Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/HMpahg815y5dLvRLadSLI9aRsZg.roa
File: HMpahg815y5dLvRLadSLI9aRsZg.roa (raw, json)
Hash identifier: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=
Subject key identifier: 1C:CA:5A:86:0F:35:E7:2E:5D:2E:F4:4B:69:D4:8B:23:D6:91:B1:98
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B676620A1C979407978F88BF673FDB
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/HMpahg815y5dLvRLadSLI9aRsZg.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8551
IP address blocks: 95.100.204.0/22 maxlen: 22
2a02:26f0:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:76:62:0a:1c:97:94:07:97:8f:88:bf:67:3f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cca5a860f35e72e5d2ef44b69d48b23d691b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:3a:28:e3:18:18:4b:e7:f2:29:68:cf:36:
eb:59:d6:c2:18:af:02:6e:7f:d4:22:6f:16:ee:76:
99:f1:55:67:12:34:22:c4:46:93:d4:d9:36:b1:9e:
17:95:bc:d2:ed:ef:66:30:2d:c1:ab:53:c0:88:d9:
2d:2a:bb:e7:fe:7e:35:b6:3a:fa:c0:ad:5a:4f:68:
ce:7b:3b:0b:cf:cc:04:f9:59:3e:d4:10:6b:9e:6b:
0f:3c:4d:b5:f7:d9:97:25:7b:31:0c:ae:17:b9:9b:
af:e7:5c:bd:e1:e2:91:7f:17:3e:88:ef:d3:ef:5b:
e7:ee:fb:4b:8e:f8:b7:25:c5:97:bc:2f:2f:5a:ff:
46:f4:90:e9:a6:a5:f2:60:77:88:e9:0a:8f:3a:a4:
93:55:29:97:d2:61:78:76:3f:ed:94:a9:cf:0b:ad:
e4:31:53:9c:2e:43:10:6d:34:ff:9d:bf:04:2c:e4:
2c:4d:a1:87:b7:a3:9d:b8:f0:a9:b5:39:1d:48:3c:
ed:de:d1:d7:6a:01:7a:ed:68:23:08:f5:12:5f:2b:
b6:d7:e1:97:5f:c3:53:6f:92:d3:df:37:f8:8c:4d:
08:8f:d1:b8:49:a9:f1:33:e1:3a:af:8b:77:e1:e8:
a7:ee:d5:6d:e2:8e:f9:c5:e1:d6:e2:12:5a:2b:f0:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:5A:86:0F:35:E7:2E:5D:2E:F4:4B:69:D4:8B:23:D6:91:B1:98
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/HMpahg815y5dLvRLadSLI9aRsZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.100.204.0/22
IPv6:
2a02:26f0:8000::/48
Signature Algorithm: sha256WithRSAEncryption
8c:62:b6:62:37:b7:9f:c6:6d:fb:ce:dd:28:07:51:19:c9:de:
ae:6e:b6:22:5f:b4:6b:00:0d:4a:3d:2c:fd:27:a8:23:9e:5f:
7b:cf:e3:c4:3c:68:60:18:d5:d0:43:bb:94:56:4c:b1:ed:1e:
ef:ed:20:95:8c:57:96:e1:5f:ac:1c:a6:fb:bb:e3:96:dd:93:
32:d4:13:bb:59:3b:58:c9:1f:a0:b5:d6:f7:06:36:8e:57:44:
95:b7:2f:5a:c5:1a:23:31:81:49:1b:00:b3:55:c1:af:38:87:
de:95:f0:d4:26:99:fb:30:62:e9:12:ea:e6:31:75:64:8f:21:
20:0d:c1:a7:c7:2c:e5:96:c8:ca:26:ac:6f:ab:ea:fc:b0:d9:
4b:9d:ce:7e:4f:6b:06:7f:e8:7e:4c:60:e5:0e:be:3e:71:2a:
87:a0:af:30:dc:37:c6:4c:d5:a6:15:8c:cf:1a:94:99:d5:74:
5a:2a:3b:0e:23:76:ef:d2:5d:ab:c6:68:b1:5b:6c:54:0b:38:
81:bb:8c:bf:6c:5d:87:d7:04:44:8f:b0:cb:5c:bd:9e:21:b6:
c9:77:de:0e:5c:d5:8c:38:ef:0d:fc:75:ba:08:8e:74:41:15:
13:7d:f6:fb:f0:0a:4b:11:e8:4e:7d:99:de:45:96:a9:94:8d:
65:7a:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:17:33 2025 by rpki-client