Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HlKAlMH6UzTLImM_TxkLV71RVq4.roa
File: HlKAlMH6UzTLImM_TxkLV71RVq4.roa (raw, json)
Hash identifier: FU3Qy1jleZDVYfMHuVVX8CNTQUggUBAn7roG8XWQR0k=
Subject key identifier: 1E:52:80:94:C1:FA:53:34:CB:22:63:3F:4F:19:0B:57:BD:51:56:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196F73B3720FE4ACED89E56641B44D8CC46
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HlKAlMH6UzTLImM_TxkLV71RVq4.roa
Signing time: Thu 22 May 2025 09:02:55 +0000
ROA not before: Thu 22 May 2025 09:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 194.55.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:3b:37:20:fe:4a:ce:d8:9e:56:64:1b:44:d8:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 22 09:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e528094c1fa5334cb22633f4f190b57bd5156ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:76:27:34:1f:72:47:d4:6a:01:ac:7c:03:
2c:c8:64:43:27:51:4e:68:c4:07:3e:21:62:18:6f:
73:f8:d7:b5:5a:0b:55:3a:4a:f9:41:bc:13:ae:b3:
26:f4:60:b4:c1:cf:a2:45:45:1d:20:dd:11:87:96:
75:e0:07:be:2d:59:39:ea:96:ec:e8:2c:35:aa:fd:
c4:ca:a8:13:b6:f4:b7:03:2a:bc:86:21:d8:80:b1:
ab:54:32:20:4f:a7:06:58:cc:f5:a9:77:9c:94:73:
89:55:b3:13:5d:48:fb:de:4b:99:b0:49:d9:e7:eb:
a1:b2:24:93:b6:3d:ff:ca:93:36:bb:cd:4d:32:ce:
68:fa:3c:34:d5:18:77:00:71:c3:41:e7:99:54:99:
45:7b:df:aa:57:6a:a2:7a:37:cf:89:f9:6e:b5:ce:
fc:ac:05:d4:4f:17:90:08:60:9f:35:39:c2:0a:27:
e8:ca:e4:04:6d:3b:ce:f8:b9:2c:74:f2:20:f1:1f:
d1:cb:5d:26:fc:8f:a8:c0:7c:d4:9e:65:fa:55:a4:
96:9e:7b:b5:42:0b:54:23:48:bf:67:1f:ba:ec:a7:
73:ee:85:67:e3:2f:8e:a1:2d:43:e3:21:3c:39:97:
95:7f:aa:fd:85:19:06:15:c5:c1:cd:26:06:39:a1:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:80:94:C1:FA:53:34:CB:22:63:3F:4F:19:0B:57:BD:51:56:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HlKAlMH6UzTLImM_TxkLV71RVq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a1:f9:90:af:7e:7a:99:ca:2e:e6:e7:67:42:6f:51:9e:2a:
17:1e:44:5d:07:cb:b0:79:c8:68:c4:1f:5a:55:90:92:ce:3c:
00:4e:ec:38:bd:a7:88:f2:af:3d:7e:4f:bb:0e:94:e0:5a:47:
83:07:cc:cf:59:4d:8e:18:3a:64:01:2d:60:eb:b2:eb:5b:09:
07:c7:dd:83:49:4a:58:46:f1:4e:c9:cd:ad:d8:8f:86:05:fc:
ba:98:de:56:d6:7b:2b:6a:b9:15:b5:83:32:b5:e1:56:a1:af:
b9:84:ee:05:7d:eb:1b:f0:3b:e8:5f:05:b3:f6:e9:59:f0:29:
9a:7e:0e:56:80:1a:23:78:5a:c3:3f:91:bb:c0:75:01:ea:da:
7a:c5:13:90:60:f9:6d:58:ce:5a:2d:af:63:7f:3f:31:99:bd:
c6:22:96:41:c9:0a:36:bd:e6:92:a3:28:5e:cb:5c:66:2f:80:
0d:59:a3:06:56:37:ca:ea:80:59:90:9b:65:90:d9:86:cd:d9:
62:83:72:33:43:a6:08:a1:1f:e3:46:18:df:83:eb:7a:06:91:
46:fc:ad:0f:36:4a:7e:ad:e1:15:4d:89:86:68:68:00:17:d5:
9e:4b:09:ff:5e:b8:32:39:aa:eb:cf:02:ac:72:94:78:6e:e8:
0e:0f:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:48:14 2025 by rpki-client