Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/HqUdNukgCT5prgnM_K-f0-if2vo.roa
File: HqUdNukgCT5prgnM_K-f0-if2vo.roa (raw, json)
Hash identifier: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=
Subject key identifier: 1E:A5:1D:36:E9:20:09:3E:69:AE:09:CC:FC:AF:9F:D3:E8:9F:DA:FA
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019420D5E914D502EDB12FFD32D2BB888955
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/HqUdNukgCT5prgnM_K-f0-if2vo.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196968
IP address blocks: 162.208.52.0/22 maxlen: 22
176.10.48.0/21 maxlen: 21
178.21.0.0/21 maxlen: 21
185.69.180.0/22 maxlen: 22
199.247.56.0/21 maxlen: 21
217.61.232.0/22 maxlen: 22
2a00:6e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e9:14:d5:02:ed:b1:2f:fd:32:d2:bb:88:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ea51d36e920093e69ae09ccfcaf9fd3e89fdafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:b6:d3:1b:d3:7b:0b:ec:26:f4:49:8d:91:
ef:fa:6b:98:73:39:ff:98:70:e1:9c:7b:d3:e5:05:
79:44:60:3b:26:5b:e9:32:4e:45:55:fe:01:38:f2:
84:dd:50:d5:2a:aa:af:84:c7:4e:14:8a:46:9e:7a:
29:36:2f:60:19:13:ef:d0:79:71:25:03:28:c4:32:
36:24:39:97:59:93:9a:a8:2e:87:a3:8f:d2:90:28:
62:f1:59:c5:c1:96:39:d3:16:6a:6d:17:65:0a:2f:
1b:24:76:45:44:7b:22:70:65:e8:38:0c:4b:87:3d:
0b:67:f8:6e:52:29:89:e6:87:8c:62:cf:fb:ad:d2:
a2:3b:e4:cd:06:4c:6d:ba:0e:d2:f8:8e:cc:2a:e5:
36:82:8b:26:29:55:16:ed:62:77:a5:ef:7a:ac:42:
d3:2c:36:04:98:04:b8:55:19:ee:27:48:c6:5b:c0:
5c:c7:de:d4:f6:5a:8f:3b:4f:fe:52:57:30:9a:c5:
e4:57:9b:9b:ab:b8:56:b9:d7:86:fa:c9:82:b1:d6:
65:c1:ab:1d:47:69:e6:ef:2a:2a:73:71:ef:dc:e6:
a5:16:50:a4:96:c6:21:91:62:96:08:0b:1b:c7:ce:
ac:b6:79:f8:ec:29:d0:a0:9e:ba:c1:d5:42:20:f2:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:1D:36:E9:20:09:3E:69:AE:09:CC:FC:AF:9F:D3:E8:9F:DA:FA
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/HqUdNukgCT5prgnM_K-f0-if2vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.208.52.0/22
176.10.48.0/21
178.21.0.0/21
185.69.180.0/22
199.247.56.0/21
217.61.232.0/22
IPv6:
2a00:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
a3:65:da:d8:5b:a1:3d:5d:a4:ad:84:30:19:31:85:39:d7:bb:
c7:73:72:0d:b2:f7:7e:f7:ec:2a:69:0b:f5:d9:2c:16:27:cf:
6d:b3:3f:cf:56:e3:b1:a0:75:0d:82:eb:84:19:cd:99:86:e7:
75:a9:2e:a1:63:98:a3:ef:9a:52:64:f9:a6:31:2c:80:ba:51:
a3:de:4b:26:8e:6d:b8:9f:e4:e2:a2:a1:87:ec:6d:49:67:2b:
ed:52:38:1d:c4:89:0b:5b:8a:d3:6d:b9:ea:96:b6:f3:1c:cf:
c7:8d:51:82:24:2d:7e:4f:41:cc:53:39:fc:47:f2:da:88:6a:
60:12:13:cc:eb:f9:a4:a4:86:bb:24:6f:f5:73:69:a6:83:a0:
eb:d3:1d:62:30:fc:d7:37:06:63:91:8e:9b:c8:98:59:7a:75:
f6:4b:4b:3d:5e:25:09:58:a8:b1:aa:05:5d:e9:78:0e:ee:64:
f5:e9:0d:bf:5f:5b:2d:09:26:03:75:3c:ab:89:fa:44:73:25:
64:d4:8f:65:1e:9c:70:d2:24:60:32:89:63:d8:69:0a:d3:ba:
82:e4:bf:15:1a:2c:af:5d:62:d8:8d:9b:a8:81:0e:09:5a:9b:
d6:e9:c6:87:e6:86:c0:7f:55:8e:97:32:51:64:79:51:c1:e8:
a1:c6:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:26 2025 by rpki-client