Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hABxVjfNOUJpj-z5UorT-xdaa44.roa
File: hABxVjfNOUJpj-z5UorT-xdaa44.roa (raw, json)
Hash identifier: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=
Subject key identifier: 84:00:71:56:37:CD:39:42:69:8F:EC:F9:52:8A:D3:FB:17:5A:6B:8E
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5AEAD90DF426BA3B08162D7D7F63
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hABxVjfNOUJpj-z5UorT-xdaa44.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42878
IP address blocks: 109.160.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5a:ea:d9:0d:f4:26:ba:3b:08:16:2d:7d:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8400715637cd3942698fecf9528ad3fb175a6b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:9e:27:e8:1d:d6:07:26:f5:f0:e4:96:26:
8d:d7:5a:24:49:44:32:f7:0e:1a:2f:d7:d8:7c:15:
fd:5d:72:f7:12:56:2f:db:b4:f9:1a:79:2d:0b:2c:
e9:b0:35:88:d6:01:40:de:0c:62:3d:50:6c:cc:1c:
68:0f:c7:68:f9:53:52:8a:1a:72:65:3c:f1:4c:11:
9b:63:56:49:36:b8:27:e1:85:28:76:bf:06:97:40:
4b:2c:0c:c3:7e:c4:6d:c3:ae:a4:cc:ff:0b:a5:8b:
a6:bb:19:eb:bf:b8:3a:62:90:22:da:54:d7:9f:e0:
0d:ff:1f:bf:20:8f:57:4e:0b:3a:84:42:08:44:73:
9d:d6:ec:fc:1d:4f:b6:77:47:8e:09:27:b2:8e:fc:
58:17:f2:71:1a:18:e8:5e:38:dd:aa:58:59:d7:01:
ab:94:6a:62:1e:1d:65:fd:27:3d:61:dd:9b:97:79:
6c:11:c2:af:8d:60:86:7c:ce:cd:9f:3a:5d:43:61:
d3:dd:19:bc:f8:e0:dd:aa:6d:f2:ec:94:31:fd:48:
5e:f6:14:be:72:e6:f8:05:0b:18:f2:07:22:f3:73:
a3:7a:0b:9d:1e:c9:46:13:8e:47:03:eb:a7:a5:23:
34:a5:10:8c:5f:20:dc:66:2e:e0:b5:20:d4:1a:3b:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:71:56:37:CD:39:42:69:8F:EC:F9:52:8A:D3:FB:17:5A:6B:8E
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hABxVjfNOUJpj-z5UorT-xdaa44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e4:12:07:34:15:93:b9:10:5d:e7:99:a9:b0:d0:71:bc:65:
32:b3:91:29:7e:6a:0c:dc:fd:3e:78:98:65:a3:41:d6:fc:38:
ae:ec:3d:08:b8:b2:81:43:17:a1:92:1b:94:e3:d8:91:70:0c:
a3:af:99:3a:c5:d4:fa:8e:b2:9b:24:ac:55:b8:68:2e:a3:12:
05:da:c6:aa:5c:e8:c3:9d:54:6d:40:41:5a:9b:06:98:b2:a8:
8c:d1:84:59:94:a2:7c:11:40:41:83:57:81:d3:47:d4:32:15:
56:d0:56:d9:73:9e:35:4d:ea:36:97:d1:34:ec:69:e9:b8:11:
54:7c:95:2c:1e:79:1c:29:3f:2a:4e:6c:56:45:cb:e0:00:f3:
80:89:97:54:e7:28:26:13:7a:c4:a3:37:d7:22:a9:8f:90:c1:
9b:4b:65:5d:88:4a:9f:66:23:de:eb:67:64:51:e6:cc:b7:49:
df:ab:7f:0e:b0:b0:b8:ca:9b:37:25:c9:b9:f5:2a:c3:b3:f7:
f4:ca:81:24:d9:79:38:2b:10:da:7c:67:16:60:c0:7c:60:8b:
c6:da:9e:ee:d4:18:96:28:60:6b:62:24:7a:36:49:75:f2:70:
39:9f:57:28:b5:a6:d0:1b:f7:30:55:2f:7d:61:2e:0c:2c:db:
82:e7:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:36 2025 by rpki-client