Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa
File: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (raw, json)
Hash identifier: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=
Subject key identifier: 87:9B:3E:46:BA:87:9D:5B:72:6D:0A:45:45:0E:55:60:B1:26:EB:23
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0194221F7E7B3DED9C0533D3305361937915
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44933
IP address blocks: 77.70.164.0/22 maxlen: 22
193.220.184.0/22 maxlen: 22
193.220.188.0/24 maxlen: 24
193.220.191.0/24 maxlen: 24
193.220.192.0/20 maxlen: 24
193.220.192.0/21 maxlen: 21
193.220.200.0/24 maxlen: 24
193.220.201.0/24 maxlen: 24
193.220.202.0/23 maxlen: 23
193.220.204.0/24 maxlen: 24
193.220.205.0/24 maxlen: 24
193.220.206.0/24 maxlen: 24
2a02:6600:2003::/48 maxlen: 48
2a02:6604:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:7b:3d:ed:9c:05:33:d3:30:53:61:93:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=879b3e46ba879d5b726d0a45450e5560b126eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:e5:86:2d:0a:c6:be:53:21:89:30:dd:fa:
d2:ef:7a:23:ef:52:d8:a8:30:5c:b6:16:da:76:19:
3a:8d:e0:9d:52:a9:49:d9:f9:ee:dd:8d:8a:68:67:
d6:c4:c3:0b:6e:71:57:ea:e7:90:71:45:e6:e3:2d:
17:05:80:7b:4b:6c:e6:79:26:4d:a7:4e:0c:20:f5:
65:6f:c5:69:15:49:2e:ca:18:e1:a8:19:cf:51:6e:
df:ff:f7:4a:91:c4:ca:56:a8:b0:1d:63:e5:a1:8f:
25:c5:20:39:cd:db:f3:c4:e9:cc:a1:8b:b3:9f:0e:
ff:19:00:e5:c9:52:f6:a8:0f:24:66:44:d9:48:c7:
4e:66:ec:15:3e:4b:00:2c:4f:4b:dd:61:ee:c4:3e:
b2:37:0a:2c:0f:10:8c:eb:2d:a4:7b:64:36:0c:1f:
56:16:07:58:00:47:f6:79:ec:85:35:96:92:83:32:
dd:b3:59:b3:9a:48:23:6f:d0:e8:7b:c1:ac:b9:f1:
b4:35:1b:97:d5:44:b5:8a:23:5e:0b:32:14:1b:0b:
4e:78:fc:b2:cd:cc:a7:e7:b6:76:d7:d3:14:91:e1:
62:e1:ca:c0:6d:a4:82:11:63:49:b8:fc:63:e1:b6:
1a:d9:29:74:b8:0d:12:03:be:f6:d2:95:87:eb:ce:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:3E:46:BA:87:9D:5B:72:6D:0A:45:45:0E:55:60:B1:26:EB:23
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.70.164.0/22
193.220.184.0-193.220.188.255
193.220.191.0-193.220.207.255
IPv6:
2a02:6600:2003::/48
2a02:6604:3::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a9:e9:e9:72:c2:d2:75:dd:64:93:70:f9:10:c0:27:d5:a9:
18:8e:e8:6d:7c:db:74:39:4d:62:e6:74:af:4a:ca:df:fc:7e:
cb:df:f2:7c:bc:72:ed:7f:7c:e3:4f:49:18:2d:18:5f:6b:4d:
a7:07:2b:b8:5a:11:22:c9:3d:8e:b9:7e:f2:f2:96:c4:49:88:
b7:ce:5a:09:98:02:42:1e:ee:55:f6:fa:59:f6:d4:6e:74:59:
75:db:6e:66:76:1c:4b:11:fe:2a:b6:1c:fc:68:89:30:ff:af:
25:2a:19:5a:9c:03:1d:a5:e6:70:44:70:b1:ef:63:f0:40:57:
5e:10:cb:18:08:0e:13:8c:9d:2a:6a:78:19:ea:7d:1b:19:25:
9f:89:7f:90:52:e6:68:5d:94:37:02:71:9f:ec:6a:00:7e:34:
c7:01:f8:34:90:c0:3c:64:73:53:97:36:ef:cc:22:0f:b6:e7:
05:07:34:d0:ee:8f:c3:f6:0e:c7:ac:b0:b4:35:fa:6f:91:55:
85:59:9f:84:a8:5c:c8:94:a3:84:21:91:ae:ef:3e:c8:47:4d:
30:b5:43:d3:7b:79:6b:91:be:4b:b1:82:b9:ce:75:24:ae:0d:
8e:2c:10:fb:6f:e4:c7:fa:28:a3:4e:34:aa:4e:93:37:b9:1b:
39:20:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:34:11 2025 by rpki-client