Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa
File: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (raw, json)
Hash identifier: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=
Subject key identifier: 1D:41:E5:36:24:18:80:9E:10:F1:08:77:B0:00:FF:39:55:C9:06:10
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01942747D3706B938B4E33EAC840F68C8F21
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 81.28.112.0/20 maxlen: 24
82.212.64.0/18 maxlen: 24
185.175.248.0/22 maxlen: 24
188.123.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d3:70:6b:93:8b:4e:33:ea:c8:40:f6:8c:8f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d41e5362418809e10f10877b000ff3955c90610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:f5:ee:0d:3f:33:16:94:a2:5d:2d:da:55:
be:5d:ed:95:7a:42:70:a9:39:7a:8a:ca:c5:87:78:
be:2b:90:1f:7c:2b:ac:72:dc:26:2a:e9:88:23:27:
10:ad:30:95:21:26:00:2c:7f:9f:99:bf:a3:2e:45:
ae:cb:5b:13:4a:6f:16:5a:59:03:25:42:0b:74:49:
6f:74:78:c6:74:82:42:ae:53:16:ef:a6:d9:4b:03:
66:26:c9:b5:54:f6:ff:86:eb:ad:18:f2:98:84:0a:
97:d3:51:d6:0c:1e:19:02:2b:05:60:25:ba:7d:13:
fd:80:a9:09:4e:1e:c1:7d:62:87:01:e3:b4:37:44:
b4:a8:cf:93:67:6f:42:38:e5:a8:d0:a6:d9:68:f8:
ec:bc:5b:83:44:7a:00:72:d9:10:56:45:8d:4e:7a:
d9:87:f2:d7:f8:aa:0d:e8:14:6e:1a:96:63:fd:3d:
da:f1:d7:03:ae:27:b4:e1:bf:27:93:84:74:a9:d1:
13:9a:f7:9e:45:2d:27:87:d2:33:85:41:47:e3:8a:
ce:35:7f:56:8a:89:88:61:30:4f:c9:e6:c4:42:b6:
a1:5b:51:20:d2:9d:5e:9b:a8:b9:c9:e6:c6:74:4e:
37:3f:54:09:d9:99:47:66:9b:17:9c:78:a1:56:c0:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:E5:36:24:18:80:9E:10:F1:08:77:B0:00:FF:39:55:C9:06:10
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
84:ab:48:a4:f6:1f:40:61:0d:06:5e:da:1b:24:e9:d6:1e:e2:
fa:d0:95:27:5f:ff:b1:a4:0d:36:ab:59:82:90:73:a7:ad:53:
fb:95:ce:4d:75:67:b5:18:71:71:a6:f8:ba:4d:d4:9b:e4:2c:
5a:71:d9:6b:f5:9a:f6:b5:de:86:c1:df:b1:f9:77:5f:c9:6e:
32:72:ca:76:d7:d0:6c:da:2b:f6:0d:94:92:7c:fb:f1:d2:7b:
09:db:2b:9d:f2:b7:8d:13:73:64:f8:70:12:29:aa:80:21:a4:
f3:1e:41:8b:9b:89:61:d6:2f:d8:36:b5:ce:27:85:0b:b4:1c:
eb:96:8d:9a:58:a6:85:88:9a:d1:d8:c7:e1:1e:b2:80:1c:9d:
fe:5a:11:65:08:56:6c:a1:53:c2:90:b8:54:38:1d:62:fa:20:
8a:7f:7f:bb:0d:7a:b2:57:f2:e0:a3:16:7c:7d:f9:0d:1a:02:
26:ad:ac:ed:c1:04:98:23:ad:e0:10:5f:6a:74:20:24:e0:50:
46:d5:2a:2b:26:ae:56:c5:64:4f:f4:6b:36:cf:0c:5c:4c:30:
5b:b4:88:02:1d:cd:13:2e:99:0c:94:03:1f:e1:d7:ce:31:a7:
8f:70:2f:3e:e8:4e:bb:4c:4d:a1:8f:a6:56:df:45:fb:4b:38:
03:06:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:21 2025 by rpki-client