Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hqcWZscvMvxfFB8QI_S-D4mwSnM.roa
File: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (raw, json)
Hash identifier: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=
Subject key identifier: 86:A7:16:66:C7:2F:32:FC:5F:14:1F:10:23:F4:BE:0F:89:B0:4A:73
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E3502A291D7DA3E2563B1AA926EB
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hqcWZscvMvxfFB8QI_S-D4mwSnM.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210530
IP address blocks: 164.215.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e3:50:2a:29:1d:7d:a3:e2:56:3b:1a:a9:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a71666c72f32fc5f141f1023f4be0f89b04a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:19:88:6a:5d:84:a1:c1:97:bf:2c:9b:cd:
24:48:6c:b3:2b:56:49:dd:ef:8f:ab:6f:f4:f0:17:
a1:fc:92:9a:cc:18:41:7a:f0:83:de:18:4c:7d:86:
81:9d:ca:90:0b:37:21:7b:61:fa:5f:2a:99:5d:d3:
d0:dc:89:73:ec:af:4f:74:f0:19:15:41:18:38:09:
4c:8e:c7:b9:45:a0:c8:fa:84:ba:e8:91:21:6e:e5:
03:8e:4d:52:30:6e:5e:a7:5d:00:19:da:66:43:77:
3c:c3:46:4c:6e:2a:11:4b:72:0e:b9:46:7a:bd:1a:
0e:92:d3:00:f3:00:65:c2:b3:e6:7f:16:57:ca:12:
56:b4:72:69:70:a8:b0:27:53:c2:75:31:2e:1d:fc:
10:e9:62:86:97:e8:9c:41:10:0b:34:55:29:26:64:
c1:08:b2:fb:d9:da:0e:9c:a0:e6:4b:8b:f9:4e:64:
f7:5a:f5:a0:7e:12:46:b6:55:e2:04:25:b6:15:48:
f6:c0:2e:d3:3e:b7:21:58:13:7d:5c:f4:0d:93:b9:
4c:78:4d:a4:bf:a0:11:c6:5c:ff:a8:25:18:1b:42:
64:7f:2c:84:86:17:0b:16:a8:57:c9:ee:2b:35:b8:
82:ee:01:cd:27:ea:e8:39:5b:c1:01:64:ee:a3:e0:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:16:66:C7:2F:32:FC:5F:14:1F:10:23:F4:BE:0F:89:B0:4A:73
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hqcWZscvMvxfFB8QI_S-D4mwSnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:05:8f:96:ba:c4:1d:71:e9:29:f0:5d:51:a0:f6:68:bb:6f:
33:67:6a:4a:e1:be:82:8f:7d:1c:f6:17:8b:77:c8:aa:a5:6a:
0c:ab:b0:23:41:1d:e7:a0:e4:fc:e5:42:95:56:dd:88:02:98:
1a:0c:57:90:65:c5:e8:61:e3:58:d9:25:68:43:5c:2a:3a:49:
9f:ac:c0:91:1e:55:4b:95:21:34:2f:41:c9:b8:24:f3:f6:29:
a4:f7:04:d7:3d:5b:68:97:e8:09:13:c0:ac:8c:bb:61:bc:dd:
3a:da:17:7c:9a:b8:4f:7c:43:d6:73:ab:7b:a6:10:a7:f2:58:
13:cd:58:4e:26:8c:b9:1b:3a:87:b0:d7:7b:76:fb:f0:09:59:
c8:d8:91:b5:6a:a9:0f:c6:b0:ee:07:f5:2c:8d:2f:ab:55:fe:
42:7c:a4:43:86:f5:b7:00:72:04:eb:5e:71:ad:03:46:cb:a6:
4a:11:9b:6c:da:87:74:d1:19:dd:eb:d3:ce:27:b3:68:04:a8:
69:e7:e3:2d:7d:42:0a:21:25:7d:4f:4b:19:37:96:ce:31:1b:
6e:a1:a8:17:d2:9b:72:04:0d:b2:9e:2d:e9:cf:10:3b:8f:21:
cc:54:5c:52:20:77:23:77:45:72:4e:4c:cc:62:7b:8d:22:93:
56:4c:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:00 2025 by rpki-client