Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/hH1lu6qi54xeYgPUuzVlSLVdXOk.roa
File: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (raw, json)
Hash identifier: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=
Subject key identifier: 84:7D:65:BB:AA:A2:E7:8C:5E:62:03:D4:BB:35:65:48:B5:5D:5C:E9
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 019426D9E239AF0C18882D6A067ED12AFF1C
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/hH1lu6qi54xeYgPUuzVlSLVdXOk.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28933
IP address blocks: 195.47.197.0/24 maxlen: 24
212.101.128.0/18 maxlen: 18
2a00:1368::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e2:39:af:0c:18:88:2d:6a:06:7e:d1:2a:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=847d65bbaaa2e78c5e6203d4bb356548b55d5ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:bb:1b:9b:f7:f0:59:d4:34:ab:99:e5:e5:
0e:54:c1:b5:f5:31:c0:3b:c0:5e:44:7e:19:f9:53:
f6:9a:a9:91:84:3b:ec:bb:48:19:79:c0:ac:ec:16:
62:d7:7c:b5:7c:06:99:3f:f0:a3:7d:be:d1:b8:89:
3d:6f:18:96:e1:02:78:5d:30:ba:c0:f0:f2:bd:73:
8f:c6:f7:e5:ad:82:11:a6:b9:64:fd:87:89:16:25:
af:c1:36:1a:48:f0:c4:99:70:a3:32:b5:3c:a2:7c:
e5:78:0f:d6:35:03:da:42:b6:6a:eb:76:5a:3c:7a:
0b:b7:a7:74:8a:c4:88:29:12:bf:40:b2:b0:06:de:
24:db:b3:29:fa:0f:86:e3:18:c2:74:70:be:f1:3d:
92:4d:73:e9:44:83:31:d5:84:b2:7d:9a:54:b7:24:
3a:28:84:83:f4:36:0a:4c:28:16:14:f0:d5:bd:bf:
7f:eb:38:45:c3:7b:c9:d5:ed:0d:ee:ce:c6:3e:d7:
4e:8f:cf:58:b7:10:1a:d1:da:42:6f:eb:8b:85:94:
ab:a9:f2:92:7b:98:a5:ff:85:2b:e3:41:5e:69:70:
65:ed:47:79:b0:71:a4:4c:a8:8a:63:62:cb:c2:79:
a1:40:50:4f:51:6e:74:b9:c6:9f:b3:b1:d6:99:ec:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:65:BB:AA:A2:E7:8C:5E:62:03:D4:BB:35:65:48:B5:5D:5C:E9
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/hH1lu6qi54xeYgPUuzVlSLVdXOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.197.0/24
212.101.128.0/18
IPv6:
2a00:1368::/32
Signature Algorithm: sha256WithRSAEncryption
ae:86:98:be:5a:0c:51:a4:34:81:68:c6:b3:65:33:84:e7:04:
ef:c3:0f:d6:ed:ec:3a:ce:70:b1:84:f5:31:99:94:cc:92:17:
f5:65:8a:c9:18:a5:d6:9e:ba:6a:a5:ff:00:bf:80:f3:80:43:
3a:42:c7:d8:e8:9f:f1:06:5f:dd:ea:7c:ce:97:28:2b:56:14:
4b:d0:0e:bd:74:f3:d0:e1:38:8c:4f:09:a5:35:ff:e7:1e:20:
51:37:91:75:fb:90:fc:cb:2c:cc:1e:9e:72:f7:fd:71:3d:a1:
3f:cf:40:83:ed:56:f1:0c:e4:b4:56:f3:14:6c:be:ca:c0:e2:
55:f5:ee:2c:28:c4:d5:ba:31:fe:01:a6:33:de:68:8d:08:9f:
d1:b7:d9:08:c3:19:7b:dc:7d:b7:cc:bc:2d:85:c4:d3:61:28:
c6:f1:78:13:71:07:09:17:37:91:03:1d:f1:1a:90:22:cb:d6:
03:cc:8d:14:4b:fc:7d:ff:bd:3d:5f:da:73:2a:27:9a:b9:10:
77:f2:fc:8b:e7:35:f5:97:fe:90:b0:51:65:85:7d:a5:06:ac:
db:21:ef:6c:25:1d:f1:11:76:dd:b1:d7:bd:82:86:be:43:52:
15:a1:88:de:e4:b2:ef:2f:86:96:31:b2:88:ec:61:7c:04:e8:
cc:da:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:51 2025 by rpki-client