Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/HBHAqT8jajsD1nwf_6k2IJVgvHo.roa
File: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (raw, json)
Hash identifier: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=
Subject key identifier: 1C:11:C0:A9:3F:23:6A:3B:03:D6:7C:1F:FF:A9:36:20:95:60:BC:7A
Certificate issuer: /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial: 01942220281B8941CDF6B92E2A5439860962
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/HBHAqT8jajsD1nwf_6k2IJVgvHo.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48653
IP address blocks: 91.209.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:1b:89:41:cd:f6:b9:2e:2a:54:39:86:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c11c0a93f236a3b03d67c1fffa936209560bc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:09:e4:4b:f5:88:c6:95:20:75:f3:5f:8b:
23:f0:03:74:83:b5:cb:1f:a6:5c:31:18:b8:d3:a2:
63:14:93:2e:84:2d:2a:cb:35:40:56:5d:1b:70:b3:
b4:17:30:45:4e:c3:97:91:dc:d0:75:1e:07:da:80:
13:1d:91:88:99:87:45:74:03:ae:27:3a:6f:2e:82:
a0:fd:52:08:4d:18:56:0b:cd:be:a3:f2:db:e7:9e:
d8:4d:aa:66:52:f9:1d:5d:37:4f:0f:c3:97:b8:29:
36:e7:4f:5b:c1:b1:4f:35:3b:ab:4f:57:06:b4:0a:
c0:0d:4f:78:d7:32:8f:9b:58:92:3b:9a:31:8b:17:
05:03:61:da:c8:f2:8a:3e:21:3a:bb:4f:1e:28:0e:
35:3f:f9:ab:76:67:ca:35:8f:d7:4c:31:92:5d:67:
eb:a5:87:ce:3d:d7:bb:e2:1c:ee:a6:be:1b:12:9f:
cb:66:76:4c:f0:db:a2:90:b6:ed:bf:00:40:ea:34:
b3:de:0d:c4:c2:fb:d5:ca:7d:79:8c:67:7e:fa:8d:
ef:6c:f9:4b:b6:a9:cd:ea:e0:71:a9:ba:53:d5:ae:
18:65:b9:07:7c:e9:76:5a:f3:48:d5:1a:6c:b8:50:
03:ca:be:d0:17:4b:67:f4:42:6f:fe:3e:09:c1:9d:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:C0:A9:3F:23:6A:3B:03:D6:7C:1F:FF:A9:36:20:95:60:BC:7A
X509v3 Authority Key Identifier:
keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/HBHAqT8jajsD1nwf_6k2IJVgvHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.49.0/24
Signature Algorithm: sha256WithRSAEncryption
69:86:cd:73:cc:9f:b8:45:d7:8d:cd:f0:9f:59:41:b9:b9:2a:
a6:96:6f:e6:7b:ed:f7:cc:d7:c1:79:0c:ed:3d:d5:aa:1b:78:
6d:73:af:c1:2d:37:ba:93:c8:64:d4:01:fe:e7:27:5a:63:79:
a6:d8:05:79:33:9e:b4:f0:0c:b9:e0:d9:c0:37:c7:1d:a7:a0:
d0:6d:f9:da:f5:d6:5e:0e:07:ed:04:74:ab:9b:68:ae:f5:4f:
2c:50:83:83:bb:19:38:7b:8a:23:e4:28:10:66:c3:da:6b:03:
f4:f4:98:49:32:b2:65:16:e6:b2:f7:a1:28:0c:8f:22:34:d8:
33:ed:dd:93:26:68:a8:39:65:d3:e2:0e:09:1e:93:36:bd:c6:
fd:02:0d:1e:35:64:6f:9f:41:3c:2d:48:ec:2c:00:87:4a:c3:
9b:5b:c5:e7:ff:5d:2e:c4:c6:6b:33:ca:de:6c:e0:66:9a:94:
76:c1:d5:46:72:98:17:ea:16:d3:39:43:c3:ed:a2:9f:db:7f:
cf:ad:82:bd:03:35:a5:1c:4a:b7:8c:81:01:0c:1f:93:8c:11:
d3:25:34:10:7e:dd:5c:a3:f2:18:58:98:69:8e:5c:77:82:d9:
82:93:fe:4b:f0:01:aa:9c:a6:0d:b2:f6:1d:62:a1:a7:61:c6:
41:95:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:39 2025 by rpki-client