Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/HqctvWxlrIEslD4ELNpmV-XhZkU.roa
File: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (raw, json)
Hash identifier: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=
Subject key identifier: 1E:A7:2D:BD:6C:65:AC:81:2C:94:3E:04:2C:DA:66:57:E5:E1:66:45
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0195EBB8C538E8AABE5DFCD1691C6BE0156C
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/HqctvWxlrIEslD4ELNpmV-XhZkU.roa
Signing time: Mon 31 Mar 2025 10:21:49 +0000
ROA not before: Mon 31 Mar 2025 10:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3342
IP address blocks: 193.163.36.0/22 maxlen: 22
193.163.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:b8:c5:38:e8:aa:be:5d:fc:d1:69:1c:6b:e0:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Mar 31 10:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ea72dbd6c65ac812c943e042cda6657e5e16645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:36:15:db:aa:25:02:cd:01:95:18:fb:d3:
d6:6f:4a:2e:80:b3:07:68:a4:f1:5c:35:51:74:8a:
d8:82:f6:7b:ae:2f:f2:7b:7f:cd:fd:fe:5b:56:87:
52:25:3f:eb:a6:5f:d8:fa:4b:23:08:df:12:da:82:
31:83:ea:45:28:63:1f:fb:f6:9e:66:f9:37:f5:cb:
6a:67:24:a3:6d:66:4b:af:4f:8d:c4:0c:27:18:09:
51:67:78:ab:9f:61:e7:25:01:da:9c:de:a6:92:43:
78:ab:91:11:6d:ea:90:14:74:a5:46:19:bc:18:70:
78:be:bb:cf:c6:0a:ab:f9:c9:5a:f6:f8:81:8c:74:
0e:48:b4:ab:cb:63:50:4e:d4:ae:f4:21:23:58:c0:
da:4f:9a:ba:0f:16:77:76:bb:88:98:74:fe:f9:e6:
bb:b3:45:96:ad:23:11:04:e6:c0:50:4b:1b:bf:f7:
c9:a2:95:a2:00:08:39:29:71:a1:25:b4:22:e6:eb:
b8:8d:e5:07:80:f8:78:2a:14:2d:05:df:11:7d:d2:
66:34:ef:46:1f:87:cf:6b:94:e6:be:bf:7d:a1:53:
a0:e2:44:40:f8:4a:8f:05:58:2b:17:89:89:d8:dd:
5c:5f:5d:4d:a2:19:4d:51:f3:c8:76:5f:f0:4b:fc:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:2D:BD:6C:65:AC:81:2C:94:3E:04:2C:DA:66:57:E5:E1:66:45
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/HqctvWxlrIEslD4ELNpmV-XhZkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
88:89:70:78:c0:c4:41:fc:e9:7d:49:8a:49:13:36:e2:35:5c:
80:ce:6f:f7:28:f6:1d:6f:9d:00:1f:45:5b:80:c3:cc:0f:bd:
28:ce:28:ed:93:cf:1e:6c:51:22:a8:01:6a:8c:d2:11:4c:d9:
3e:55:20:d8:c5:9b:ab:3c:4a:d7:55:3f:09:8e:78:3e:fd:bc:
22:8a:e2:37:7a:f4:12:1f:cb:55:33:83:c0:5e:71:6a:d7:c5:
ec:86:ff:2e:8b:f8:0f:4f:c2:41:4d:cd:cb:e8:25:78:b7:2a:
c9:9f:2d:e3:d9:cc:1f:67:09:71:cd:9a:09:33:3d:20:cd:d7:
99:68:f9:a2:d2:85:86:a2:cf:75:ce:d2:be:bf:64:df:21:f5:
4c:c7:14:64:40:86:74:08:92:86:aa:28:33:8b:ed:a1:a5:a4:
a9:a3:86:3a:2f:2a:37:f1:bd:94:ed:b4:55:fe:28:76:b3:1f:
44:a5:1f:15:3e:c5:55:76:96:90:f8:5c:43:8b:9e:4a:ce:6d:
1d:5f:34:9a:b3:40:c5:46:1a:c5:32:56:d6:17:9c:25:9c:02:
0f:db:5f:5a:cf:94:35:7b:c7:d1:04:00:2e:e7:2f:03:b4:fb:
06:5e:54:17:80:ab:1d:39:5b:2c:bb:fb:ab:ed:87:2a:3f:3f:
14:7a:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:21:53 2025 by rpki-client