Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa
File: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (raw, json)
Hash identifier: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=
Subject key identifier: 1D:61:DD:AF:91:90:0B:F5:57:EE:3F:45:D5:6A:A8:57:46:DD:C1:68
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019421B1DF8C1FC20DDB24FE780B70380176
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 84.239.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:8c:1f:c2:0d:db:24:fe:78:0b:70:38:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d61ddaf91900bf557ee3f45d56aa85746ddc168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:52:da:48:50:fa:68:c6:f4:2c:46:b5:f4:
3c:c4:fa:6e:58:25:27:dc:e5:a6:f2:75:7c:38:e2:
79:36:8b:7e:fd:71:1d:62:02:6d:c1:af:68:6b:ee:
a0:54:14:9c:be:a8:18:9f:a5:ce:fa:93:c2:f3:ce:
47:fa:a7:73:0d:53:f3:c5:e5:3f:63:e3:86:3d:c9:
0f:c4:d1:a3:03:e9:52:c8:48:85:b0:52:1d:35:c2:
76:5f:59:c0:e2:bd:36:4d:4e:8d:1f:10:47:9d:d8:
af:76:6a:c0:e4:81:a2:41:82:d8:ed:65:4b:17:19:
db:57:5b:f1:fb:76:f4:25:e9:5f:0b:ff:27:41:93:
1b:d3:27:3f:01:d0:bb:70:a3:94:dd:05:91:e3:7c:
6b:78:b2:64:16:c8:21:19:5c:ea:0a:ca:cb:d6:47:
47:c9:48:65:2f:e6:23:f6:57:1d:fc:51:69:09:3e:
a2:70:eb:22:56:de:00:86:ed:38:4a:48:61:da:10:
6a:29:60:b6:71:44:cc:77:45:43:4c:81:c5:5a:3f:
6d:ec:57:69:e9:17:40:3a:53:60:4b:75:4a:3a:bc:
63:0c:95:bd:88:92:2b:6c:8e:00:a4:53:cd:1e:28:
2e:a2:b9:20:e5:8c:d9:ac:9a:4e:9e:46:7a:f0:f9:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:DD:AF:91:90:0B:F5:57:EE:3F:45:D5:6A:A8:57:46:DD:C1:68
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.61.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4e:d7:21:36:31:d5:90:83:6b:2b:99:6d:8a:78:ff:13:54:
12:fd:d2:3f:22:5b:a9:c1:fe:8f:04:52:40:20:77:cc:d3:cb:
4e:a6:ab:94:c8:95:75:5f:78:6c:19:16:a3:9a:8a:7b:ce:c1:
fd:9c:a3:66:3a:09:6c:01:cc:4c:66:dc:6a:37:3a:0e:2c:84:
ad:cb:93:44:d0:5b:d8:08:16:79:f2:57:7e:7f:9f:f8:e8:67:
52:ca:04:24:de:b3:78:2e:15:0f:e6:f4:63:b1:ca:f3:35:c1:
68:09:50:c1:13:25:3e:2b:3c:17:41:7d:ba:d7:7f:1c:2e:f4:
b3:aa:ac:56:91:c1:99:72:96:84:e3:86:02:e5:a1:ed:9e:9b:
cf:aa:e9:61:7c:b1:38:37:83:31:00:2e:3e:8d:7f:28:e4:05:
5e:ab:c3:0b:4e:07:07:12:55:39:23:8c:09:ee:d6:5e:aa:54:
7a:fb:de:1c:26:fd:d9:d4:ef:d7:48:1b:b2:57:75:30:42:c7:
b0:96:8c:7e:85:8a:17:33:c5:5a:23:56:32:d1:8c:a0:54:f1:
6c:51:ee:35:eb:e8:9a:98:42:f3:ac:a4:af:f7:0b:26:34:cf:
ba:d9:01:fc:4b:ef:f4:f9:0b:0e:f8:ca:2a:c3:bc:a1:06:d8:
8f:6f:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:27 2025 by rpki-client