Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HmP6_5w0faPAZloCkaNXPko8nqg.roa
File: HmP6_5w0faPAZloCkaNXPko8nqg.roa (raw, json)
Hash identifier: c8fKhemJWVlocNnAFgutiJu5DKyvvBcnFI9AjuiigTE=
Subject key identifier: 1E:63:FA:FF:9C:34:7D:A3:C0:66:5A:02:91:A3:57:3E:4A:3C:9E:A8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B1106EDAA649E3544C7A1CECABF0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HmP6_5w0faPAZloCkaNXPko8nqg.roa
Signing time: Thu 02 Jan 2025 13:48:51 +0000
ROA not before: Thu 02 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207633
IP address blocks: 188.132.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b1:10:6e:da:a6:49:e3:54:4c:7a:1c:ec:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e63faff9c347da3c0665a0291a3573e4a3c9ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:d5:40:03:10:45:59:21:91:61:e6:9d:0b:
ab:1a:f8:9f:dc:79:1f:b6:c9:4f:6e:d8:c0:ca:eb:
c8:e7:62:00:85:ea:34:c2:94:cf:e6:69:9d:7c:5f:
4e:83:3d:d4:36:ca:20:13:7c:5b:81:55:bf:ab:9f:
1c:26:60:5e:72:21:70:bf:51:f0:62:94:f1:a3:3a:
13:45:c2:27:e0:f3:be:c9:1c:e2:b1:a9:fe:aa:11:
91:41:90:48:83:9f:ca:eb:e0:bc:3a:d7:ed:4c:97:
a6:64:e8:8a:c8:29:b6:a3:ef:7c:0f:6e:b9:83:ff:
7e:c6:fd:6e:59:03:f8:61:7a:f1:a0:ef:fb:f1:3f:
70:87:d6:9c:c0:90:8f:6d:d8:2c:a2:2a:5c:95:80:
e2:59:e5:06:e6:8d:50:e3:48:08:c6:b7:f9:3e:72:
78:17:03:bb:1d:dd:86:57:a3:bb:bc:6d:f6:a2:e1:
36:1a:2b:78:9e:be:7d:1d:65:74:1c:17:e8:80:9a:
8f:e5:c9:90:d0:f8:5d:1a:20:8f:cb:3c:c1:d0:b6:
76:cf:a7:67:ce:25:c4:fc:00:2f:98:ef:a2:f4:18:
72:96:c4:56:a1:e0:2d:dd:7d:d9:73:a1:a8:b9:e5:
ab:55:49:95:fb:1b:ef:c8:cb:25:90:fc:e2:31:65:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:FA:FF:9C:34:7D:A3:C0:66:5A:02:91:A3:57:3E:4A:3C:9E:A8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HmP6_5w0faPAZloCkaNXPko8nqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:dd:fb:aa:8e:e5:6b:e2:0b:0a:0c:1d:81:9e:05:d5:31:77:
34:39:fd:d5:d7:40:6e:0e:d8:b3:61:c3:0a:ee:e5:1e:86:89:
7d:3b:2b:13:8b:e7:41:9e:b2:0b:bd:16:9f:18:66:90:26:2e:
30:48:de:05:db:7f:32:98:a3:f5:a2:27:79:93:2f:f5:da:03:
05:0f:4b:b7:ac:33:7b:7c:0e:b0:8a:2d:b4:7d:c4:b1:ec:d1:
39:c2:32:88:c1:bc:a6:77:db:73:77:cf:a3:37:43:a2:a6:9b:
3f:af:4b:94:9a:50:f4:24:69:ea:08:bc:da:78:4f:1d:fe:d6:
ce:b5:97:5d:07:22:15:da:58:5b:e8:01:ab:bd:c9:91:f8:07:
5c:f7:4b:d2:2f:af:d8:16:bd:ed:2f:a1:88:cc:0d:4b:6e:26:
b2:e2:0a:59:dc:88:54:c1:f5:b1:a3:22:4f:a9:8e:60:80:f7:
3f:85:34:ff:c9:c6:c0:3a:a3:77:6f:7e:43:bc:33:50:7b:70:
13:92:d5:22:0f:b9:22:28:35:00:81:79:40:fe:1a:94:20:42:
a8:26:2c:b2:45:17:29:5d:a7:8b:60:bf:ed:ce:de:80:5b:37:
7d:47:52:2f:36:18:e4:f8:06:2b:62:40:88:7d:14:a1:5e:93:
c3:6a:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:50 2025 by rpki-client