Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hgor3XOJG_33qkL94qd2eia1vzY.roa
File: Hgor3XOJG_33qkL94qd2eia1vzY.roa (raw, json)
Hash identifier: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=
Subject key identifier: 1E:0A:2B:DD:73:89:1B:FD:F7:AA:42:FD:E2:A7:76:7A:26:B5:BF:36
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A5DEAAF1225334110D5CA051BFFF
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hgor3XOJG_33qkL94qd2eia1vzY.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211252
IP address blocks: 85.92.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:de:aa:f1:22:53:34:11:0d:5c:a0:51:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0a2bdd73891bfdf7aa42fde2a7767a26b5bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:f0:e8:bd:ab:ac:b3:f2:ab:c7:77:ee:84:
5e:69:fd:f0:90:e2:23:63:d4:0f:7b:c9:e7:27:c0:
74:4c:fa:2c:03:b9:6f:5c:84:89:90:56:f1:53:59:
a2:cb:6d:7b:d1:d7:5f:0a:a1:e7:5a:b6:5e:c5:af:
ab:f7:8d:1b:9e:c2:f3:d9:73:a8:a8:09:5c:4b:f8:
a0:2f:65:7e:0e:b1:93:2d:a9:20:aa:d4:87:50:99:
b7:c8:df:ac:7d:5f:07:70:28:e9:a8:1b:19:17:ea:
4d:6c:c6:ac:42:1b:6f:54:2f:ce:a9:24:27:03:f2:
63:a4:e0:86:3a:65:31:6f:52:54:e3:dc:dc:5a:a3:
ce:0a:e9:63:e1:99:f3:b2:1f:65:d8:0a:69:19:22:
76:ce:bb:0e:ae:1e:55:61:c1:23:21:81:da:54:ae:
8b:88:f2:69:a5:d5:b4:10:5e:6a:e7:9c:c4:82:33:
68:14:c9:46:42:fe:da:09:95:2d:3f:b9:8e:cf:3b:
14:11:b8:07:08:d8:9e:04:f5:e5:08:fd:03:88:68:
49:f7:b8:9c:20:b0:b3:de:82:ca:c0:6c:50:ed:9b:
e9:34:4e:9e:e1:c3:00:e8:d2:35:3e:44:e5:e6:77:
31:05:79:aa:b9:8f:db:1f:cb:62:d2:dc:88:13:30:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:2B:DD:73:89:1B:FD:F7:AA:42:FD:E2:A7:76:7A:26:B5:BF:36
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hgor3XOJG_33qkL94qd2eia1vzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.113.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d5:16:81:18:d0:cb:a0:86:90:9f:82:9a:d0:7d:75:1d:dc:
91:05:a5:6b:d4:8c:d1:b6:6f:53:59:22:d9:96:e4:14:ea:73:
a8:c7:80:0c:b8:5e:76:b4:e2:54:93:41:28:e4:96:c5:9f:d2:
fb:06:28:e3:f3:51:0a:69:ff:ae:fb:1a:bd:78:4f:d8:6f:9b:
75:54:55:a7:e3:15:92:19:2b:94:24:2e:0f:fc:fe:92:0e:af:
1f:05:b0:d2:6f:f3:a5:a9:18:fd:c3:2f:eb:52:ad:e9:eb:e1:
dd:5a:b4:67:5e:b5:4f:ef:63:75:eb:2c:52:6c:96:85:b5:5b:
be:d2:63:af:f9:d4:5a:8c:fc:54:fc:ac:08:87:be:c5:5e:85:
38:f6:07:f1:5a:6e:f6:cd:c3:1f:3f:3a:78:71:9d:35:9d:56:
80:f1:3f:72:66:f6:22:7c:85:e0:8c:1b:f0:06:6f:7f:2b:c3:
25:ee:1b:2a:b2:0f:18:ce:37:90:fd:5b:bd:68:f3:52:4a:76:
ef:f6:ef:17:f2:e8:60:df:30:7b:54:97:bf:2b:83:0c:bb:89:
c8:f1:54:bb:19:3a:76:65:ae:2c:21:a3:6e:f1:8f:3a:2e:6c:
fb:8e:e0:d3:2e:a5:83:e5:0f:dd:51:a3:c4:0a:69:c2:b8:6f:
94:0b:3b:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks6XeqvEiUzQRDVygUb//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTBhMmJkZDczODkxYmZkZjdhYTQyZmRlMmE3NzY3YTI2YjViZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VTw6L2rrLPyq8d37oReaf3wkOIj
Y9QPe8nnJ8B0TPosA7lvXISJkFbxU1miy2170ddfCqHnWrZexa+r940bnsLz2XOo
qAlcS/igL2V+DrGTLakgqtSHUJm3yN+sfV8HcCjpqBsZF+pNbMasQhtvVC/OqSQn
A/JjpOCGOmUxb1JU49zcWqPOCulj4Znzsh9l2AppGSJ2zrsOrh5VYcEjIYHaVK6L
iPJppdW0EF5q55zEgjNoFMlGQv7aCZUtP7mOzzsUEbgHCNieBPXlCP0DiGhJ97ic
ILCz3oLKwGxQ7ZvpNE6e4cMA6NI1PkTl5ncxBXmquY/bH8ti0tyIEzCdDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4KK91ziRv996pC/eKndnomtb82MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSGdvcjNYT0pHXzMzcWtMOTRxZDJlaWExdnpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxxMA0G
CSqGSIb3DQEBCwUAA4IBAQB31RaBGNDLoIaQn4Ka0H11HdyRBaVr1IzRtm9TWSLZ
luQU6nOox4AMuF52tOJUk0Eo5JbFn9L7Bijj81EKaf+u+xq9eE/Yb5t1VFWn4xWS
GSuUJC4P/P6SDq8fBbDSb/OlqRj9wy/rUq3p6+HdWrRnXrVP72N16yxSbJaFtVu+
0mOv+dRajPxU/KwIh77FXoU49gfxWm72zcMfPzp4cZ01nVaA8T9yZvYifIXgjBvw
Bm9/K8Ml7hsqsg8YzjeQ/Vu9aPNSSnbv9u8X8uhg3zB7VJe/K4MMu4nI8VS7GTp2
Za4sIaNu8Y86Lmz7juDTLqWD5Q/dUaPECmnCuG+UCzsE
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:01:08 2025 by rpki-client