Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/nHio7uNF-gJsASyGNozixn0XJIM.roa
File: nHio7uNF-gJsASyGNozixn0XJIM.roa (raw, json)
Hash identifier: jcd5sjivp19XVsrsVA1XbLT4Ewz4dljsdil0kUZsn2c=
Subject key identifier: 9C:78:A8:EE:E3:45:FA:02:6C:01:2C:86:36:8C:E2:C6:7D:17:24:83
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 01942144389D47C3F87D4900B7FC0101A62D
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/nHio7uNF-gJsASyGNozixn0XJIM.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202865
IP address blocks: 185.152.68.0/22 maxlen: 22
185.152.68.0/24 maxlen: 24
185.152.69.0/24 maxlen: 24
185.152.70.0/24 maxlen: 24
185.152.71.0/24 maxlen: 24
2a07:8100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:38:9d:47:c3:f8:7d:49:00:b7:fc:01:01:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c78a8eee345fa026c012c86368ce2c67d172483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:8e:e3:da:f2:2f:3d:ec:07:eb:fd:3c:f5:
58:8c:83:26:09:b1:ae:17:d7:32:35:f5:0f:35:31:
45:ae:66:aa:dd:cf:8f:db:c1:cc:75:11:85:3d:f9:
29:4e:39:59:a1:0b:b2:28:01:5c:8d:ee:8f:9b:33:
70:00:ba:7d:d5:9f:30:2d:fd:5a:a3:5a:13:db:00:
35:04:d1:57:79:2f:0e:ac:b0:dd:cc:3b:8a:59:b6:
5a:eb:65:f1:b7:61:99:c1:67:47:61:dd:ac:35:dc:
ef:7a:56:06:fa:60:51:2a:eb:d1:d1:a4:74:3c:be:
e0:14:52:3e:7e:68:71:0a:b8:50:d8:ed:d7:bb:74:
11:c7:7c:ad:6a:67:e0:c8:bd:56:0d:78:96:53:c0:
02:1f:36:67:48:74:0a:8e:9c:76:69:ba:cc:39:07:
10:87:09:d4:49:a5:83:1a:9b:62:f8:f9:84:11:4d:
6e:23:7e:f5:fa:21:6d:82:5e:67:6a:15:9e:7a:0e:
10:30:70:4a:69:54:31:d1:c6:23:a1:ab:42:08:75:
3b:52:5a:6b:cf:b1:a8:3b:ff:ce:1c:c9:11:bb:b3:
39:f9:43:29:09:0b:01:11:93:4e:c2:4d:e4:5f:98:
72:d8:3e:53:ff:28:2e:dc:3d:0c:55:7e:22:6b:76:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:A8:EE:E3:45:FA:02:6C:01:2C:86:36:8C:E2:C6:7D:17:24:83
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/nHio7uNF-gJsASyGNozixn0XJIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.68.0/22
IPv6:
2a07:8100::/29
Signature Algorithm: sha256WithRSAEncryption
30:e7:5e:5c:73:07:ba:df:5d:cb:08:16:87:30:20:dd:77:0e:
a6:94:2c:11:3a:2b:54:b0:3c:00:2a:cb:21:2f:00:93:f1:11:
fe:dd:34:5c:c0:40:a8:ee:4d:aa:63:cb:08:49:c9:b6:f1:47:
12:06:b9:bc:b0:63:ad:84:22:84:c1:f5:45:af:ad:47:11:c4:
5c:6d:2f:8d:77:09:c9:93:0e:2e:9c:4b:e7:f3:43:8c:cc:c1:
45:bd:b4:fc:29:a6:e4:c4:33:0c:a6:8d:bd:ea:5d:20:50:99:
8e:ae:be:de:d7:84:50:6c:ff:18:ca:3a:4f:fd:84:78:07:f1:
db:0d:d8:91:5c:b5:f9:2b:25:7e:e3:ef:39:fb:a3:22:3b:9e:
75:ab:c3:cc:17:b0:48:5b:1d:28:7a:d4:03:23:c5:d8:3b:4a:
ef:6a:a0:03:55:6b:41:a2:ff:11:b3:d7:0d:ee:d8:05:6d:16:
6b:64:78:0b:13:68:0b:d4:6f:f6:d3:90:c0:23:b2:c9:26:4c:
ce:33:62:32:9e:00:14:36:e3:51:f9:56:ef:73:ca:31:9c:0c:
37:3c:da:95:db:81:83:7b:cc:05:ea:09:d2:c5:4d:60:87:90:
f5:f9:ec:a1:55:f3:04:d6:3c:83:6f:87:36:cc:cf:81:74:f5:
38:80:c6:e9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhRDidR8P4fUkAt/wBAaYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0
YzA4NDcwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yzc4YThlZWUzNDVmYTAyNmMwMTJjODYzNjhjZTJjNjdkMTcyNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGiO49ryLz3sB+v9PPVYjIMmCbGu
F9cyNfUPNTFFrmaq3c+P28HMdRGFPfkpTjlZoQuyKAFcje6PmzNwALp91Z8wLf1a
o1oT2wA1BNFXeS8OrLDdzDuKWbZa62Xxt2GZwWdHYd2sNdzvelYG+mBRKuvR0aR0
PL7gFFI+fmhxCrhQ2O3Xu3QRx3ytamfgyL1WDXiWU8ACHzZnSHQKjpx2abrMOQcQ
hwnUSaWDGpti+PmEEU1uI371+iFtgl5nahWeeg4QMHBKaVQx0cYjoatCCHU7Ulpr
z7GoO//OHMkRu7M5+UMpCQsBEZNOwk3kX5hy2D5T/ygu3D0MVX4ia3abBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJx4qO7jRfoCbAEshjaM4sZ9FySDMB8GA1UdIwQY
MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt
MTNlODgwMTYyOGY1LzEvbkhpbzd1TkYtZ0pzQVN5R05veml4bjBYSklNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1
LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZhEMA0E
AgACMAcDBQMqB4EAMA0GCSqGSIb3DQEBCwUAA4IBAQAw515ccwe6313LCBaHMCDd
dw6mlCwROitUsDwAKsshLwCT8RH+3TRcwECo7k2qY8sIScm28UcSBrm8sGOthCKE
wfVFr61HEcRcbS+NdwnJkw4unEvn80OMzMFFvbT8KabkxDMMpo296l0gUJmOrr7e
14RQbP8YyjpP/YR4B/HbDdiRXLX5KyV+4+85+6MiO551q8PMF7BIWx0oetQDI8XY
O0rvaqADVWtBov8Rs9cN7tgFbRZrZHgLE2gL1G/205DAI7LJJkzOM2IyngAUNuNR
+Vbvc8oxnAw3PNqV24GDe8wF6gnSxU1gh5D1+eyhVfME1jyDb4c2zM+BdPU4gMbp
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:06 2025 by rpki-client