Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa
File: 1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa (raw, json)
Hash identifier: GLjRp44S9t7k9/gNlz4F+5PxTttEffZtUX3wedwaMj4=
Subject key identifier: F8:73:EC:21:A3:A7:0B:A3:85:76:2C:90:6C:F0:95:4C:0F:56:2C:C6
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 019422FB36A3D073641430211114CD810B25
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa
Signing time: Wed 01 Jan 2025 17:47:56 +0000
ROA not before: Wed 01 Jan 2025 17:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197705
IP address blocks: 94.26.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:36:a3:d0:73:64:14:30:21:11:14:cd:81:0b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 17:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f873ec21a3a70ba385762c906cf0954c0f562cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:08:f6:ae:7f:88:78:1a:9f:b0:bb:41:be:
3b:b7:9f:d4:a7:12:53:ce:7e:57:88:f5:8a:bb:28:
92:34:f3:5c:d5:25:17:dc:93:6e:3a:2e:0d:b3:c2:
07:c3:9c:11:a1:82:e5:56:b2:4e:1f:e0:2c:29:f7:
ea:bb:0a:9e:00:4f:a1:09:b4:e1:28:a1:4a:79:09:
be:72:ec:a9:96:07:74:7f:0d:e3:ea:3d:89:c0:26:
73:77:00:ea:48:a6:10:fa:9b:09:8a:15:f9:10:6f:
b8:5b:fe:e4:25:26:7a:a6:4a:1b:e9:fa:8b:2d:9f:
d3:e6:d0:2a:a9:0f:4c:ae:89:64:6c:ea:16:8a:c9:
a8:ec:a0:55:c3:a9:3c:31:0c:30:e6:3f:e3:52:30:
d9:da:6d:b4:73:8d:d6:ec:ba:14:cb:cf:fc:f3:d4:
49:44:a5:27:c4:f8:de:71:e6:21:bc:d7:ed:63:eb:
39:71:2b:0c:bd:e4:9c:f6:59:fc:ac:4c:b7:a8:26:
c6:a4:77:b1:07:17:41:d4:4d:0f:76:f6:50:05:7a:
f4:8b:08:e6:b8:04:21:45:f7:21:88:30:9d:b9:5b:
65:f0:ca:68:78:b2:d9:4b:c0:87:3e:bf:98:6e:26:
13:13:b5:85:f7:1c:66:44:0d:d4:fe:79:0c:dc:94:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:EC:21:A3:A7:0B:A3:85:76:2C:90:6C:F0:95:4C:0F:56:2C:C6
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.38.0/24
Signature Algorithm: sha256WithRSAEncryption
63:34:42:1f:89:2d:6f:21:32:db:7b:d7:56:45:d7:b8:11:7a:
35:8e:12:06:2f:34:cc:ca:47:7e:46:45:52:72:62:11:69:61:
87:35:c1:30:45:3f:b9:9c:dc:a3:47:c6:8e:15:3c:07:7f:2e:
bb:48:48:56:80:36:13:32:50:65:06:0d:b1:ba:4a:75:13:51:
83:ba:88:17:4b:ee:fe:2b:f8:36:de:1e:25:be:62:96:8e:6e:
ab:99:a3:76:aa:b8:e7:52:8c:bf:7a:f4:fe:a5:87:de:23:b5:
f1:c5:bb:dd:b5:e8:b6:a6:aa:e4:b3:98:92:6b:ee:bf:e5:61:
da:f3:1f:3c:bb:18:5d:7c:48:56:9f:9d:12:25:31:5c:cc:22:
78:87:e4:5e:77:a8:8c:bc:43:24:91:5f:19:92:32:c2:1a:4b:
79:c2:fd:2f:a2:5d:4d:e2:81:ab:7d:7b:6a:6b:39:dd:90:f6:
61:f4:cd:17:5d:38:d2:c9:6d:0b:9c:68:8f:6a:95:3a:06:d7:
cf:1e:cd:6c:04:f7:1e:e8:33:d4:5f:e8:b6:d4:25:42:74:d3:
1f:71:b3:58:e2:fc:0a:54:c3:d2:f7:b1:12:21:9e:eb:03:f5:
97:06:7f:d0:27:02:94:0c:6b:20:f0:bf:d9:f3:28:59:9b:f9:
b2:76:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:09 2025 by rpki-client