Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/h5hkogAm1tMHtJhfME4RZjDHuf4.roa
File: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (raw, json)
Hash identifier: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=
Subject key identifier: 87:98:64:A2:00:26:D6:D3:07:B4:98:5F:30:4E:11:66:30:C7:B9:FE
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019423D7CC4B8FBE5D81BAF4BE7850DD42DE
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/h5hkogAm1tMHtJhfME4RZjDHuf4.roa
Signing time: Wed 01 Jan 2025 21:48:52 +0000
ROA not before: Wed 01 Jan 2025 21:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198672
IP address blocks: 37.230.32.0/21 maxlen: 21
37.230.32.0/24 maxlen: 24
37.230.33.0/24 maxlen: 24
37.230.35.0/24 maxlen: 24
185.59.128.0/22 maxlen: 22
185.59.128.0/24 maxlen: 24
185.59.129.0/24 maxlen: 24
185.59.130.0/24 maxlen: 24
185.59.131.0/24 maxlen: 24
2a00:baa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cc:4b:8f:be:5d:81:ba:f4:be:78:50:dd:42:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Jan 1 21:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=879864a20026d6d307b4985f304e116630c7b9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:12:7d:fe:75:6c:37:c4:5f:6c:3e:ae:39:
02:32:a3:d0:4b:82:50:da:23:f9:c0:66:41:5f:ea:
05:18:41:a0:8a:bb:a4:17:3b:88:5f:f4:5d:97:2e:
ec:cb:54:c4:65:36:78:cb:a6:9b:48:97:0b:eb:dc:
14:75:c3:36:d5:58:04:72:f7:d6:a6:53:20:6c:b1:
4d:3a:42:1a:43:02:7b:c5:f1:8a:a5:41:f4:c5:a9:
6e:af:bd:07:49:cf:58:8e:11:9a:ca:b2:b1:bf:b8:
85:44:bf:5d:11:de:a8:76:cf:de:20:e5:97:07:20:
4c:62:81:8f:dd:04:bf:8b:5f:f3:1e:2a:56:e6:1e:
41:0b:ce:ec:96:df:16:27:5a:50:3a:d1:24:08:ef:
2d:b5:58:ae:a2:db:dc:20:4f:c0:26:21:17:c1:99:
37:38:9a:73:0b:92:83:da:a4:56:17:6f:93:9f:4f:
01:3c:7e:17:8b:00:f1:6b:b2:dd:8f:0b:1a:39:e8:
eb:33:4f:c5:a7:86:03:db:0d:e7:f8:7c:7b:9a:32:
46:c9:45:98:18:2d:47:c6:2d:c6:62:5c:88:c0:4e:
9d:5d:a8:b4:1a:16:2a:bf:52:ff:7b:50:08:b7:60:
96:cc:fb:31:12:94:38:cc:f7:e9:e6:f9:b1:fa:a8:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:64:A2:00:26:D6:D3:07:B4:98:5F:30:4E:11:66:30:C7:B9:FE
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/h5hkogAm1tMHtJhfME4RZjDHuf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.32.0/21
185.59.128.0/22
IPv6:
2a00:baa0::/32
Signature Algorithm: sha256WithRSAEncryption
36:5f:57:aa:9b:de:21:1a:01:32:78:07:9d:5c:83:a1:19:bc:
92:f9:d1:0a:5d:a9:f5:26:18:f2:06:50:84:80:03:6c:9c:c1:
f9:45:91:68:a7:13:d3:da:b7:ce:09:3b:a5:f7:ed:43:bd:42:
99:84:bf:4f:8f:8c:02:57:68:44:96:8b:11:cd:b8:f8:0b:fa:
23:e5:20:8c:3c:8a:82:34:90:e7:07:7a:39:cf:31:51:3a:63:
e5:8b:03:62:f0:3b:a0:e4:c1:7b:9b:e3:e6:e5:86:7f:22:16:
3f:20:c9:88:c3:a5:08:c1:61:ee:ed:dc:a0:a0:c6:85:e2:02:
78:5c:b2:06:9a:33:03:7f:96:ee:95:90:7c:47:9a:78:5f:7a:
4b:2d:de:92:79:dd:b0:fe:50:98:c2:90:b0:6b:16:f7:9c:5f:
dc:40:32:00:d6:cd:7b:bb:e7:b7:07:82:6d:2e:4b:3e:ec:e5:
1c:96:be:d6:d2:84:07:26:32:34:cb:65:7e:b5:9c:8a:8a:19:
07:f5:51:ad:0e:04:f7:76:5e:22:f4:33:11:b8:4e:51:08:11:
07:85:3a:57:13:af:3c:c5:66:bb:ba:0f:c6:18:4d:79:7c:e0:
f9:11:7c:4a:7f:0d:6b:3a:54:b5:27:9e:6f:dd:74:7a:97:b9:
f3:75:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:40 2025 by rpki-client