Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0NNAKB8SHWYk497Woj5vh37dbk.roa
File: H0NNAKB8SHWYk497Woj5vh37dbk.roa (raw, json)
Hash identifier: Pk/AByCoZVgkRcnOzyKj1Erh5es4WsdFSHRdrWMtA+U=
Subject key identifier: 1F:43:4D:00:A0:7C:48:75:98:93:8F:7B:5A:88:F9:BE:1D:FB:75:B9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FF84392E446E0C407A681EAFC7F9D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0NNAKB8SHWYk497Woj5vh37dbk.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12360
IP address blocks: 5.231.128.0/18 maxlen: 32
5.231.128.0/19 maxlen: 32
5.231.160.0/20 maxlen: 32
5.231.176.0/21 maxlen: 32
5.231.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:43:92:e4:46:e0:c4:07:a6:81:ea:fc:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f434d00a07c487598938f7b5a88f9be1dfb75b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:43:1f:43:c4:0f:f9:79:af:61:5b:64:d0:
0a:24:be:ab:f9:b4:80:de:85:2d:20:14:de:c5:37:
f4:ef:93:c7:5d:e6:3f:31:d6:ab:cc:a8:1d:7f:e4:
8a:55:ba:5e:36:c6:2f:ff:a2:cb:5f:23:1c:2b:6a:
38:75:21:60:f2:91:d3:6d:df:83:66:fd:2b:ea:fa:
b9:b7:19:3f:f5:9f:19:22:d0:9d:31:8e:c6:89:73:
0d:43:21:f1:23:59:26:28:73:63:59:24:ce:ab:ff:
48:23:6e:bf:14:77:cf:a4:9c:19:fb:37:dd:0f:24:
58:56:9c:9a:23:a9:00:2c:70:b5:51:7b:cd:54:c8:
c9:b1:11:c9:d1:09:1e:d2:3c:fb:65:29:2b:f0:c1:
bd:ae:1c:7c:94:48:61:a9:df:a2:3c:3b:bc:f4:1b:
cc:4f:67:cf:cf:a9:f7:59:e0:8b:08:04:d3:82:f4:
9c:9a:14:2b:a2:4f:b0:a3:e3:67:c5:95:d9:6a:80:
42:24:b1:b8:b1:4e:f9:1e:e3:b2:a4:fb:d5:36:55:
1e:e2:39:92:d6:71:d8:67:da:88:ef:8d:71:5d:07:
9f:f0:d6:80:9e:25:73:c5:54:41:d4:78:db:91:fc:
61:24:ad:47:70:86:d7:98:ae:c4:cf:d9:ed:93:36:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:4D:00:A0:7C:48:75:98:93:8F:7B:5A:88:F9:BE:1D:FB:75:B9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0NNAKB8SHWYk497Woj5vh37dbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d3:68:fd:12:31:1a:c5:11:78:7e:2d:b7:e7:29:d6:5f:87:68:
8d:93:c5:06:4c:0a:78:1e:95:88:53:5c:40:f0:d6:11:67:9a:
c4:fa:91:ab:c6:3c:9b:5c:12:86:ca:d4:ad:ca:9c:64:9f:9d:
f7:46:da:7c:ed:5c:c7:4d:f9:fd:38:94:d9:b6:19:4b:55:21:
e9:16:a6:70:de:e8:0e:af:a6:f5:79:6d:e7:2f:4b:11:dc:08:
3c:f5:c9:2e:85:cf:7d:bf:55:58:ee:c2:4a:2a:54:4d:0d:89:
a9:74:08:63:67:2e:c0:2b:59:5a:fe:9d:9f:53:09:83:c5:9a:
a9:52:9e:a1:75:97:09:3a:4a:d3:de:67:57:07:fc:83:27:23:
14:63:6b:29:1f:bb:ac:ed:12:48:fe:8a:f7:c0:6b:d5:64:58:
79:d4:9e:b8:1c:1c:13:94:c9:65:9d:a4:f4:02:15:db:70:1b:
6c:b4:e0:cd:2d:8b:e2:c7:b1:3c:9f:77:3d:c2:55:e2:1d:c3:
dd:c2:ad:4c:37:e5:3a:58:01:64:a1:6a:21:b9:e6:d2:52:8e:
f2:d3:4f:2e:70:3a:df:77:7e:28:0e:f1:97:41:e9:73:eb:e9:
26:c5:0b:04:27:d0:a1:e5:88:9f:62:6e:0a:5b:f1:53:fa:3b:
41:81:69:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH/hDkuRG4MQHpoHq/H+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQzNGQwMGEwN2M0ODc1OTg5MzhmN2I1YTg4ZjliZTFkZmI3NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e1DH0PED/l5r2FbZNAKJL6r+bSA
3oUtIBTexTf075PHXeY/MdarzKgdf+SKVbpeNsYv/6LLXyMcK2o4dSFg8pHTbd+D
Zv0r6vq5txk/9Z8ZItCdMY7GiXMNQyHxI1kmKHNjWSTOq/9II26/FHfPpJwZ+zfd
DyRYVpyaI6kALHC1UXvNVMjJsRHJ0Qke0jz7ZSkr8MG9rhx8lEhhqd+iPDu89BvM
T2fPz6n3WeCLCATTgvScmhQrok+wo+NnxZXZaoBCJLG4sU75HuOypPvVNlUe4jmS
1nHYZ9qI741xXQef8NaAniVzxVRB1HjbkfxhJK1HcIbXmK7Ez9ntkzajUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9DTQCgfEh1mJOPe1qI+b4d+3W5MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSDBOTkFLQjhTSFdZazQ5N1dvajV2aDM3ZGJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBeeAMA0G
CSqGSIb3DQEBCwUAA4IBAQDTaP0SMRrFEXh+LbfnKdZfh2iNk8UGTAp4HpWIU1xA
8NYRZ5rE+pGrxjybXBKGytStypxkn533Rtp87VzHTfn9OJTZthlLVSHpFqZw3ugO
r6b1eW3nL0sR3Ag89ckuhc99v1VY7sJKKlRNDYmpdAhjZy7AK1la/p2fUwmDxZqp
Up6hdZcJOkrT3mdXB/yDJyMUY2spH7us7RJI/or3wGvVZFh51J64HBwTlMllnaT0
AhXbcBtstODNLYvix7E8n3c9wlXiHcPdwq1MN+U6WAFkoWohuebSUo7y008ucDrf
d34oDvGXQelz6+kmxQsEJ9Ch5YifYm4KW/FT+jtBgWn9
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:29 2025 by rpki-client