Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/HZb4ypfyyLknrNflDGCKDQospm0.roa
File: HZb4ypfyyLknrNflDGCKDQospm0.roa (raw, json)
Hash identifier: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=
Subject key identifier: 1D:96:F8:CA:97:F2:C8:B9:27:AC:D7:E5:0C:60:8A:0D:0A:2C:A6:6D
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 01942369218BA39C7EA68AD867F27D0FC927
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/HZb4ypfyyLknrNflDGCKDQospm0.roa
Signing time: Wed 01 Jan 2025 19:47:59 +0000
ROA not before: Wed 01 Jan 2025 19:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41779
IP address blocks: 185.211.108.0/22 maxlen: 22
2a0b:6440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:21:8b:a3:9c:7e:a6:8a:d8:67:f2:7d:0f:c9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: Jan 1 19:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d96f8ca97f2c8b927acd7e50c608a0d0a2ca66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:e8:3e:64:c3:5e:ba:d0:17:2e:cc:83:51:
4b:98:e3:0f:a1:d8:f6:19:40:3e:dc:05:70:23:2f:
ac:e9:62:f4:ba:80:89:1c:5b:ac:c1:24:a3:00:4b:
30:c6:64:fc:00:0f:cd:d2:85:06:7b:8e:c6:f9:d9:
30:7f:ae:f3:7a:a2:53:c5:fd:2b:70:db:c1:12:81:
c4:72:f7:1d:f8:de:d1:67:c2:28:cf:2a:22:53:68:
60:36:c2:3a:08:af:c2:7d:67:8e:15:6e:aa:da:7d:
7b:60:8c:ae:db:fa:ec:76:28:27:c7:f3:1b:eb:c6:
1e:54:49:b3:5d:4a:e3:72:c1:b1:31:7a:34:9d:af:
66:e4:18:57:e1:78:0a:35:d3:42:26:a6:b7:9b:b9:
a5:95:b2:fc:2c:19:f8:06:c3:dd:f0:60:15:88:2e:
c3:9f:bf:29:79:8d:2e:0d:0d:ec:b3:ed:51:49:71:
23:36:b6:49:9f:1f:dd:19:30:34:ab:bc:5c:e6:f0:
b0:b6:b6:ce:23:46:92:64:56:92:8b:ad:6c:84:42:
5f:53:54:35:9f:2e:55:91:fe:24:26:6b:8c:ff:cc:
be:1c:cd:8a:76:c5:34:ca:b9:1d:92:91:a7:65:c8:
a3:8a:8c:37:cb:4a:e6:1a:5e:7b:85:6c:b0:71:cf:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:F8:CA:97:F2:C8:B9:27:AC:D7:E5:0C:60:8A:0D:0A:2C:A6:6D
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/HZb4ypfyyLknrNflDGCKDQospm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.108.0/22
IPv6:
2a0b:6440::/29
Signature Algorithm: sha256WithRSAEncryption
74:e8:31:01:56:df:64:ac:d8:32:56:0e:24:cc:c1:10:a1:3d:
7e:c8:77:bd:6e:1c:23:21:60:55:0a:16:91:cb:89:b1:f8:7e:
15:ad:7b:d6:6f:bc:6a:64:98:0d:89:5a:c1:59:64:da:5c:a0:
c7:b9:ec:4d:e2:32:dc:d6:2c:f8:9f:c0:91:39:a5:c9:ce:c1:
29:85:52:c3:8d:20:50:a5:b2:43:43:dd:2a:7e:87:0e:69:71:
13:1f:d0:0c:fe:e1:fd:f1:44:f7:53:27:5a:6d:80:9b:55:48:
0b:b9:ab:e5:a2:99:da:59:3e:6e:22:1a:97:f1:6e:63:8b:9e:
4c:a0:5f:13:f0:81:62:92:34:34:44:99:01:1b:26:69:11:d4:
f4:45:54:d7:85:5a:2f:ee:eb:c6:5c:9a:00:7e:1a:43:a9:53:
13:64:53:e4:de:61:d7:89:46:43:4d:76:91:c9:5d:7c:02:7d:
7a:63:7f:47:98:46:9d:31:e5:97:c3:23:6a:32:c6:33:cc:13:
c9:4d:be:8a:e8:87:70:ac:c1:e2:77:4c:d8:b5:65:06:ab:55:
c7:20:58:71:ec:e1:71:34:6e:c4:11:e5:bc:0e:30:83:5b:92:
a4:dd:0b:d9:b5:ea:24:c5:7e:84:3d:8c:47:48:f3:e7:32:80:
62:f1:35:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjaSGLo5x+porYZ/J9D8knMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzhhOTgzY2Y0MzczYWE0OTc0OTg1YWIyMmQ1MTRjMGY0
ODFkMmUwHhcNMjUwMTAxMTk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk2ZjhjYTk3ZjJjOGI5MjdhY2Q3ZTUwYzYwOGEwZDBhMmNhNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+boPmTDXrrQFy7Mg1FLmOMPodj2
GUA+3AVwIy+s6WL0uoCJHFuswSSjAEswxmT8AA/N0oUGe47G+dkwf67zeqJTxf0r
cNvBEoHEcvcd+N7RZ8IozyoiU2hgNsI6CK/CfWeOFW6q2n17YIyu2/rsdignx/Mb
68YeVEmzXUrjcsGxMXo0na9m5BhX4XgKNdNCJqa3m7mllbL8LBn4BsPd8GAViC7D
n78peY0uDQ3ss+1RSXEjNrZJnx/dGTA0q7xc5vCwtrbOI0aSZFaSi61shEJfU1Q1
ny5Vkf4kJmuM/8y+HM2KdsU0yrkdkpGnZcijiow3y0rmGl57hWywcc+QsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB2W+MqX8si5J6zX5Qxgig0KLKZtMB8GA1UdIwQY
MBaAFG84qYPPQ3OqSXSYWrItUUwPSB0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQt
YWY1YTU2NzczMmVmLzEvSFpiNHlwZnl5TGtuck5mbERHQ0tEUW9zcG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQtYWY1YTU2NzczMmVm
LzEvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudNsMA0E
AgACMAcDBQMqC2RAMA0GCSqGSIb3DQEBCwUAA4IBAQB06DEBVt9krNgyVg4kzMEQ
oT1+yHe9bhwjIWBVChaRy4mx+H4VrXvWb7xqZJgNiVrBWWTaXKDHuexN4jLc1iz4
n8CROaXJzsEphVLDjSBQpbJDQ90qfocOaXETH9AM/uH98UT3UydabYCbVUgLuavl
opnaWT5uIhqX8W5ji55MoF8T8IFikjQ0RJkBGyZpEdT0RVTXhVov7uvGXJoAfhpD
qVMTZFPk3mHXiUZDTXaRyV18An16Y39HmEadMeWXwyNqMsYzzBPJTb6K6IdwrMHi
d0zYtWUGq1XHIFhx7OFxNG7EEeW8DjCDW5Kk3QvZteokxX6EPYxHSPPnMoBi8TVr
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:17 2025 by rpki-client