Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HhonrXRKHQKB2co4dbcsZpGRXzk.roa
File: HhonrXRKHQKB2co4dbcsZpGRXzk.roa (raw, json)
Hash identifier: p1B8fKwoSqgN9RGXKuryoo/lsiPN+EuEqcLWzK+cAFE=
Subject key identifier: 1E:1A:27:AD:74:4A:1D:02:81:D9:CA:38:75:B7:2C:66:91:91:5F:39
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0195556D48125B96AF0F64B52741732F1432
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HhonrXRKHQKB2co4dbcsZpGRXzk.roa
Signing time: Sun 02 Mar 2025 05:56:19 +0000
ROA not before: Sun 02 Mar 2025 05:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.228.0/22 maxlen: 24
212.116.236.0/22 maxlen: 24
212.116.236.0/23 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:6d:48:12:5b:96:af:0f:64:b5:27:41:73:2f:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 2 05:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e1a27ad744a1d0281d9ca3875b72c6691915f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:66:55:05:70:cd:41:74:1c:d7:0b:14:d7:
ed:3e:fd:09:0d:0f:d7:52:d9:f2:d2:eb:1d:2d:f4:
e3:fb:94:f3:d9:da:d7:b3:b9:a7:f4:01:0b:17:f0:
6a:48:2f:be:02:c7:41:c9:1b:19:f0:02:46:d4:62:
fa:b5:2a:7e:e5:b2:6e:d4:d3:a1:66:a4:87:c5:28:
b7:2c:9e:4e:5e:7b:0d:7c:97:07:fc:bb:f0:88:b1:
26:69:4a:4f:b2:53:ec:62:c5:37:b2:6d:73:0a:12:
59:2a:49:a7:ff:d9:75:66:f6:bc:cd:df:ef:7a:60:
c6:09:5d:86:1e:83:4c:38:c6:40:94:75:63:b0:c1:
00:3d:18:ff:71:f9:37:d3:59:cb:9b:11:2b:76:31:
8f:ee:29:b2:aa:fc:93:16:7f:7d:a9:4d:b4:5e:33:
2e:0b:6a:51:7c:cf:58:42:cc:8b:f0:43:f4:28:9b:
0c:e2:53:87:17:d3:e1:b3:7d:3e:5b:75:52:8a:ef:
81:58:b9:f9:39:1e:f4:75:7b:9f:85:96:9d:f7:ac:
2d:fc:78:b0:95:2e:f2:5e:ff:b8:50:e7:9f:b3:4b:
bf:5d:b4:c4:41:a9:ea:72:b2:a4:33:e3:8d:e4:f7:
cc:ae:d5:db:d8:a1:58:88:5d:62:b9:f0:b5:86:17:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:27:AD:74:4A:1D:02:81:D9:CA:38:75:B7:2C:66:91:91:5F:39
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HhonrXRKHQKB2co4dbcsZpGRXzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0-212.116.231.255
212.116.236.0/22
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fd:79:33:a8:65:ec:97:e6:7f:ee:4f:88:08:03:ae:d8:ed:
54:37:7b:b5:eb:4a:8d:d9:85:94:6e:c9:e6:3d:20:f2:c1:b5:
bc:59:ed:7b:4a:59:16:e7:f9:71:df:49:51:36:bb:1d:9c:ab:
97:f7:35:57:e7:31:da:18:c0:c0:43:ac:eb:0b:5d:ed:e2:76:
31:25:b7:47:dc:b4:19:0c:4c:66:7e:54:5e:64:50:67:d2:a2:
fd:37:68:af:13:1d:49:4b:1f:6b:85:8c:23:25:39:c5:bb:0b:
51:90:a6:f1:e0:3b:b3:a6:78:15:90:9d:de:54:a9:13:6b:8f:
45:d2:c7:7f:07:f6:b4:cc:86:37:e7:2b:38:5c:4a:ca:72:eb:
2f:60:5b:ca:88:29:02:6c:0a:63:cc:9a:84:ba:4b:3a:23:8b:
eb:b9:aa:4e:a9:9f:39:6e:40:14:14:71:1b:aa:49:0e:a1:e0:
8b:6f:74:13:71:a6:c0:81:1c:1b:07:ac:07:bd:fe:91:28:b1:
49:07:30:b9:0d:73:89:cb:79:42:53:f8:24:e6:51:1d:0c:2e:
bb:e4:cb:e4:76:6a:b6:b9:ae:24:97:13:c5:30:3f:48:4a:c2:
65:fe:1f:fd:75:92:0d:26:d2:3c:0c:d4:bb:3b:57:a9:02:e8:
6c:3b:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:13 2025 by rpki-client