Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/HwX-edPrb5YTj1nsywewpB-a_TU.roa
File: HwX-edPrb5YTj1nsywewpB-a_TU.roa (raw, json)
Hash identifier: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=
Subject key identifier: 1F:05:FE:79:D3:EB:6F:96:13:8F:59:EC:CB:07:B0:A4:1F:9A:FD:35
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0196E32F0022F26AF62A1A88F890019F46EE
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/HwX-edPrb5YTj1nsywewpB-a_TU.roa
Signing time: Sun 18 May 2025 11:37:10 +0000
ROA not before: Sun 18 May 2025 11:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205814
IP address blocks: 185.122.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e3:2f:00:22:f2:6a:f6:2a:1a:88:f8:90:01:9f:46:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: May 18 11:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f05fe79d3eb6f96138f59eccb07b0a41f9afd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:ab:62:26:a8:ef:0d:09:f4:a4:00:46:73:
f9:57:f7:3d:8c:e6:5e:ae:78:ee:d6:fc:6a:1d:7e:
47:c9:62:be:71:15:4a:8e:e4:2c:cb:1d:67:f4:64:
a3:4c:b5:4e:13:f2:3c:7d:5b:f7:2b:2e:22:c0:67:
7f:77:a0:0c:38:03:36:3d:52:a2:2c:0a:53:2e:cc:
ec:14:47:52:46:d4:1e:1c:bc:3a:a8:cc:db:96:00:
08:06:5e:60:b3:49:5f:a3:62:c2:5b:2b:e3:32:35:
7f:69:98:d7:5e:96:4e:05:c6:27:54:eb:61:b1:1e:
77:4d:f2:8d:50:be:cc:88:76:00:a8:e2:31:35:40:
da:e6:9d:65:36:a4:83:97:04:15:7d:90:b2:e1:6e:
a6:f9:c6:68:96:2c:58:e6:27:08:87:eb:bf:64:16:
c4:15:d2:ef:db:47:55:3c:62:11:c7:ee:8c:7e:bc:
3a:94:22:4e:f3:31:41:eb:34:dd:79:53:a2:5c:42:
f0:df:e4:a9:7e:06:22:c6:68:1b:1f:ed:02:8b:c4:
80:eb:3a:02:98:7d:29:e9:dd:ae:49:24:1b:eb:55:
06:a2:bb:8b:fa:39:e4:4b:02:c3:50:39:41:31:72:
92:22:9d:9e:e3:3f:f9:f1:22:40:b5:00:f1:09:97:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:FE:79:D3:EB:6F:96:13:8F:59:EC:CB:07:B0:A4:1F:9A:FD:35
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/HwX-edPrb5YTj1nsywewpB-a_TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.254.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e3:d2:1e:1f:18:7b:d7:f9:9b:80:ee:ba:ad:93:80:bd:db:
79:49:76:ff:23:34:5e:35:75:0a:a2:7b:84:d8:db:bc:06:e9:
59:4f:5d:ca:c3:c0:c8:9d:b5:17:d1:bf:86:92:d8:98:25:36:
cb:44:9e:8f:44:25:b2:09:8c:42:1a:47:7c:96:04:1c:11:3b:
f7:42:33:15:26:ef:3f:01:8c:0c:61:bb:e4:67:d3:18:c7:6e:
3e:e5:bd:f8:a1:1e:1f:73:7a:88:f4:d6:61:12:14:54:60:5b:
2b:44:2d:f0:a1:28:c9:00:66:93:83:65:18:a2:fd:cd:48:1b:
9b:9d:5a:e6:34:05:88:dc:b2:0a:bd:89:7d:94:a2:2d:70:a0:
e5:76:3f:a1:4c:3b:aa:af:64:de:4b:67:81:b4:4e:f4:1a:c6:
d7:72:2d:59:fb:61:66:1c:bb:2e:a1:51:54:19:a4:5c:ed:f9:
ee:12:f3:9b:ac:ab:e0:f7:af:80:9b:20:64:d9:1c:a2:b7:8d:
9a:be:be:79:67:cc:75:12:5b:9b:08:2f:6e:b1:f4:17:be:1d:
f4:71:91:43:09:8e:e8:95:0e:4a:a3:47:01:15:03:e5:79:9e:
cc:a1:f8:6e:73:04:30:a3:90:81:0a:57:b5:8c:aa:e9:08:24:
ce:71:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:51:10 2025 by rpki-client