Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rHR740QdFeYt-oXm5Ii1K8ZT3P4.roa
File: rHR740QdFeYt-oXm5Ii1K8ZT3P4.roa (raw, json)
Hash identifier: E4l0OzQf6c07gGfinACV31TQa/1Jb10kBW19uN2IUi4=
Subject key identifier: AC:74:7B:E3:44:1D:15:E6:2D:FA:85:E6:E4:88:B5:2B:C6:53:DC:FE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C19E7659C8FE0F3E2D844D4C30285
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rHR740QdFeYt-oXm5Ii1K8ZT3P4.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34358
IP address blocks: 81.180.200.0/24 maxlen: 24
85.120.35.0/24 maxlen: 24
85.121.136.0/23 maxlen: 23
217.156.42.0/24 maxlen: 24
217.156.44.0/23 maxlen: 23
217.156.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:e7:65:9c:8f:e0:f3:e2:d8:44:d4:c3:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac747be3441d15e62dfa85e6e488b52bc653dcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:e3:b2:a1:72:52:ab:56:48:78:2e:d8:67:
37:3a:ac:ae:35:f3:c6:c1:e3:a9:6e:8c:83:66:44:
84:91:4b:72:c3:36:c3:2d:05:d1:24:b3:f6:0f:aa:
2d:49:a8:f2:27:a9:75:83:90:27:35:bb:88:3a:82:
63:0d:e0:fa:ea:4f:7c:46:2f:b0:ee:f3:94:57:f1:
97:c3:f0:18:50:31:63:f0:6d:ee:26:39:1d:00:47:
ff:9a:0f:59:27:f7:87:68:9f:7b:73:14:00:df:6b:
d0:ca:9a:31:d2:58:56:3e:29:a6:1a:14:ed:0a:51:
60:59:d5:af:d3:30:2c:5e:cd:7c:02:f2:cc:ad:34:
d5:ae:b4:9f:e7:7d:84:c7:b6:9f:ac:91:dd:4c:e6:
ae:84:88:2b:72:de:58:a8:39:69:b1:76:df:72:47:
4e:f7:f7:a5:c2:09:8a:ee:1c:65:c5:62:e1:fd:1e:
34:bb:28:ba:90:37:e8:0a:d0:6c:18:15:b5:6d:c6:
ef:2d:2e:81:42:45:0f:e9:a9:8e:8c:3e:26:34:c6:
b9:f7:26:ad:da:bc:9e:71:e7:51:d4:cd:2a:58:5f:
d9:fc:5b:68:2a:ba:a8:57:85:b4:ca:65:12:34:0b:
56:55:64:8c:98:3e:21:d7:86:d7:c0:c0:a1:f7:52:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:7B:E3:44:1D:15:E6:2D:FA:85:E6:E4:88:B5:2B:C6:53:DC:FE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rHR740QdFeYt-oXm5Ii1K8ZT3P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
85.120.35.0/24
85.121.136.0/23
217.156.42.0/24
217.156.44.0/23
217.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7b:e7:1b:d3:95:13:55:4e:b6:db:72:69:ed:c6:49:f1:c9:
a7:fd:99:dd:f9:48:f1:fa:89:18:43:69:e5:6f:0d:05:5d:4c:
bc:50:18:7f:9f:8a:6e:fc:89:46:2e:6f:0b:0c:88:0b:c9:82:
00:a3:11:cf:e1:a7:60:7f:30:63:cf:ab:6c:de:30:d4:7b:93:
34:0c:bf:81:d4:79:99:68:5c:4a:bb:6d:b9:60:00:49:e0:a0:
8f:cf:44:44:dd:0e:50:4d:ae:fe:c2:d9:e3:88:10:e3:99:81:
26:48:2f:3e:38:7a:fb:4e:a9:41:4b:64:17:03:aa:1d:39:c6:
eb:6e:f1:87:ed:c6:f4:0d:aa:f3:45:85:11:6d:68:21:8d:9c:
28:71:cb:12:24:a5:8c:5d:5e:b6:69:f0:31:2a:73:c8:69:f1:
e3:9b:aa:86:ac:d7:6e:aa:3f:76:95:74:9f:bf:31:43:d8:00:
5a:a6:a8:fa:b4:16:5d:84:95:0b:84:7b:76:2a:17:51:71:b8:
44:cf:ec:0e:28:c2:46:bf:03:b7:06:0a:91:a9:d1:28:f8:26:
8a:d2:3d:a3:e0:a3:38:cd:09:26:19:f0:7a:68:15:b9:6a:63:
e4:31:f5:20:76:39:d2:14:98:46:7e:f9:f6:b3:2f:22:18:28:
c4:31:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:11 2025 by rpki-client