Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HuMS6tbq5aQLCex-hJhxp2WF_6c.roa
File: HuMS6tbq5aQLCex-hJhxp2WF_6c.roa (raw, json)
Hash identifier: tSkmN99RNdItzB8UZR1mZ7WRk5b+RJglrYqed07au4E=
Subject key identifier: 1E:E3:12:EA:D6:EA:E5:A4:0B:09:EC:7E:84:98:71:A7:65:85:FF:A7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B6C3D20BEA2B25B042912FB003F2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HuMS6tbq5aQLCex-hJhxp2WF_6c.roa
Signing time: Thu 02 Jan 2025 13:48:53 +0000
ROA not before: Thu 02 Jan 2025 13:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211567
IP address blocks: 188.132.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b6:c3:d2:0b:ea:2b:25:b0:42:91:2f:b0:03:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee312ead6eae5a40b09ec7e849871a76585ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:84:47:2a:84:66:7f:a0:e6:6a:93:f3:42:
58:62:dd:43:ee:11:68:b5:72:69:b8:95:3a:26:69:
cc:c5:61:63:3f:43:1e:ff:5a:08:9d:26:c4:77:ae:
d7:d9:69:ed:97:11:28:0d:da:61:bf:7d:be:43:12:
3c:2b:64:87:94:98:dc:c0:6a:47:eb:d9:ee:e3:da:
28:c8:c2:9a:62:df:5c:7c:6c:7b:e6:76:e0:7d:cf:
c4:d9:b3:19:b7:f5:95:89:82:7b:7e:c4:e2:5f:63:
be:48:24:11:dc:68:c5:a7:7f:c7:0f:82:3f:56:6a:
f7:63:e6:e0:44:d3:47:e2:df:c4:b8:6b:86:5f:14:
7c:a5:dd:10:6b:0f:5b:5b:b4:44:db:54:75:21:c6:
27:04:c5:b7:4b:02:6a:49:be:e4:66:2e:17:1a:84:
3a:98:34:06:62:09:24:28:cf:3d:8f:0f:9f:1d:00:
60:b4:ce:4d:6c:89:6e:d6:91:90:3f:60:3c:18:e2:
57:9b:91:d5:42:74:02:60:e9:2d:58:4b:61:ed:ab:
7e:8f:24:93:99:13:cc:1d:74:07:d0:11:11:28:e3:
1b:89:95:f1:8c:d5:8b:c4:d3:fe:d1:53:8e:b6:48:
5a:84:e6:61:0a:c2:ca:33:e9:e1:4d:5f:b3:21:0f:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:12:EA:D6:EA:E5:A4:0B:09:EC:7E:84:98:71:A7:65:85:FF:A7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HuMS6tbq5aQLCex-hJhxp2WF_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.231.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7c:a5:d9:da:47:fb:96:75:a7:ef:0a:f7:55:0b:4d:7f:fa:
17:fa:de:cf:4c:a5:46:6a:d5:a7:53:b1:12:76:81:f6:e9:2a:
33:41:ca:5b:03:59:b7:89:e2:c7:d8:78:20:c5:39:a9:bb:2e:
62:29:93:1b:32:55:19:6e:83:00:13:dd:3c:45:de:4f:34:19:
c6:58:ec:86:af:2a:61:83:cc:cd:b4:65:24:25:d8:f4:05:e6:
43:50:95:93:62:d6:5c:5e:d8:5a:71:b7:ee:63:6e:1e:4c:41:
ab:c2:c7:24:8f:9d:2f:16:55:b4:94:c4:13:37:ea:12:35:38:
44:b6:7c:30:9d:d7:c0:47:70:2e:a2:85:7b:bd:1c:80:47:44:
f3:b2:90:cf:bc:ea:12:80:de:69:f8:df:85:2d:5d:f4:0c:43:
c9:f1:ed:4c:13:da:f0:1f:4e:85:26:4f:c4:2d:f7:94:fb:3d:
97:8b:f2:08:dc:33:a5:50:0f:b5:49:d6:5e:d7:46:e8:e3:45:
36:bb:4d:57:80:b9:2f:0f:d5:ba:8d:32:68:23:4f:28:0d:62:
55:fd:e4:64:c8:71:96:7e:fc:7b:b6:3c:c0:e8:45:4e:de:8d:
ad:df:22:32:f0:63:41:57:a3:2d:59:1a:9a:13:91:fb:4c:6c:
f7:d8:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:22 2025 by rpki-client