Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/hmC9MAuZ5kgPbA1CQDROjstXo9U.roa
File: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (raw, json)
Hash identifier: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=
Subject key identifier: 86:60:BD:30:0B:99:E6:48:0F:6C:0D:42:40:34:4E:8E:CB:57:A3:D5
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019423D6D23CAA6556B7B2376867DE049CFC
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/hmC9MAuZ5kgPbA1CQDROjstXo9U.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60717
IP address blocks: 185.30.224.0/22 maxlen: 22
2a04:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d2:3c:aa:65:56:b7:b2:37:68:67:de:04:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8660bd300b99e6480f6c0d4240344e8ecb57a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:12:f4:29:a9:5c:39:41:78:98:b2:e2:cb:
11:e1:d5:f3:d2:23:94:f4:eb:44:8b:9d:96:50:b1:
c4:fd:4a:d8:c5:d1:09:89:f6:39:87:48:7a:85:51:
8b:68:70:aa:f1:e1:ba:f1:85:4f:fc:17:70:a1:d2:
dd:96:78:25:9c:59:3f:bf:3e:9e:82:3a:fd:4c:54:
da:76:0e:96:cb:62:5b:a2:de:fb:a0:db:d8:64:ce:
9f:96:5e:b0:42:73:49:ed:37:15:e4:30:cd:82:ff:
59:41:48:18:60:bc:22:25:3d:7c:e5:7b:7b:a5:19:
38:5a:13:9c:64:a1:58:85:c1:a7:5a:07:02:9e:14:
89:fd:f0:21:f2:ea:13:a3:24:bd:e9:68:79:35:0b:
4e:bd:92:18:26:1a:ff:2a:5d:9b:17:43:96:5f:2e:
c2:41:d5:d1:ad:c3:5e:fb:0e:f8:bd:fe:54:0c:5a:
01:29:12:11:eb:5a:5c:1c:f7:6a:b2:ae:34:59:41:
4b:d8:a0:5f:0c:e1:38:6f:b3:99:02:6e:91:95:b1:
e2:c7:79:1c:98:1b:69:81:fb:7e:fe:64:4c:79:77:
fc:33:e0:33:35:90:33:a0:0f:6d:aa:73:fb:a5:34:
14:c6:a3:3e:31:54:14:40:b6:e4:b1:fd:73:01:ad:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:BD:30:0B:99:E6:48:0F:6C:0D:42:40:34:4E:8E:CB:57:A3:D5
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/hmC9MAuZ5kgPbA1CQDROjstXo9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.224.0/22
IPv6:
2a04:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
b6:31:72:ac:6c:53:27:eb:3a:32:f8:46:58:7a:58:82:96:cc:
1a:f5:8b:34:59:e9:a6:de:4e:0f:b4:02:09:59:4e:bd:86:bf:
93:10:c0:cc:27:b4:f0:0c:bb:af:0e:94:63:e5:51:86:f9:87:
50:df:93:54:e6:c7:f9:7c:22:43:76:c7:c0:f1:06:03:74:e3:
96:3b:f6:bf:1e:f7:5b:a0:f8:ea:d9:d1:92:cd:0b:07:97:79:
9d:b0:d8:ff:0f:c3:a2:0b:66:dc:74:58:f4:5f:fe:c1:7f:82:
be:bd:de:82:f7:09:19:fd:70:4b:3d:b3:6c:b7:52:c5:93:f3:
56:87:8f:14:2f:8f:33:41:38:5f:c9:0a:ed:21:c0:ac:fb:88:
f2:75:8e:d6:df:20:c7:c9:d4:12:88:d0:ad:b3:09:e9:31:5e:
19:72:e8:df:c4:27:65:30:8c:a7:40:23:91:b0:00:71:e2:53:
c3:79:26:7e:8b:24:5b:74:01:ff:6a:d1:57:42:fd:8d:f6:11:
c9:ff:88:7e:1d:07:eb:44:ec:6d:fc:8f:a9:2d:fc:99:64:90:
30:58:dd:c1:a0:4c:b3:8a:36:75:e4:52:82:c9:07:27:d9:51:
d2:45:0e:d9:2a:6c:4c:08:f8:95:ff:a9:3d:4e:4d:c2:06:12:
f7:20:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:28 2025 by rpki-client