Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HOYTKMTg5Sg1s2mrLEV_Ey8QvU4.roa
File: HOYTKMTg5Sg1s2mrLEV_Ey8QvU4.roa (raw, json)
Hash identifier: wHrEAekLwKipCVWK+S6znq71BkH63pWX5NUb0WOgRds=
Subject key identifier: 1C:E6:13:28:C4:E0:E5:28:35:B3:69:AB:2C:45:7F:13:2F:10:BD:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195BAA501760AE73B5D119F662A0E4BBEBB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HOYTKMTg5Sg1s2mrLEV_Ey8QvU4.roa
Signing time: Fri 21 Mar 2025 21:38:50 +0000
ROA not before: Fri 21 Mar 2025 21:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 94.156.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ba:a5:01:76:0a:e7:3b:5d:11:9f:66:2a:0e:4b:be:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 21:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ce61328c4e0e52835b369ab2c457f132f10bd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:87:d1:cb:ac:48:1d:24:0d:d8:af:09:2c:
6a:ad:eb:e8:c4:13:bb:05:40:e4:b4:87:f2:3b:a3:
61:c2:27:2e:17:f3:ea:12:e4:bd:ae:b1:c3:33:32:
39:75:cc:3d:ad:1b:6d:66:d0:76:d5:ed:c9:f4:44:
0f:61:31:d2:77:88:05:68:4a:88:77:21:bd:36:0b:
9b:b5:01:d5:58:f6:d2:32:16:a7:d7:0c:ad:cf:fe:
c3:ef:7a:fd:ae:53:56:b3:1f:77:bf:99:11:ed:e8:
74:16:53:6b:ce:8e:ed:ee:1a:7d:c6:37:34:7f:dd:
ed:d9:fc:4f:f1:6f:d9:b6:c4:cd:25:a7:55:48:42:
a5:df:01:d9:8f:50:44:cc:f4:21:7e:77:f3:15:76:
1d:bc:88:1c:ab:69:86:c6:2b:67:68:52:c7:0c:1e:
99:11:ee:1e:8c:e9:3d:5a:84:65:22:fb:a9:24:ff:
b2:3c:69:ba:fc:68:54:c7:1d:30:d8:1c:71:05:4a:
b0:c0:78:8c:60:83:c0:28:c9:06:a4:3c:e5:24:ec:
9d:12:57:48:d4:5c:a0:f8:83:b2:49:56:4d:fc:60:
1c:98:4c:51:66:a3:79:0a:2a:aa:48:fa:04:9e:01:
c3:f6:7d:b0:96:c8:57:27:b4:51:ac:94:e4:ad:54:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:13:28:C4:E0:E5:28:35:B3:69:AB:2C:45:7F:13:2F:10:BD:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HOYTKMTg5Sg1s2mrLEV_Ey8QvU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.105.0/24
Signature Algorithm: sha256WithRSAEncryption
24:27:db:bd:c8:00:5e:16:33:f5:0a:a7:0f:a6:f9:83:b7:ce:
db:0c:5b:61:37:f3:66:de:04:13:27:65:58:d6:28:3a:3f:c8:
06:96:7f:f3:e6:4e:d0:a5:de:da:c7:9e:9b:64:7a:bd:6e:89:
65:2c:4f:11:0e:4b:5f:6f:6c:8e:bc:86:22:d9:db:70:4b:af:
db:d3:e6:e0:2e:e9:28:b8:2e:7e:f6:c5:52:25:3e:13:d0:c7:
3a:69:ce:b4:56:81:d7:e7:8a:f7:c5:f6:95:97:0a:37:c7:6d:
be:49:c9:d1:94:15:4e:f8:bf:26:a0:42:f2:e1:0e:91:30:69:
64:d1:09:56:53:c3:57:e5:49:65:09:e7:2c:dd:06:cb:08:50:
59:f9:c9:dc:34:ed:eb:9c:d9:cd:8d:e1:00:83:d9:c2:0a:2b:
24:a7:b3:9c:f1:81:e7:c7:fd:08:c6:41:8e:38:34:ff:af:cd:
b5:ae:dd:f8:32:0c:61:1e:7b:d4:80:f3:c1:34:cc:c9:4a:df:
62:1c:ad:4e:96:22:49:35:32:c9:fd:72:52:ab:d4:23:ec:5d:
1c:72:81:6e:75:93:7d:19:a4:81:ef:57:97:a5:8c:11:c9:7d:
8b:ed:a4:a3:8e:02:b3:5b:90:15:e8:aa:5c:5a:e1:00:14:25:
d4:b6:a1:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZW6pQF2Cuc7XRGfZioOS767MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzIxMjEzODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2U2MTMyOGM0ZTBlNTI4MzViMzY5YWIyYzQ1N2YxMzJmMTBiZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHaH0cusSB0kDdivCSxqrevoxBO7
BUDktIfyO6NhwicuF/PqEuS9rrHDMzI5dcw9rRttZtB21e3J9EQPYTHSd4gFaEqI
dyG9NgubtQHVWPbSMhan1wytz/7D73r9rlNWsx93v5kR7eh0FlNrzo7t7hp9xjc0
f93t2fxP8W/ZtsTNJadVSEKl3wHZj1BEzPQhfnfzFXYdvIgcq2mGxitnaFLHDB6Z
Ee4ejOk9WoRlIvupJP+yPGm6/GhUxx0w2BxxBUqwwHiMYIPAKMkGpDzlJOydEldI
1Fyg+IOySVZN/GAcmExRZqN5CiqqSPoEngHD9n2wlshXJ7RRrJTkrVRreQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzmEyjE4OUoNbNpqyxFfxMvEL1OMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSE9ZVEtNVGc1U2cxczJtckxFVl9FeThRdlU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpxpMA0G
CSqGSIb3DQEBCwUAA4IBAQAkJ9u9yABeFjP1CqcPpvmDt87bDFthN/Nm3gQTJ2VY
1ig6P8gGln/z5k7Qpd7ax56bZHq9bollLE8RDktfb2yOvIYi2dtwS6/b0+bgLuko
uC5+9sVSJT4T0Mc6ac60VoHX54r3xfaVlwo3x22+ScnRlBVO+L8moELy4Q6RMGlk
0QlWU8NX5UllCecs3QbLCFBZ+cncNO3rnNnNjeEAg9nCCiskp7Oc8YHnx/0IxkGO
ODT/r821rt34MgxhHnvUgPPBNMzJSt9iHK1OliJJNTLJ/XJSq9Qj7F0ccoFudZN9
GaSB71eXpYwRyX2L7aSjjgKzW5AV6KpcWuEAFCXUtqGI
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client