Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HenZnS0CmVY7hn37eyjSMOTEV_0.roa
File: HenZnS0CmVY7hn37eyjSMOTEV_0.roa (raw, json)
Hash identifier: PfxRejAdgtPFLBBca+iY/PTmSN+WzJKXlHDCkuanIYI=
Subject key identifier: 1D:E9:D9:9D:2D:02:99:56:3B:86:7D:FB:7B:28:D2:30:E4:C4:57:FD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196356D076E0D99246F3A3DF5058F46838D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HenZnS0CmVY7hn37eyjSMOTEV_0.roa
Signing time: Mon 14 Apr 2025 17:50:59 +0000
ROA not before: Mon 14 Apr 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.9.120.0/24 maxlen: 24
80.253.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:6d:07:6e:0d:99:24:6f:3a:3d:f5:05:8f:46:83:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 14 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de9d99d2d0299563b867dfb7b28d230e4c457fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:99:ae:44:2f:59:95:c9:98:3e:ac:01:fa:
a5:fd:47:1b:63:5f:d0:9c:0a:4b:eb:44:4e:cd:72:
56:af:5e:86:cc:17:32:fe:ae:b0:73:b8:11:2f:94:
91:89:65:fd:3c:af:73:bd:86:80:42:d6:68:85:08:
ee:17:51:07:2b:d4:1f:eb:f7:4d:d1:c3:6f:8c:ee:
a6:d8:1d:8c:e6:10:ed:74:96:67:d3:fb:23:d9:14:
48:c8:37:2c:5f:5b:3c:d5:10:4d:6c:86:f1:f5:ce:
18:a5:47:cf:a9:82:8f:99:22:e9:0e:6b:84:38:2b:
59:04:88:a2:1b:23:0a:30:1e:31:a7:d4:c9:8f:2b:
14:2e:33:4c:df:c6:8d:ec:33:05:13:8c:89:a5:20:
d3:ba:8c:df:b2:fb:27:06:23:35:3f:bd:5e:28:4e:
60:00:e0:de:6a:42:dc:72:67:4c:bb:f0:30:4b:94:
a0:d8:b2:4c:a8:b3:6e:58:d5:e2:9b:a3:b5:f4:14:
0f:3a:64:4d:7a:da:28:25:17:09:6c:b7:f9:c6:72:
e1:69:1d:d2:2e:04:e9:39:7f:9d:79:d3:b7:e9:f2:
e6:03:60:15:40:7d:47:76:d2:49:c4:d3:d8:40:81:
d0:39:a5:9a:8e:e9:0d:83:a4:10:0b:87:96:56:d4:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:D9:9D:2D:02:99:56:3B:86:7D:FB:7B:28:D2:30:E4:C4:57:FD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HenZnS0CmVY7hn37eyjSMOTEV_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.120.0/24
80.253.249.0/24
Signature Algorithm: sha256WithRSAEncryption
85:61:bc:2f:3e:61:37:38:52:58:25:03:e7:7d:62:43:8e:76:
1c:9d:09:c3:d7:b1:ff:81:88:de:de:b7:14:18:66:6f:b1:0c:
bc:80:b1:74:e7:69:ca:a3:e5:13:b9:64:9a:ba:a0:2e:89:9b:
c5:d3:f0:59:43:9f:f8:70:d4:45:dc:da:3c:c7:ac:fb:11:45:
1e:cb:69:7a:45:91:a1:2d:2d:d2:6e:3c:84:1f:f9:d2:ce:f5:
70:55:bd:d2:d7:64:0d:69:94:2b:dd:5e:28:d2:64:70:c7:27:
26:db:cc:14:5a:b3:21:57:9a:d4:05:ad:b2:4d:2b:cf:b7:1d:
d0:20:ef:49:d4:95:e8:d3:6b:d4:97:55:9a:d8:fd:05:dd:ec:
1a:55:61:9f:6d:db:23:f9:5a:80:ea:3c:f2:0d:cc:72:2e:c2:
ed:5f:18:89:ee:17:33:04:21:d1:26:f6:85:9d:42:00:fe:98:
1d:60:f4:7e:1f:e4:26:c1:a9:49:3d:a8:eb:71:71:61:6c:3b:
b1:8f:41:3b:1e:4a:f5:4e:8a:09:40:4b:de:2e:2e:90:31:18:
59:99:7c:bd:66:f6:b4:7b:80:a6:63:87:b4:39:57:c5:09:8f:
1c:e3:74:7c:35:00:eb:f1:82:5c:1f:e2:ff:1e:3a:23:29:78:
4a:2b:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:34 2025 by rpki-client