Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/hmRzovRV4UHybR1HxVtSJMOLDCw.roa
File: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (raw, json)
Hash identifier: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=
Subject key identifier: 86:64:73:A2:F4:55:E1:41:F2:6D:1D:47:C5:5B:52:24:C3:8B:0C:2C
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 01955268931505F361722CE3CE00E9F18862
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/hmRzovRV4UHybR1HxVtSJMOLDCw.roa
Signing time: Sat 01 Mar 2025 15:52:19 +0000
ROA not before: Sat 01 Mar 2025 15:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:52:68:93:15:05:f3:61:72:2c:e3:ce:00:e9:f1:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Mar 1 15:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866473a2f455e141f26d1d47c55b5224c38b0c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:b5:39:60:c4:9c:a0:d6:45:53:bb:2c:ee:
7e:13:d2:52:3d:d8:8b:ff:53:a1:9e:c5:ef:1f:06:
2b:17:d6:b4:95:fc:12:0e:b7:87:8c:1e:93:8d:c3:
6a:4c:72:c5:9f:a1:a2:85:6f:27:d1:78:a1:5b:e8:
1c:6d:0c:56:3e:87:c1:c8:29:94:4c:59:c5:87:16:
ca:54:4a:54:a4:4e:a8:c8:ba:7a:63:71:9d:13:95:
ee:37:dd:a0:0e:59:01:e9:1d:88:bd:91:5a:8f:8c:
69:e3:27:99:84:14:c3:4e:28:1d:1e:c2:98:a4:ef:
21:78:e6:11:ce:e1:f9:9c:fd:7d:dc:fd:d2:8b:6a:
9d:2e:d7:cc:73:57:96:5d:5d:31:7b:e3:c0:96:60:
23:1f:1b:bf:91:6b:e1:b5:63:9a:5d:66:a7:8f:40:
51:92:a7:85:85:01:8e:27:cc:a8:28:14:6b:55:eb:
f3:3c:85:cd:14:ba:67:74:91:d9:10:e1:aa:b0:c8:
ce:5c:47:5f:94:8c:8d:74:e8:1c:f4:c8:14:da:96:
5c:f2:80:ea:8f:78:c1:f1:ea:74:8f:f6:d1:df:18:
4f:13:c4:c9:87:81:1a:7d:cc:7d:0d:76:21:c9:02:
8d:66:55:79:9c:5b:d3:e8:2e:4f:0c:2e:ff:93:b3:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:73:A2:F4:55:E1:41:F2:6D:1D:47:C5:5B:52:24:C3:8B:0C:2C
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/hmRzovRV4UHybR1HxVtSJMOLDCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
65:de:60:ea:9a:4a:32:ca:4d:e4:b4:43:cf:d8:23:ff:ee:55:
22:dc:03:02:2b:3a:4d:99:99:f7:af:d5:d1:a4:2e:2a:04:42:
54:1d:2d:89:ee:f7:33:3a:ea:aa:86:d7:81:6f:db:99:77:4a:
9d:1e:40:dc:f7:8f:68:0a:ca:a6:a5:11:35:ee:90:9c:15:9d:
52:00:ed:5e:cc:22:f9:1d:3d:33:5e:b2:17:f0:49:87:b1:13:
22:54:4c:46:11:4d:a5:33:7f:6f:bf:a9:09:95:8f:a2:cb:97:
d3:36:43:32:ce:f9:57:a3:5f:d4:3f:da:72:8b:80:c9:a8:9f:
1e:a0:e1:04:b6:32:75:6b:67:db:1b:d6:8a:ce:78:eb:72:21:
ce:ee:8f:49:f2:2c:2f:51:8a:00:5c:ce:59:22:ae:ee:45:ff:
16:b7:de:83:f2:c8:24:c5:ae:43:47:cf:6e:45:b2:a8:c1:1e:
99:8b:12:78:c8:ec:14:bf:83:b8:86:e2:5f:9a:23:ee:f8:5c:
75:62:31:dd:34:aa:d5:67:09:35:e4:a4:5a:37:73:95:55:88:
c3:72:84:92:5d:84:13:00:8f:e5:8f:b9:68:19:74:9a:0b:e6:
71:47:40:d9:6b:d1:4b:b6:be:29:61:82:f5:f0:58:a0:b1:f1:
ef:0b:6d:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVSaJMVBfNhcizjzgDp8YhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4
NWNmYzIwHhcNMjUwMzAxMTU1MjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjY0NzNhMmY0NTVlMTQxZjI2ZDFkNDdjNTViNTIyNGMzOGIwYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbO1OWDEnKDWRVO7LO5+E9JSPdiL
/1OhnsXvHwYrF9a0lfwSDreHjB6TjcNqTHLFn6GihW8n0XihW+gcbQxWPofByCmU
TFnFhxbKVEpUpE6oyLp6Y3GdE5XuN92gDlkB6R2IvZFaj4xp4yeZhBTDTigdHsKY
pO8heOYRzuH5nP193P3Si2qdLtfMc1eWXV0xe+PAlmAjHxu/kWvhtWOaXWanj0BR
kqeFhQGOJ8yoKBRrVevzPIXNFLpndJHZEOGqsMjOXEdflIyNdOgc9MgU2pZc8oDq
j3jB8ep0j/bR3xhPE8TJh4Eafcx9DXYhyQKNZlV5nFvT6C5PDC7/k7OSmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZkc6L0VeFB8m0dR8VbUiTDiwwsMB8GA1UdIwQY
MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct
NGM4OTgwYjU4MTI2LzEvaG1Sem92UlY0VUh5YlIxSHhWdFNKTU9MREN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2
LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOiMA0G
CSqGSIb3DQEBCwUAA4IBAQBl3mDqmkoyyk3ktEPP2CP/7lUi3AMCKzpNmZn3r9XR
pC4qBEJUHS2J7vczOuqqhteBb9uZd0qdHkDc949oCsqmpRE17pCcFZ1SAO1ezCL5
HT0zXrIX8EmHsRMiVExGEU2lM39vv6kJlY+iy5fTNkMyzvlXo1/UP9pyi4DJqJ8e
oOEEtjJ1a2fbG9aKznjrciHO7o9J8iwvUYoAXM5ZIq7uRf8Wt96D8sgkxa5DR89u
RbKowR6ZixJ4yOwUv4O4huJfmiPu+Fx1YjHdNKrVZwk15KRaN3OVVYjDcoSSXYQT
AI/lj7loGXSaC+ZxR0DZa9FLtr4pYYL18FigsfHvC22n
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:07:15 2025 by rpki-client