Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa
File: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (raw, json)
Hash identifier: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=
Subject key identifier: 1F:0D:D3:90:4A:9F:3C:3A:19:54:10:4C:F3:39:87:77:54:37:48:04
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019424B31870B19D6AA8D653A7D14278E487
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa
Signing time: Thu 02 Jan 2025 01:48:24 +0000
ROA not before: Thu 02 Jan 2025 01:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50522
IP address blocks: 81.23.244.0/22 maxlen: 22
81.173.0.0/22 maxlen: 22
81.173.7.0/24 maxlen: 24
81.173.32.0/22 maxlen: 22
81.173.48.0/20 maxlen: 20
81.173.64.0/20 maxlen: 20
81.173.96.0/22 maxlen: 22
81.173.125.0/24 maxlen: 24
81.173.126.0/23 maxlen: 23
109.235.32.0/21 maxlen: 21
185.61.68.0/22 maxlen: 22
2a03:be00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:18:70:b1:9d:6a:a8:d6:53:a7:d1:42:78:e4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jan 2 01:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f0dd3904a9f3c3a1954104cf339877754374804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:ef:58:51:66:e3:de:da:c3:e1:3d:92:db:
74:31:dd:c6:d2:96:22:e8:e7:cf:14:06:2e:76:ca:
f7:15:69:11:2d:4d:a2:35:76:1b:66:7e:49:64:e3:
c8:a7:87:20:bd:e0:a6:24:35:30:88:8e:bc:18:6b:
20:38:0b:57:d3:d5:70:26:81:d1:5a:7b:6c:bf:69:
1c:3a:d8:0b:ef:e6:ab:31:0c:fe:c1:44:ca:7e:71:
53:20:d3:81:70:92:96:e6:dd:19:3d:54:9b:67:10:
d3:69:5b:4b:ee:88:70:93:9d:70:01:80:81:c0:ea:
08:a4:e9:ea:96:c5:09:86:c2:47:55:1c:18:64:c5:
e8:0e:9b:52:1a:1e:c0:46:ad:d9:09:2e:78:13:f1:
41:06:6d:91:6b:19:cb:e8:46:eb:7c:c2:84:98:80:
4c:23:2e:37:9d:cc:f3:70:5f:cf:df:cf:52:87:0a:
7a:62:84:5f:7c:69:58:72:12:76:23:9b:63:25:d8:
da:ce:36:0c:c3:f9:37:56:8a:eb:a3:fe:ff:bb:84:
86:22:ee:a0:3c:e6:2d:c3:14:0e:de:aa:c9:dd:97:
77:23:c9:e5:45:bd:7f:4a:61:6b:ea:e5:7a:3f:d1:
9d:f5:48:66:9a:f5:b0:5d:c3:45:9c:5d:e3:7c:dd:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:D3:90:4A:9F:3C:3A:19:54:10:4C:F3:39:87:77:54:37:48:04
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.244.0/22
81.173.0.0/22
81.173.7.0/24
81.173.32.0/22
81.173.48.0-81.173.79.255
81.173.96.0/22
81.173.125.0-81.173.127.255
109.235.32.0/21
185.61.68.0/22
IPv6:
2a03:be00::/32
Signature Algorithm: sha256WithRSAEncryption
8f:5f:74:a0:30:44:73:d8:c5:b0:d3:b2:4b:96:11:b7:d3:e2:
0b:4d:0a:75:a0:6d:c0:0c:26:b9:1c:96:26:62:a1:3d:b5:9c:
30:cc:e2:08:70:ca:ed:89:f5:7c:89:a8:3a:90:a8:b2:df:e6:
6f:32:df:8c:9d:a2:6e:62:0f:6f:71:0b:32:0c:b4:89:dd:31:
d8:79:e1:b4:87:eb:6d:be:34:1b:a1:ef:2c:34:d3:4b:4a:08:
46:a3:d1:45:fa:84:df:19:38:e7:b1:2e:a2:ff:33:1e:38:a3:
ab:1a:8d:94:fa:86:a5:ff:c6:d9:ab:72:77:d7:45:e0:b8:15:
af:56:0e:c8:0e:a1:35:66:c0:96:ab:0d:5d:71:d8:a9:2a:94:
59:79:5d:0e:ad:d5:1d:3e:f9:98:80:98:af:85:93:59:fb:71:
e1:4f:89:94:92:26:97:ae:bd:c2:17:25:97:aa:ee:18:e7:90:
4b:bb:71:06:40:0f:dd:1a:44:30:86:e0:d9:01:10:c6:14:8c:
e1:bf:3f:f5:df:ef:1f:62:56:c7:21:fb:cf:a8:23:ac:38:ef:
8a:1a:76:d7:b8:26:93:8e:d5:a9:6e:9e:aa:bb:3d:54:85:7b:
03:bf:75:50:7b:50:a4:90:49:f1:88:15:05:ee:05:2e:c6:b4:
8c:5c:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:42 2025 by rpki-client