Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/H6DguWyAKB8u-XwiA-wSbFWSyyM.roa
File: H6DguWyAKB8u-XwiA-wSbFWSyyM.roa (raw, json)
Hash identifier: HhyM4zbUFZiPEk4/CITr/Hv8a8wBk7oLKs2GIwW2o7U=
Subject key identifier: 1F:A0:E0:B9:6C:80:28:1F:2E:F9:7C:22:03:EC:12:6C:55:92:CB:23
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 019425FDE572FA5A62409DF4AB2D9072442D
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/H6DguWyAKB8u-XwiA-wSbFWSyyM.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212825
IP address blocks: 194.44.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e5:72:fa:5a:62:40:9d:f4:ab:2d:90:72:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa0e0b96c80281f2ef97c2203ec126c5592cb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:63:63:e8:ca:11:38:20:85:4e:58:91:c1:
dc:a4:68:60:cc:33:83:1a:7f:9c:67:14:d8:04:98:
0a:fc:d2:25:3e:57:d3:55:c2:4b:0d:2b:28:e8:a2:
73:a5:96:e5:14:09:16:92:f1:39:c0:d3:57:bb:c7:
36:e9:03:f3:0f:2f:f5:1a:68:c3:f7:2e:7d:c9:64:
6d:f4:ef:2d:1a:aa:b0:20:5d:16:b3:0f:4f:51:b3:
71:f9:cc:9e:45:51:62:06:c8:ce:1d:ab:02:2e:8c:
d3:72:e4:d9:ac:ed:d6:cf:3c:89:8b:c4:78:2b:d9:
4f:98:ae:f3:70:f7:51:fe:63:6e:32:8a:26:5f:0e:
14:a9:c3:a4:89:80:d5:fe:2e:c5:92:d4:dc:a2:40:
ce:3d:de:bf:dc:48:09:ed:00:6f:34:16:5c:31:e5:
79:3c:c5:a6:fe:dc:60:2a:06:f8:b5:fc:95:b6:bb:
11:e4:ce:49:d5:23:5f:b3:df:5a:be:9a:d5:da:4d:
86:01:41:75:be:5a:fb:6e:b2:97:94:be:36:31:c8:
3f:ae:e7:85:f8:4d:f6:05:09:29:8e:2d:80:3d:b6:
5b:75:8c:32:ec:55:c9:bc:1a:11:10:9f:7d:be:4b:
90:0b:de:c2:74:e4:1b:10:0d:f7:81:18:d1:64:dd:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:E0:B9:6C:80:28:1F:2E:F9:7C:22:03:EC:12:6C:55:92:CB:23
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/H6DguWyAKB8u-XwiA-wSbFWSyyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.176.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a4:fe:d7:2c:94:ad:c5:c9:00:9a:b8:7c:4a:94:8f:64:4e:
be:fc:9c:83:05:6d:d9:fb:00:96:8c:ee:0e:60:cc:d6:3b:2d:
a7:2f:cb:52:6b:d7:0a:21:67:ea:8b:04:43:b5:b3:da:d6:35:
67:82:f5:c1:c6:38:77:d5:b1:11:39:66:b4:8b:38:c0:fe:4f:
e8:ec:11:d7:37:b1:fb:3d:1a:1d:b0:b1:5a:30:7a:af:fa:98:
7e:1a:65:bd:35:d1:bc:10:12:11:75:90:2f:d3:eb:fb:2e:8e:
47:3e:53:3b:cd:80:a8:cc:27:05:0f:10:b0:fc:2f:22:71:fb:
38:dc:0a:f5:b7:9b:30:49:5f:94:34:14:94:7b:08:7c:a0:47:
0a:dd:02:d4:cd:a6:f9:1e:de:8e:68:5e:c3:df:d2:22:b3:65:
cd:49:bb:c0:e8:43:97:de:37:68:cb:b3:17:bb:ae:40:8c:72:
88:24:7c:0e:fb:37:1d:82:5b:6e:3d:a7:bb:e6:09:2e:5f:6f:
9d:0d:73:06:9e:61:e6:b3:e4:62:75:39:0c:43:1d:68:97:4f:
22:f8:bf:1d:72:72:e6:67:21:28:fb:0e:89:95:d2:a1:16:f4:
35:df:6d:0d:6f:c4:53:79:5e:37:18:9c:3b:e3:6e:d5:bc:9c:
67:78:0d:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/eVy+lpiQJ30qy2QckQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy
YmIzNmYwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmEwZTBiOTZjODAyODFmMmVmOTdjMjIwM2VjMTI2YzU1OTJjYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+hjY+jKETgghU5YkcHcpGhgzDOD
Gn+cZxTYBJgK/NIlPlfTVcJLDSso6KJzpZblFAkWkvE5wNNXu8c26QPzDy/1GmjD
9y59yWRt9O8tGqqwIF0Wsw9PUbNx+cyeRVFiBsjOHasCLozTcuTZrO3WzzyJi8R4
K9lPmK7zcPdR/mNuMoomXw4UqcOkiYDV/i7FktTcokDOPd6/3EgJ7QBvNBZcMeV5
PMWm/txgKgb4tfyVtrsR5M5J1SNfs99avprV2k2GAUF1vlr7brKXlL42Mcg/rueF
+E32BQkpji2APbZbdYwy7FXJvBoREJ99vkuQC97CdOQbEA33gRjRZN3FLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+g4LlsgCgfLvl8IgPsEmxVkssjMB8GA1UdIwQY
MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt
YTlhNzc5MDI2ZjBhLzEvSDZEZ3VXeUFLQjh1LVh3aUEtd1NiRldTeXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh
LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiywMA0G
CSqGSIb3DQEBCwUAA4IBAQAWpP7XLJStxckAmrh8SpSPZE6+/JyDBW3Z+wCWjO4O
YMzWOy2nL8tSa9cKIWfqiwRDtbPa1jVngvXBxjh31bEROWa0izjA/k/o7BHXN7H7
PRodsLFaMHqv+ph+GmW9NdG8EBIRdZAv0+v7Lo5HPlM7zYCozCcFDxCw/C8icfs4
3Ar1t5swSV+UNBSUewh8oEcK3QLUzab5Ht6OaF7D39Iis2XNSbvA6EOX3jdoy7MX
u65AjHKIJHwO+zcdgltuPae75gkuX2+dDXMGnmHms+RidTkMQx1ol08i+L8dcnLm
ZyEo+w6JldKhFvQ1320Nb8RTeV43GJw7427VvJxneA19
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:09 2025 by rpki-client