Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HvSVXhPs1uFHxoUPxZcIcCkPSU0.roa
File: HvSVXhPs1uFHxoUPxZcIcCkPSU0.roa (raw, json)
Hash identifier: FIosMX9YaR85TwFDWabt+KnXwrRjnam0d22QlJu4BoU=
Subject key identifier: 1E:F4:95:5E:13:EC:D6:E1:47:C6:85:0F:C5:97:08:70:29:0F:49:4D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01966D05FAE8489A1F2E7A72EA16C28B9D7E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HvSVXhPs1uFHxoUPxZcIcCkPSU0.roa
Signing time: Fri 25 Apr 2025 12:57:10 +0000
ROA not before: Fri 25 Apr 2025 12:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51659
IP address blocks: 194.87.68.0/23 maxlen: 23
194.87.70.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.196.0/23 maxlen: 23
195.58.48.0/23 maxlen: 23
195.133.5.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:05:fa:e8:48:9a:1f:2e:7a:72:ea:16:c2:8b:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 25 12:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ef4955e13ecd6e147c6850fc5970870290f494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:24:80:57:fb:1d:02:68:ad:88:5c:6a:3e:
c1:5c:63:b1:fa:23:a1:24:e0:e3:c8:be:83:e3:94:
9b:74:af:49:1c:ce:9e:c3:2f:d4:6f:dd:4c:8b:6c:
3a:61:a2:b5:b7:78:ae:06:98:70:bc:cc:03:b5:fd:
5d:2a:a8:96:8b:9a:bf:da:d1:10:a5:cd:65:58:90:
69:01:88:cd:17:a5:eb:51:7e:25:75:76:89:06:87:
04:01:2f:d2:93:f7:44:37:b6:48:3a:4b:6a:ea:4f:
17:f5:81:08:d3:28:43:35:cd:6d:df:b8:9d:92:28:
46:ea:d7:81:69:3f:13:5d:09:d0:bd:33:c9:46:26:
86:60:48:52:c9:5d:1c:78:6d:27:92:9f:dc:e8:97:
db:dd:d0:35:9e:fc:51:da:7c:b4:c5:b2:c0:c9:ac:
d1:8b:7e:1a:67:f1:47:48:48:23:fc:36:2f:84:7b:
40:81:f4:73:f3:80:0c:66:db:28:5e:9c:9a:ce:bb:
4a:41:54:75:d0:04:48:7e:50:cd:6b:4b:29:ee:d0:
6c:f3:b3:2a:77:cf:25:10:70:5e:50:ca:36:e2:0d:
78:a0:04:ac:7e:9a:46:75:87:5f:8a:8c:9e:17:ab:
87:37:ef:d0:e1:d3:4a:8b:ea:c2:96:71:c1:27:76:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F4:95:5E:13:EC:D6:E1:47:C6:85:0F:C5:97:08:70:29:0F:49:4D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HvSVXhPs1uFHxoUPxZcIcCkPSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.68.0-194.87.70.255
194.87.106.0/24
194.87.196.0/23
195.58.48.0/23
195.133.5.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:29:37:0c:d1:92:65:21:fb:ec:6f:10:74:64:02:b5:fe:c7:
da:dd:73:0a:9f:90:a1:71:b6:b5:76:7a:7d:5d:9c:28:ef:7c:
aa:f4:c5:41:d9:7e:d0:81:14:bb:ff:38:f5:df:a4:30:6b:24:
b0:86:9c:91:7a:b8:53:b3:c6:4e:70:11:65:f6:8f:ef:d4:6c:
f4:06:72:2d:51:31:3d:f7:71:ab:7e:cb:c0:38:25:a5:4d:2f:
86:76:34:dd:d5:a1:94:12:cc:64:e2:5e:56:e4:91:7a:c8:c4:
31:06:8a:9c:29:cf:66:fc:2e:68:c2:4d:c6:18:f3:4b:ba:ce:
eb:8a:ee:e3:09:52:6d:8b:bc:b3:44:2b:1c:88:af:1c:f8:8e:
f3:65:7c:ce:71:48:40:35:78:aa:09:a5:c8:15:41:02:6c:5e:
47:2b:fd:17:1c:83:bc:cd:08:92:a5:e5:44:3f:53:9a:ec:dd:
15:b3:74:01:7e:ab:6e:20:72:ff:a6:89:c5:36:4e:cc:de:b8:
d6:0b:d6:a8:48:cb:a3:68:9f:88:a1:ce:1f:f4:c8:66:02:fc:
8c:7a:9f:5b:1d:5f:1e:f3:52:76:c0:b0:29:6e:b6:07:0c:a4:
80:0f:ee:65:2c:b0:48:c5:89:bc:11:df:dc:db:91:aa:21:29:
36:25:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:01:01 2025 by rpki-client