Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HTHZV637COqOMMv4cRAf8uyfPWQ.roa
File: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (raw, json)
Hash identifier: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=
Subject key identifier: 1D:31:D9:57:AD:FB:08:EA:8E:30:CB:F8:71:10:1F:F2:EC:9F:3D:64
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0194228D7B153F95C46C902652FBB682C4D6
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HTHZV637COqOMMv4cRAf8uyfPWQ.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34309
IP address blocks: 193.56.217.0/24 maxlen: 24
2a05:a880:dc20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7b:15:3f:95:c4:6c:90:26:52:fb:b6:82:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d31d957adfb08ea8e30cbf871101ff2ec9f3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:b9:a4:85:ab:db:11:45:7e:3e:ef:7c:d5:
29:42:6c:f9:35:7f:0b:29:25:15:ec:ca:94:39:a0:
d9:0c:ca:7e:87:69:a2:1e:23:0f:a9:c7:22:ed:86:
7a:73:c1:85:84:f1:b0:c2:3c:bc:8b:16:ec:fa:9c:
74:88:cc:ef:0f:2e:c8:33:96:51:39:89:9e:b5:16:
df:72:ee:09:9d:9f:5c:39:a2:a0:1c:83:ee:b1:88:
de:e0:74:c9:24:c5:b2:68:a8:30:5a:d2:ce:67:00:
2d:f8:56:70:c7:f1:6b:81:78:c9:93:ca:2a:1a:9b:
56:b7:23:87:68:43:b7:81:7e:89:02:67:9d:32:9f:
c9:a5:3d:a4:1a:ec:d4:79:38:f2:f8:b5:88:c1:f9:
5a:16:22:00:b4:fa:34:d6:96:16:bb:47:d5:0a:f2:
0c:70:88:b7:d2:97:4b:9d:57:d6:7b:37:14:3d:59:
5e:46:26:86:d9:bb:ca:92:9e:f2:43:9b:d2:bd:10:
86:74:bc:41:71:bf:4b:50:43:96:a1:f8:91:53:2a:
ba:ef:7f:d6:49:af:68:21:75:47:28:85:2a:8d:30:
02:dc:c5:ba:b6:43:b1:37:09:39:4a:d1:70:94:bd:
9b:62:48:a9:69:d2:de:8a:f9:cc:6a:ce:20:98:28:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:D9:57:AD:FB:08:EA:8E:30:CB:F8:71:10:1F:F2:EC:9F:3D:64
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HTHZV637COqOMMv4cRAf8uyfPWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.217.0/24
IPv6:
2a05:a880:dc20::/48
Signature Algorithm: sha256WithRSAEncryption
75:56:23:01:5c:74:eb:0c:0f:83:25:c6:90:bf:23:42:3f:e9:
25:f7:a9:d1:53:44:d7:00:f1:dd:72:ed:2a:8e:bd:d9:9b:e5:
c7:a6:79:34:da:d1:e6:4e:7d:79:ef:89:7b:a3:b4:38:9f:2f:
0b:01:39:90:82:88:b7:cb:e0:1b:ed:03:de:f1:41:5b:de:50:
90:e2:87:0a:17:89:a0:ad:e2:4d:f9:53:09:21:8e:82:a9:2d:
64:33:03:56:ec:0f:4a:5c:4f:f9:36:46:71:d3:60:52:37:cb:
ba:17:6f:0b:90:07:76:dd:8a:ab:ba:3c:a0:8d:2d:a6:3e:6b:
fb:7e:82:ae:17:6c:38:90:3d:3b:39:56:1d:29:67:62:5b:82:
b7:b7:d1:4c:0f:0c:26:ae:6f:aa:2d:a5:10:f3:a9:e2:df:f7:
5e:10:0f:2e:53:14:d6:4f:25:d5:aa:ee:ac:66:f3:ef:91:24:
28:a3:2c:38:54:0d:2c:5b:4b:eb:2d:a5:12:54:5f:87:3d:c4:
12:0d:ee:73:3e:5d:50:5d:31:4c:c1:0d:14:57:b2:6f:11:9b:
b9:67:0d:74:df:52:7d:79:62:6b:03:5a:b9:2d:2f:81:f2:cf:
60:34:7b:1c:85:dd:24:5c:eb:5c:14:cc:e7:44:11:80:67:05:
19:ed:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:14 2025 by rpki-client