Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa
File: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (raw, json)
Hash identifier: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=
Subject key identifier: 1C:41:45:4E:F1:43:79:6E:83:DB:37:57:EA:51:D1:3F:29:3B:11:AE
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019421B23F661CEBA9287E0C60595E12D8AD
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41998
IP address blocks: 178.212.90.0/23 maxlen: 23
178.212.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:66:1c:eb:a9:28:7e:0c:60:59:5e:12:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c41454ef143796e83db3757ea51d13f293b11ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:71:22:c0:31:60:08:da:c9:99:9a:ba:67:
0c:9e:7c:c0:34:40:75:98:3d:59:d6:e3:7d:4a:80:
9f:54:76:74:cd:69:67:45:ff:68:60:9d:0e:21:5a:
d0:ca:9b:15:47:54:9e:d7:02:a4:ce:78:d4:11:78:
aa:72:a3:4b:1f:bb:bc:f6:cd:12:82:4b:5d:21:7f:
bb:c8:8e:5c:b3:7e:61:07:76:70:ca:83:5b:a4:04:
f2:1b:c7:29:31:e6:49:15:f6:1e:d7:bc:db:d8:8d:
f4:63:1b:43:d7:1c:f0:5f:7e:3c:1e:1b:15:2f:26:
b8:6d:e3:2b:c7:67:74:1c:af:17:f7:09:65:95:c2:
ef:6d:13:6d:16:4a:32:80:31:54:a7:0b:dc:6a:db:
17:56:50:10:3e:ea:84:07:32:66:18:55:51:71:20:
d6:30:a0:fb:3b:c5:47:a4:65:91:07:98:7b:d6:08:
66:0e:41:ff:85:2d:9c:c8:a4:49:83:ba:a1:24:f7:
9f:4d:a4:f7:52:91:dc:c2:ae:61:55:13:5c:fe:f2:
00:31:d0:86:44:c7:ac:2b:1d:e8:2a:f6:86:40:96:
ab:1e:ce:53:d7:12:fa:08:23:da:da:b9:99:46:04:
86:1d:de:ed:5b:8f:ed:f9:22:35:61:5b:e8:60:8e:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:45:4E:F1:43:79:6E:83:DB:37:57:EA:51:D1:3F:29:3B:11:AE
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.90.0/23
178.212.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:0a:67:52:c8:f6:ee:ef:50:54:d1:98:78:ff:73:54:5c:40:
02:a6:f5:f5:6a:a5:5b:1f:1f:8e:9c:76:b2:ab:13:43:e1:c5:
06:46:64:0f:60:0c:c8:f6:87:c9:4b:48:58:74:ef:2e:3e:09:
fd:44:3e:24:30:61:bd:0d:f4:70:8e:dd:d0:78:80:9f:97:c2:
17:72:c1:2e:ce:e6:38:87:ee:6e:d7:8b:05:d1:ef:08:01:b7:
ba:2c:42:01:01:ec:9d:22:6d:8d:15:df:7e:8f:6c:40:f2:1f:
e0:35:88:42:93:37:d9:eb:35:c0:d7:7e:96:ef:32:3f:64:5c:
f2:3d:1f:b0:5f:bb:9a:c8:07:20:ce:07:f6:86:38:1d:5f:5d:
a8:93:ab:04:bb:72:d2:24:c9:40:fe:4a:10:b0:97:0e:ec:7b:
de:8f:be:76:09:48:a4:02:e5:6e:6c:19:67:5d:64:22:33:33:
c7:fe:92:2e:1d:47:c5:07:83:93:e8:59:22:35:6d:6c:9f:5c:
e5:b3:64:ab:da:bd:76:24:98:98:0f:aa:b7:5f:44:48:69:ae:
ed:fa:d4:4d:82:d3:8d:9a:8b:4a:3f:8b:8a:c1:38:b9:15:78:
f4:7b:ff:35:08:d5:3d:06:47:a0:00:23:2d:db:27:c8:3f:0f:
04:d8:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:46:48 2025 by rpki-client