Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hGyiWQJ2x7Lz-vGMD4VHAnBfCcI.roa
File: hGyiWQJ2x7Lz-vGMD4VHAnBfCcI.roa (raw, json)
Hash identifier: FyG1URSpdZ1nDCEqfEM6nyvdRBJYqN426KFcTgYB3kc=
Subject key identifier: 84:6C:A2:59:02:76:C7:B2:F3:FA:F1:8C:0F:85:47:02:70:5F:09:C2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01953FA1CB235353ACC257058C6B45B7E50B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hGyiWQJ2x7Lz-vGMD4VHAnBfCcI.roa
Signing time: Wed 26 Feb 2025 00:22:02 +0000
ROA not before: Wed 26 Feb 2025 00:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:a1:cb:23:53:53:ac:c2:57:05:8c:6b:45:b7:e5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 26 00:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=846ca2590276c7b2f3faf18c0f854702705f09c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:d1:1a:fb:a4:24:4e:1c:be:26:da:a7:6b:
f9:97:e2:41:5b:3c:a9:e8:c1:54:88:cc:67:2a:84:
20:68:ea:03:db:99:17:4d:02:02:47:de:56:31:6f:
dd:ba:b4:d2:2d:e8:f3:c2:aa:82:ab:38:d4:1d:db:
55:bf:e6:c7:c0:66:7d:5d:6c:81:4f:47:43:f6:9f:
44:29:6c:8a:94:2a:b0:1b:a1:e2:f6:f7:11:02:e3:
a9:ca:ee:69:22:48:62:e6:f6:4f:d4:ee:81:34:8f:
73:a3:08:cb:43:61:4d:45:65:5c:f4:c8:3d:06:d7:
ec:27:b0:f3:3e:3b:62:1a:d5:78:3a:06:8b:75:4f:
34:f3:3f:ce:46:6d:93:e2:0a:b1:a6:04:b8:7c:ff:
bc:fa:54:7f:6c:14:1e:72:46:71:07:e8:86:05:25:
3b:e4:71:15:b2:2f:7e:78:63:ce:1e:5d:84:d5:08:
ad:f4:aa:d6:84:fb:cd:b8:4e:69:19:04:6c:d1:8d:
ea:e6:76:ff:45:43:37:9d:dd:69:0b:1a:3a:31:1d:
21:0a:87:ab:a3:e5:d5:a0:82:f9:f8:42:40:e9:72:
62:a0:bf:e0:24:86:92:5d:6f:21:26:d1:c7:d6:9b:
05:78:2e:31:6d:ef:37:85:22:8b:eb:b8:d5:05:34:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:A2:59:02:76:C7:B2:F3:FA:F1:8C:0F:85:47:02:70:5F:09:C2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hGyiWQJ2x7Lz-vGMD4VHAnBfCcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:10:cd:78:16:c4:14:86:8d:d6:4e:34:89:53:95:8a:50:73:
6e:8a:67:7a:0e:b0:e9:74:f4:18:9a:9f:ca:58:53:d9:fd:e7:
2c:56:b8:0b:0f:f7:cb:a8:29:33:9c:e8:30:78:96:ee:59:0a:
e1:fa:4e:fe:4b:f2:3c:b9:40:23:72:25:97:3f:6d:27:18:53:
6f:f6:d7:1c:98:27:aa:82:d5:71:11:73:26:f6:6f:a9:9e:e9:
a5:da:7d:a6:df:5b:1a:85:73:f2:65:91:d0:15:b6:10:10:08:
be:a9:2d:d6:c1:2e:ab:5a:b3:1b:11:ba:61:58:67:30:b7:d1:
a3:bb:2a:19:2a:a4:0a:e7:ce:d6:6f:f4:e9:51:83:29:0d:ca:
18:88:69:ef:d2:64:f5:8e:fc:4a:34:82:14:85:81:57:50:1c:
39:93:13:bd:73:57:5a:f9:25:68:1a:23:02:bc:b3:5a:b6:a5:
80:0a:9c:32:59:ca:46:67:86:19:f7:f6:23:54:94:dd:cf:5e:
95:7d:47:a7:87:3e:0f:fd:c3:19:a3:9f:8a:38:71:b9:26:02:
48:f3:8b:18:6d:99:4b:df:e9:0d:55:2f:08:d7:05:4f:32:4b:
8b:cf:25:fd:46:d8:e2:ff:d9:72:61:97:51:ca:83:4f:08:6c:
c2:fa:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:52:34 2025 by rpki-client