Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hjliZImX4ZA6GRasJRkTbOtu_ME.roa
File: hjliZImX4ZA6GRasJRkTbOtu_ME.roa (raw, json)
Hash identifier: cQbhT6I2nIBJqkeY9ljecufKlpT5rsHGrOPPXJHUmtQ=
Subject key identifier: 86:39:62:64:89:97:E1:90:3A:19:16:AC:25:19:13:6C:EB:6E:FC:C1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A2AD3029F9A412DFBE96ECFE98DD
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hjliZImX4ZA6GRasJRkTbOtu_ME.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216063
IP address blocks: 2.56.244.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a2:ad:30:29:f9:a4:12:df:be:96:ec:fe:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=863962648997e1903a1916ac2519136ceb6efcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:ca:00:58:7b:b9:8f:1a:38:1d:11:de:c4:
da:53:90:b0:ce:9c:3a:68:7f:15:39:5e:aa:22:2d:
19:a2:49:2c:56:52:53:d2:42:28:7f:e8:e6:26:66:
24:75:35:f7:e0:49:5b:5f:93:a9:1c:e1:15:3a:de:
b3:ae:5b:74:d3:98:f7:9d:9a:98:3a:d9:55:7d:0f:
9d:2d:ec:2e:8d:a1:bd:6b:f4:81:c6:15:39:23:c1:
1f:94:44:e6:fe:6f:51:47:94:e3:1f:e2:b6:8e:35:
12:71:d7:6b:91:f8:ca:68:73:95:c9:60:6d:c2:79:
60:f1:97:bf:41:81:f4:d1:21:75:55:85:74:8e:90:
6a:80:c4:0a:40:d5:85:22:b6:59:e6:2e:c3:f9:d1:
af:24:c4:11:d5:e0:02:06:9c:d4:65:63:4f:ae:21:
f1:02:18:98:62:65:51:d9:ac:64:85:a6:e1:a9:58:
44:f2:8d:bc:0a:51:05:1f:fb:d3:de:f3:12:af:47:
4e:f9:51:34:56:2d:39:92:e5:70:9b:44:8d:04:e5:
09:5f:d1:c3:0e:df:75:6b:63:45:cf:56:ec:3d:9c:
15:a1:40:7b:1f:fb:50:b9:be:b0:26:d5:47:e5:54:
58:9e:48:d6:cf:ee:5b:b0:2a:da:80:f7:3d:6b:65:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:62:64:89:97:E1:90:3A:19:16:AC:25:19:13:6C:EB:6E:FC:C1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hjliZImX4ZA6GRasJRkTbOtu_ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.244.0/24
45.84.196.0/24
45.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c0:96:1c:bb:d7:91:fb:62:eb:d8:3c:5e:27:5d:2d:a6:53:
b3:8c:99:28:7a:2d:15:16:7c:26:2b:49:a3:f5:61:cf:54:61:
5e:ee:98:eb:9c:3d:84:96:f7:ce:e8:5b:da:ea:d2:72:df:6e:
5a:d8:e2:11:46:46:1d:2a:57:b0:f1:af:e3:10:22:2d:99:6a:
9c:c0:36:f9:79:85:e8:09:11:36:91:14:48:54:bd:6a:97:e7:
74:45:84:0e:d2:c1:ca:2a:90:3c:26:b2:a8:b5:a6:cd:c3:bf:
bd:57:42:72:31:d5:47:b3:dc:48:35:57:53:6f:5b:eb:13:2b:
33:e4:f8:38:ee:c0:0e:53:a8:cd:12:eb:87:7c:73:c4:e3:69:
75:3c:f3:32:d4:47:a8:4c:48:25:20:13:19:c7:20:ca:24:9b:
fd:ff:69:2f:4a:7d:95:b0:56:fb:57:56:32:02:2d:5c:d1:ec:
56:8c:f5:8a:cc:ae:32:5e:fd:48:43:44:a3:0d:b7:f2:6e:1e:
dd:58:14:0d:8e:c7:b6:fa:3f:d4:96:7f:a6:a1:a7:99:14:a5:
c0:94:f7:45:40:93:57:7f:cd:6f:8a:bf:be:01:28:f6:16:38:
b7:c7:59:76:54:7e:4f:d1:06:2a:44:59:c3:b0:54:32:d0:24:
79:23:82:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnSKKtMCn5pBLfvpbs/pjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjM5NjI2NDg5OTdlMTkwM2ExOTE2YWMyNTE5MTM2Y2ViNmVmY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhTKAFh7uY8aOB0R3sTaU5Cwzpw6
aH8VOV6qIi0ZokksVlJT0kIof+jmJmYkdTX34ElbX5OpHOEVOt6zrlt005j3nZqY
OtlVfQ+dLewujaG9a/SBxhU5I8EflETm/m9RR5TjH+K2jjUScddrkfjKaHOVyWBt
wnlg8Ze/QYH00SF1VYV0jpBqgMQKQNWFIrZZ5i7D+dGvJMQR1eACBpzUZWNPriHx
AhiYYmVR2axkhabhqVhE8o28ClEFH/vT3vMSr0dO+VE0Vi05kuVwm0SNBOUJX9HD
Dt91a2NFz1bsPZwVoUB7H/tQub6wJtVH5VRYnkjWz+5bsCragPc9a2V18wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIY5YmSJl+GQOhkWrCUZE2zrbvzBMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvaGpsaVpJbVg0WkE2R1Jhc0pSa1RiT3R1X01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjj0AwQA
LVTEAwQALZMHMA0GCSqGSIb3DQEBCwUAA4IBAQBYwJYcu9eR+2Lr2DxeJ10tplOz
jJkoei0VFnwmK0mj9WHPVGFe7pjrnD2ElvfO6Fva6tJy325a2OIRRkYdKlew8a/j
ECItmWqcwDb5eYXoCRE2kRRIVL1ql+d0RYQO0sHKKpA8JrKotabNw7+9V0JyMdVH
s9xINVdTb1vrEysz5Pg47sAOU6jNEuuHfHPE42l1PPMy1EeoTEglIBMZxyDKJJv9
/2kvSn2VsFb7V1YyAi1c0exWjPWKzK4yXv1IQ0SjDbfybh7dWBQNjse2+j/Uln+m
oaeZFKXAlPdFQJNXf81vir++ASj2Fji3x1l2VH5P0QYqRFnDsFQy0CR5I4IX
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:28:39 2025 by rpki-client