Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/haci0wHWv3PDyudz0_g5F_r8gmQ.roa
File: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (raw, json)
Hash identifier: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=
Subject key identifier: 85:A7:22:D3:01:D6:BF:73:C3:CA:E7:73:D3:F8:39:17:FA:FC:82:64
Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial: 019715F56CBAB5D358921DCD2BF592527F37
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/haci0wHWv3PDyudz0_g5F_r8gmQ.roa
Signing time: Wed 28 May 2025 08:14:55 +0000
ROA not before: Wed 28 May 2025 08:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215138
IP address blocks: 193.17.67.0/24 maxlen: 24
2001:678:3ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:f5:6c:ba:b5:d3:58:92:1d:cd:2b:f5:92:52:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Validity
Not Before: May 28 08:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a722d301d6bf73c3cae773d3f83917fafc8264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:9e:19:33:9e:55:1e:5b:6e:17:28:88:50:
5f:04:00:df:9c:b0:5f:6f:74:49:29:11:da:26:be:
8c:dc:03:a5:57:7b:a7:b9:15:b6:35:83:65:23:46:
a9:89:39:dc:2c:98:92:ba:f3:8a:89:35:42:ed:8d:
d1:0b:be:e9:49:09:55:b1:a9:14:31:ce:43:77:0d:
ea:3d:b8:65:03:2d:fc:29:41:e7:6e:b1:1c:a7:06:
af:79:54:bf:9f:f1:00:4f:a7:0d:5a:32:06:61:bb:
a6:53:87:87:72:df:90:ba:c1:43:8f:3a:5b:81:0b:
65:1c:37:97:f7:7b:68:9a:da:48:b8:b7:8c:6b:ee:
ea:24:82:77:8f:89:31:b8:58:ac:16:13:b7:97:01:
67:92:64:31:17:d6:0b:87:5d:d1:9c:a6:6c:ec:d5:
05:9b:a8:af:28:56:07:a7:85:48:11:3c:0d:ec:d9:
5c:a2:83:30:02:76:96:05:05:0d:18:9c:7a:12:e8:
ba:dc:a0:03:17:53:90:c1:ef:2f:c9:d6:b2:25:50:
9b:7c:92:b7:db:45:c0:09:44:e0:f1:15:c1:a5:09:
30:17:e4:a6:fe:b8:9a:dc:0e:1a:c7:aa:0c:95:78:
11:1f:14:3c:a0:3e:f5:22:b8:54:39:7b:5e:aa:fb:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:22:D3:01:D6:BF:73:C3:CA:E7:73:D3:F8:39:17:FA:FC:82:64
X509v3 Authority Key Identifier:
keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/haci0wHWv3PDyudz0_g5F_r8gmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.67.0/24
IPv6:
2001:678:3ec::/48
Signature Algorithm: sha256WithRSAEncryption
1c:00:80:f3:06:65:65:af:1c:e9:b9:b4:f5:3a:b5:08:e8:71:
15:d5:16:cf:d9:ee:3f:67:45:e4:d9:0d:1a:e6:90:53:33:a6:
24:46:b8:76:55:93:7b:d6:64:a2:f8:65:49:94:e9:09:ba:09:
90:d4:16:3e:c3:dd:65:ad:39:94:59:40:3e:d3:94:87:30:e6:
aa:99:d7:e2:4e:3d:3f:d9:69:41:f4:c7:c8:43:73:fa:3d:cd:
9d:cd:2b:ae:58:9b:99:bb:45:21:b9:06:2c:85:4b:96:d1:d2:
07:fa:71:7b:4c:15:fb:c5:c3:cb:ab:27:36:22:a3:05:fb:65:
88:8d:49:81:b2:cf:d3:74:a3:e8:c3:6e:57:73:20:8b:27:2c:
92:e9:27:38:cf:25:eb:7a:f7:32:4c:de:4d:b4:36:e7:06:32:
a8:88:82:0c:4c:5b:8a:a8:57:fa:1e:ad:ad:b6:a0:24:68:b5:
e5:d4:88:c1:fa:4d:5b:1c:3f:c1:a5:7c:1b:55:c7:ce:52:86:
c4:45:84:f3:69:c8:c9:fd:7c:c0:82:db:b8:02:94:92:df:32:
a2:36:3c:6e:a1:4f:dc:91:53:b0:f3:e3:08:60:6b:0c:c8:e8:
70:69:c6:c7:2d:1a:67:94:eb:2c:df:47:fa:26:bc:e0:c2:0a:
d2:cf:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:02:49 2025 by rpki-client