Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/H0NG9092js7rDQpTqrZPdac72WM.roa
File: H0NG9092js7rDQpTqrZPdac72WM.roa (raw, json)
Hash identifier: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=
Subject key identifier: 1F:43:46:F7:4F:76:8E:CE:EB:0D:0A:53:AA:B6:4F:75:A7:3B:D9:63
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019425FD2FA47648DB20682F08114732A4B9
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/H0NG9092js7rDQpTqrZPdac72WM.roa
Signing time: Thu 02 Jan 2025 07:48:57 +0000
ROA not before: Thu 02 Jan 2025 07:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41321
IP address blocks: 31.3.150.0/24 maxlen: 24
31.3.151.0/24 maxlen: 24
80.70.171.0/24 maxlen: 24
80.70.174.0/24 maxlen: 24
2a00:d340:ffe0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2f:a4:76:48:db:20:68:2f:08:11:47:32:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jan 2 07:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4346f74f768eceeb0d0a53aab64f75a73bd963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:ca:e8:ca:46:38:7c:12:9a:b7:18:72:6f:
65:3e:55:16:8b:de:e8:7b:6c:24:69:b6:04:72:26:
0d:2d:e5:0c:d0:c1:f4:d7:6e:b9:d5:00:1f:8b:69:
6d:90:de:55:fc:ad:c2:9b:3f:06:7f:21:f2:71:c5:
c4:d0:3c:91:42:fb:2d:b2:fb:e5:2d:1e:bb:02:5a:
c7:32:6b:a7:3c:9a:2b:a2:69:a6:df:54:63:c7:5e:
9b:2f:69:6f:bc:e2:f5:9b:3c:7e:6d:3b:fc:80:1e:
84:b9:f0:2c:7b:15:f6:a3:39:31:c4:9b:c5:b3:83:
53:b6:26:34:78:c7:e6:66:18:6f:3d:99:a1:ed:4e:
1b:4e:7d:cd:48:ac:b6:66:99:a0:36:59:a9:fb:e1:
64:d9:b0:46:bc:75:cc:22:45:ae:bb:57:87:45:fb:
58:58:4b:d0:59:de:94:0e:62:69:a2:e6:44:53:71:
ef:cc:b6:ed:89:25:08:12:14:8c:50:71:be:70:29:
98:9c:1a:ef:0f:be:6c:a0:91:f8:c0:da:ab:75:89:
3d:2d:9d:1d:45:7c:34:94:80:a4:9c:6e:af:e7:67:
b5:8b:64:94:07:a9:e4:f5:06:96:4e:e8:24:57:61:
b4:0e:08:69:f5:f8:0f:ef:1c:15:83:30:45:6b:14:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:46:F7:4F:76:8E:CE:EB:0D:0A:53:AA:B6:4F:75:A7:3B:D9:63
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/H0NG9092js7rDQpTqrZPdac72WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.150.0/23
80.70.171.0/24
80.70.174.0/24
IPv6:
2a00:d340:ffe0::/48
Signature Algorithm: sha256WithRSAEncryption
54:05:15:5e:7c:73:fb:6b:e5:98:c3:f4:51:06:de:52:bd:25:
11:f1:ff:5f:dc:72:5e:eb:52:61:2b:bc:28:68:49:f5:cd:81:
1d:80:1d:4f:d8:d3:06:ee:3c:19:49:f4:2f:e8:e6:7b:e5:98:
59:bd:bb:b4:ae:49:ce:17:0d:cc:75:76:9e:6a:75:7d:62:29:
a7:3c:8e:89:60:4c:19:27:19:4c:dd:da:2a:fc:1a:20:93:b8:
78:40:8b:96:63:1f:c7:65:ae:0d:ed:a9:cc:e4:ba:79:90:79:
67:06:7a:cb:2e:b3:e8:10:7a:7f:32:6e:86:24:49:aa:3f:c0:
27:a4:ea:fb:df:88:bd:2e:6d:3d:50:38:57:52:d3:c3:4d:b8:
53:30:45:42:29:ff:d4:ea:15:0a:d9:87:7d:ed:f2:00:78:c9:
62:0e:fc:64:cc:1f:a9:a7:59:11:7e:1c:60:cb:4b:39:30:ad:
32:94:14:da:15:b1:86:d0:1e:c8:ab:70:11:b1:49:d3:81:65:
d7:8c:25:35:72:fe:bd:a1:85:fb:aa:e7:11:73:30:c3:be:fb:
c3:7c:41:3e:73:23:87:1e:06:c7:30:5a:3c:8a:13:63:02:2e:
f5:55:c4:81:53:4b:bd:cb:c2:10:25:a9:d8:c0:1c:96:8d:02:
00:14:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:00 2025 by rpki-client