Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/1MA9viEbnkqns-jv1uGgSDf_hss.roa
File: 1MA9viEbnkqns-jv1uGgSDf_hss.roa (raw, json)
Hash identifier: B67bul7AJskFHt7w3WE7vDo8ygcPvZu9TvB+6EzuGlE=
Subject key identifier: D4:C0:3D:BE:21:1B:9E:4A:A7:B3:E8:EF:D6:E1:A0:48:37:FF:86:CB
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 019630729C6193FBC8CF196C1F6E64834A91
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/1MA9viEbnkqns-jv1uGgSDf_hss.roa
Signing time: Sun 13 Apr 2025 18:38:59 +0000
ROA not before: Sun 13 Apr 2025 18:38:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197846
IP address blocks: 31.222.0.0/21 maxlen: 21
31.222.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:72:9c:61:93:fb:c8:cf:19:6c:1f:6e:64:83:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Apr 13 18:38:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c03dbe211b9e4aa7b3e8efd6e1a04837ff86cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:4d:6a:54:be:06:1f:2b:35:b5:5c:75:f2:
bc:2c:ff:ed:b9:61:4b:4c:b4:f6:6a:41:58:01:85:
23:f3:8d:46:a5:9d:6e:e7:6a:17:f5:2d:63:50:72:
6a:4a:f3:d6:24:da:42:79:96:a1:22:de:af:e4:5b:
cf:6e:9d:52:60:44:40:48:c2:9c:4a:b7:45:d9:d7:
f0:bf:a4:1a:14:04:ff:a4:af:b4:9e:c7:8d:c4:a3:
ab:85:de:cb:04:a6:81:a6:7d:44:be:66:c0:73:47:
03:df:8b:9b:e4:37:35:27:82:a2:46:ff:72:c1:ed:
23:88:87:ed:ec:1a:21:fe:18:dd:c2:67:4f:4c:58:
a7:b9:79:7b:a8:02:c4:fc:e1:22:86:e8:81:7d:a8:
99:62:d6:8b:a0:12:8c:9f:45:9c:82:e3:46:21:ae:
fc:93:08:ea:c9:3a:30:ff:67:b2:66:06:f9:29:c5:
dd:7c:41:ce:56:f0:1e:06:54:6f:e8:d1:ee:8d:e8:
01:97:3a:9c:6b:c5:3d:56:74:0a:49:da:b1:1b:76:
75:0d:69:bc:57:05:66:c1:07:92:27:eb:96:2e:40:
ff:1b:cb:c5:9f:f6:ed:ce:7b:a1:7e:c0:cc:21:81:
71:c3:7a:e8:58:89:9a:5a:2b:b8:b1:ab:fc:68:96:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:3D:BE:21:1B:9E:4A:A7:B3:E8:EF:D6:E1:A0:48:37:FF:86:CB
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/1MA9viEbnkqns-jv1uGgSDf_hss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:8e:5c:4a:61:07:08:9e:64:b4:ea:c4:d6:5b:e3:88:10:cc:
54:d6:bd:61:93:ec:81:2e:80:93:50:8f:d8:72:0f:e6:47:d6:
57:c4:42:0a:04:51:2c:c3:7d:f8:4e:cf:b7:40:b5:02:e8:d1:
29:cd:15:4b:bf:2a:79:25:6e:4a:a6:8c:54:8b:f8:00:f3:65:
70:18:fc:fe:b1:cf:ee:f3:52:85:f1:99:44:81:be:15:ac:44:
4b:d7:1b:b0:f6:38:e1:1a:13:0f:8b:91:2a:48:f3:89:ae:9a:
ce:cd:37:65:ac:a8:dc:00:1e:c5:3a:ce:91:64:37:58:21:af:
63:a0:48:ee:ca:b1:d7:55:cd:4b:03:aa:67:ab:f2:96:f5:38:
46:a6:d0:42:13:f2:fd:9f:27:86:4a:ce:f2:06:6b:a4:5d:0d:
76:55:58:45:58:6e:79:d6:61:d3:fb:e9:4c:04:5f:29:65:0c:
e2:0c:6f:ba:44:f0:7b:76:00:9e:c7:a0:66:36:13:e5:ee:a2:
9a:73:2b:04:34:0d:22:ad:25:1f:56:7b:75:e5:f0:c3:6e:f8:
c7:ad:78:be:1b:f7:22:d7:83:d2:d8:1d:5a:f6:09:31:82:b8:
c8:83:12:1d:1b:a4:87:dc:23:30:0c:70:81:64:1f:01:2d:a4:
13:2b:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:25:56 2025 by rpki-client