Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HDJi9vaNM7OqOhB2PCFnyvCUNaQ.roa
File: HDJi9vaNM7OqOhB2PCFnyvCUNaQ.roa (raw, json)
Hash identifier: HlsTm4nuC0Wv0eKtkLKFhjjh9dsPwEX7StlGi3sXWNE=
Subject key identifier: 1C:32:62:F6:F6:8D:33:B3:AA:3A:10:76:3C:21:67:CA:F0:94:35:A4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019680DD529C0650D5C8B0010D05EB8C00C9
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HDJi9vaNM7OqOhB2PCFnyvCUNaQ.roa
Signing time: Tue 29 Apr 2025 09:25:10 +0000
ROA not before: Tue 29 Apr 2025 09:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/24 maxlen: 24
85.92.125.0/24 maxlen: 24
85.92.126.0/24 maxlen: 24
85.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:dd:52:9c:06:50:d5:c8:b0:01:0d:05:eb:8c:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 29 09:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3262f6f68d33b3aa3a10763c2167caf09435a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:68:c2:32:3a:74:b7:69:fa:c4:bc:94:a5:
eb:c4:f5:bd:4f:4f:ee:9a:9f:8d:37:23:26:9e:d8:
3b:29:9c:45:7a:17:23:d0:32:be:6f:ad:9a:e3:12:
ef:4c:fb:4a:c9:8a:fa:0f:32:da:fb:9f:44:01:56:
c8:64:6b:4b:ad:f0:e7:ff:cf:59:3e:59:3e:3f:d7:
5a:9b:3b:f2:aa:ed:9b:ad:38:07:0b:df:60:ac:c5:
7f:b6:cb:e6:6a:da:84:21:a2:6f:f9:5d:45:5a:36:
df:09:5a:1c:dc:ff:a1:bb:e5:53:dc:04:60:2e:c7:
4d:a1:0f:c9:19:31:dd:11:49:62:07:c7:77:2d:20:
68:f0:3e:50:24:a7:f3:cb:a5:6a:77:c3:60:27:11:
b2:5e:5c:93:47:43:16:57:68:d1:ed:9d:f2:6d:07:
2f:0f:fd:90:c1:e6:ff:9a:7c:7d:2f:fb:61:de:75:
6d:28:7d:c1:fc:a4:ea:0f:9a:9e:c9:08:1f:48:41:
5a:85:66:f7:dc:00:6f:18:9a:3a:0a:f9:7d:0e:8c:
17:2d:3f:ea:bf:66:b7:36:a9:72:1e:df:73:4b:87:
19:26:80:60:7a:5a:70:b9:57:57:b9:ac:3a:69:db:
d9:16:b1:dd:03:a8:d4:64:ce:fb:6e:37:d2:51:8f:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:62:F6:F6:8D:33:B3:AA:3A:10:76:3C:21:67:CA:F0:94:35:A4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HDJi9vaNM7OqOhB2PCFnyvCUNaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:d7:5c:a5:d5:fa:41:62:48:25:0c:1a:18:44:b5:1a:e9:b2:
6f:80:28:91:0a:47:ee:fc:78:c8:ca:51:02:b4:93:9a:d7:bc:
c6:7b:f9:a4:9c:8e:3e:dd:e1:4c:36:69:69:18:57:ea:60:b3:
32:83:a1:1e:9d:dd:97:9b:ca:14:ad:81:3f:4c:d2:66:05:88:
6a:90:5d:bb:01:16:60:d1:0e:ea:50:f9:8d:fd:a7:65:59:47:
5b:39:7c:b3:e9:e0:43:9e:dd:0b:18:e0:76:f7:08:5f:30:9f:
ff:f6:25:0d:79:2b:71:7e:50:13:78:a2:7e:b2:fa:3e:69:d6:
6c:38:c4:9b:d9:02:ec:9d:98:1f:8e:5c:df:b1:97:b8:e1:c8:
b8:70:80:a6:ad:04:7d:7a:45:b6:64:df:dc:00:96:28:1d:b6:
15:2c:01:56:5f:e5:a5:26:e0:66:ff:47:75:64:a1:35:cc:78:
22:ed:07:1a:94:23:76:08:26:ee:2f:6c:05:06:8b:37:e0:71:
4c:be:8e:86:f7:aa:b0:9b:59:e7:4a:5f:c0:3c:e9:bf:7b:da:
f8:06:aa:c7:78:ae:ef:9a:2e:6e:45:62:23:47:56:59:ad:e8:
af:d9:53:9a:e9:bc:e8:f8:5b:4f:91:71:b3:0f:0a:d6:0c:c2:
c7:fb:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:01:09 2025 by rpki-client