:11:fa:34:
28:ef:48:1f:d3:06:46:07:fd:1c:d8:61:f6:d8:c2:f7:e0:16:
bf:e3:f4:ae:6c:2f:e4:be:9c:39:1d:63:93:6e:53:b7:ad:67:
03:09:d1:18:c7:b6:d9:f9:6d:71:e4:ea:1c:57:c9:7e:06:ef:
87:60:1c:3e:2a:3d:9b:2a:eb:c2:9b:df:64:85:a6:fb:50:60:
c8:0d:a9:0a:9a:88:af:9d:c9:3b:31:69:1c:89:cb:24:05:e7:
e9:17:2a:5c:25:fb:23:12:c2:e4:ae:12:e3:0c:d1:ce:3f:31:
a1:4d:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:35 2025 by rpki-client