Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/haxTlRYy2yO-0mAOlc4jzaKbbWo.roa
File: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (raw, json)
Hash identifier: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=
Subject key identifier: 85:AC:53:95:16:32:DB:23:BE:D2:60:0E:95:CE:23:CD:A2:9B:6D:6A
Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial: 0194221FAA06E8822D0A0A4ED45D72F2612A
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/haxTlRYy2yO-0mAOlc4jzaKbbWo.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6893
IP address blocks: 62.220.128.0/19 maxlen: 19
62.220.149.0/24 maxlen: 24
62.220.150.0/24 maxlen: 24
62.220.158.0/24 maxlen: 24
185.125.196.0/22 maxlen: 22
185.125.196.0/23 maxlen: 23
185.125.196.0/24 maxlen: 24
185.125.197.0/24 maxlen: 24
185.125.198.0/24 maxlen: 24
2001:788::/29 maxlen: 29
2001:788::/32 maxlen: 32
2001:789::/32 maxlen: 32
2001:78a::/40 maxlen: 40
2001:78c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:06:e8:82:2d:0a:0a:4e:d4:5d:72:f2:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85ac53951632db23bed2600e95ce23cda29b6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:55:43:69:62:9f:0e:a1:2c:76:e8:23:64:
62:c6:67:7a:47:f2:b9:20:4c:92:37:1b:6e:60:55:
ab:80:5a:dd:ec:8d:85:07:b2:97:2e:09:06:1e:43:
14:30:0b:47:6e:89:43:3f:1c:74:4b:cb:e4:62:ff:
08:02:ee:3d:9d:4a:b3:b2:2a:1c:40:8b:87:49:bb:
18:80:69:64:d7:21:50:04:a0:db:36:58:3d:f4:8d:
cc:be:af:0f:99:16:0b:93:c7:87:16:a6:22:cc:fb:
5c:1d:e8:2e:2b:e2:03:3e:cb:99:0c:0b:2f:59:38:
e8:d8:b2:12:8c:31:23:75:82:0d:f1:27:56:18:e8:
7b:f3:c5:ca:e9:ec:db:e1:c4:f7:f1:f4:a0:8a:0b:
1b:af:f1:28:0d:87:25:84:87:d9:e4:1c:7f:22:81:
60:84:63:83:c3:94:ed:d6:26:e4:24:48:57:c2:75:
36:e8:ce:4f:89:a8:13:b0:00:f6:0a:84:bb:2b:77:
a4:15:d1:aa:24:a4:ab:b7:54:76:91:ad:bd:9e:ba:
08:8b:66:99:84:a9:60:42:40:a0:d3:13:7d:aa:a2:
b7:71:00:19:f0:b8:a8:05:9b:a7:53:c9:cc:0b:c4:
4d:a3:e4:bd:1f:99:32:24:57:d0:23:e0:13:7d:b5:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:53:95:16:32:DB:23:BE:D2:60:0E:95:CE:23:CD:A2:9B:6D:6A
X509v3 Authority Key Identifier:
keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/haxTlRYy2yO-0mAOlc4jzaKbbWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.128.0/19
185.125.196.0/22
IPv6:
2001:788::/29
Signature Algorithm: sha256WithRSAEncryption
4f:04:5a:3d:28:6c:f6:ae:42:2a:3c:3a:4e:a9:3c:85:d2:a9:
c7:c6:c7:7c:5a:52:7f:d8:b5:c8:67:4a:d5:aa:d5:4c:1a:8b:
cc:91:49:83:f3:e8:c0:f7:e7:12:f6:5e:c2:5a:47:38:d9:c5:
25:cd:c7:88:9c:ad:08:ef:5c:b2:72:06:4a:80:9a:69:89:d5:
5c:d7:23:23:4b:f5:fb:42:48:72:6e:05:a2:50:37:2f:38:fc:
32:a9:73:10:21:be:7e:31:e8:05:05:d6:d3:96:ae:c9:a2:26:
43:83:31:63:c7:4d:3e:78:95:95:19:65:68:10:48:e3:35:72:
98:f1:4e:dd:f4:44:e4:2d:8d:6a:ed:57:ab:db:a2:3b:9c:4d:
eb:c6:1d:fd:6b:18:6c:4b:76:9e:10:c1:e2:51:a2:6f:d0:f7:
d1:56:05:ea:56:07:79:8c:e0:b7:97:67:ea:13:6f:f7:f2:03:
c3:d9:85:cc:bf:fc:d9:d5:77:df:15:bc:68:5c:2f:cc:d5:69:
ae:19:77:a5:e7:d8:06:01:f3:4c:1f:6e:a0:2f:c8:8f:45:95:
80:6c:b7:5a:d5:2c:3b:54:4f:9b:4a:fd:02:c0:2f:69:8f:aa:
09:82:ce:d4:b4:74:81:b2:5e:af:3c:a8:80:a8:0b:b4:e2:40:
7e:32:65:13
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiH6oG6IItCgpO1F1y8mEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3
NDAwOTcwHhcNMjUwMTAxMTM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWFjNTM5NTE2MzJkYjIzYmVkMjYwMGU5NWNlMjNjZGEyOWI2ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1hVQ2linw6hLHboI2Rixmd6R/K5
IEySNxtuYFWrgFrd7I2FB7KXLgkGHkMUMAtHbolDPxx0S8vkYv8IAu49nUqzsioc
QIuHSbsYgGlk1yFQBKDbNlg99I3Mvq8PmRYLk8eHFqYizPtcHeguK+IDPsuZDAsv
WTjo2LISjDEjdYIN8SdWGOh788XK6ezb4cT38fSgigsbr/EoDYclhIfZ5Bx/IoFg
hGODw5Tt1ibkJEhXwnU26M5PiagTsAD2CoS7K3ekFdGqJKSrt1R2ka29nroIi2aZ
hKlgQkCg0xN9qqK3cQAZ8LioBZunU8nMC8RNo+S9H5kyJFfQI+ATfbXQvwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIWsU5UWMtsjvtJgDpXOI82im21qMB8GA1UdIwQY
MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt
NDdiY2QzOWMzZDg2LzEvaGF4VGxSWXkyeU8tMG1BT2xjNGp6YUtiYldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2
LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPtyAAwQC
uX3EMA0EAgACMAcDBQMgAQeIMA0GCSqGSIb3DQEBCwUAA4IBAQBPBFo9KGz2rkIq
PDpOqTyF0qnHxsd8WlJ/2LXIZ0rVqtVMGovMkUmD8+jA9+cS9l7CWkc42cUlzceI
nK0I71yycgZKgJppidVc1yMjS/X7QkhybgWiUDcvOPwyqXMQIb5+MegFBdbTlq7J
oiZDgzFjx00+eJWVGWVoEEjjNXKY8U7d9ETkLY1q7Ver26I7nE3rxh39axhsS3ae
EMHiUaJv0PfRVgXqVgd5jOC3l2fqE2/38gPD2YXMv/zZ1XffFbxoXC/M1WmuGXel
59gGAfNMH26gL8iPRZWAbLda1Sw7VE+bSv0CwC9pj6oJgs7UtHSBsl6vPKiAqAu0
4kB+MmUT
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:18:37 2025 by rpki-client