Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/hldVZlO6d8WWA7-GTHuwlp4u6fM.roa
File: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (raw, json)
Hash identifier: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=
Subject key identifier: 86:57:55:66:53:BA:77:C5:96:03:BF:86:4C:7B:B0:96:9E:2E:E9:F3
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 01941F8C3B19BF9C42BBF6601687BB74CE84
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/hldVZlO6d8WWA7-GTHuwlp4u6fM.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41000
IP address blocks: 185.219.236.0/22 maxlen: 22
2a0b:eb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:19:bf:9c:42:bb:f6:60:16:87:bb:74:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8657556653ba77c59603bf864c7bb0969e2ee9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:49:54:69:43:c4:92:0b:f2:09:16:f2:cb:
f2:e7:15:1d:7b:ac:b6:06:db:4b:19:26:8a:4f:f5:
6a:7b:d2:94:cd:99:1f:cf:48:f8:55:3b:25:69:4a:
63:db:c9:88:a5:bf:59:79:50:c9:25:6b:24:1d:ba:
e1:a0:41:ca:bc:1c:b6:c7:cd:d4:37:50:26:47:dc:
9b:84:cd:87:83:6c:67:7b:6d:47:88:30:33:05:d5:
da:b5:c9:05:83:e1:78:fe:8f:18:a0:9f:cb:c2:67:
83:3e:02:c3:6f:6f:b1:16:3f:17:34:84:29:53:6e:
0f:48:72:8e:08:56:30:79:03:56:c1:af:9e:f5:ca:
42:7c:14:cd:93:9d:02:a0:09:4d:af:fa:84:29:a9:
6d:ec:46:77:7b:aa:a3:38:38:86:3b:1f:7f:f4:32:
5c:7d:f4:bb:0c:af:28:13:fb:ae:6d:9e:68:69:95:
0c:86:59:8b:b4:3c:00:26:f3:cf:b2:eb:bc:e7:38:
a2:bb:44:76:0a:ec:fa:d9:d6:82:34:b8:08:f7:1e:
aa:d6:73:38:f4:6b:d9:67:80:4b:4b:37:21:b5:ac:
a5:d1:4a:98:f0:7e:f4:ad:92:33:fd:26:d7:9b:b9:
18:d9:b3:2c:d8:cc:8d:a3:b6:3c:90:7f:3b:9c:7e:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:57:55:66:53:BA:77:C5:96:03:BF:86:4C:7B:B0:96:9E:2E:E9:F3
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/hldVZlO6d8WWA7-GTHuwlp4u6fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.236.0/22
IPv6:
2a0b:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:0e:c7:f4:3d:d8:2e:00:68:00:e0:d2:58:b4:88:c5:b4:d6:
6c:5f:6e:c1:64:b0:30:22:18:ab:b1:c7:71:f8:50:bc:78:8f:
95:a0:47:38:50:17:f6:65:2e:bc:2b:c1:d8:77:a5:74:bf:3d:
57:fa:3f:fa:d9:ec:8c:5e:c5:65:e3:24:2f:1c:e8:6d:b9:63:
bc:4c:0c:60:73:a9:a1:d3:a4:2a:dd:39:16:88:69:b3:4b:f2:
3c:7a:66:67:ca:e2:1d:f2:2d:1a:dd:8d:c3:1c:c9:51:ec:cf:
e5:c5:8d:57:91:9f:15:28:11:89:84:7b:a2:a9:3d:01:8f:ba:
f2:9a:0a:11:3e:61:a1:a3:5f:1f:d8:ce:80:f0:98:e4:2b:00:
18:e1:92:20:21:72:3b:fc:05:c3:7b:83:78:aa:a9:92:ea:8b:
aa:8e:eb:4e:f1:0a:86:ba:b8:9f:89:bb:e6:55:09:a2:64:80:
66:75:8a:c5:3d:32:8b:35:2f:de:76:72:2e:d7:ed:dd:98:d5:
1c:05:b1:19:4a:99:28:43:f7:0c:6e:41:a2:4a:62:0b:fa:01:
58:b4:94:78:40:31:77:67:64:c8:63:a6:cd:93:d2:22:50:25:
b0:97:78:3d:16:22:14:9d:3f:5d:0f:7a:3e:e8:0b:7c:01:85:
17:3b:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:09 2025 by rpki-client