Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hc082LZwsWxQZF168hmd7hAzyJw.roa
File: hc082LZwsWxQZF168hmd7hAzyJw.roa (raw, json)
Hash identifier: zYoQM8sjuQWsKa1XaLX6giL/HnFapG5rbxCmIcBzstI=
Subject key identifier: 85:CD:3C:D8:B6:70:B1:6C:50:64:5D:7A:F2:19:9D:EE:10:33:C8:9C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC6DAA15DFFB58067D636BF9835A3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hc082LZwsWxQZF168hmd7hAzyJw.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58254
IP address blocks: 95.47.153.0/24 maxlen: 24
146.120.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c6:da:a1:5d:ff:b5:80:67:d6:36:bf:98:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85cd3cd8b670b16c50645d7af2199dee1033c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:94:13:12:4a:cd:a3:49:70:48:16:c1:72:
2e:f9:30:c6:62:5b:25:a9:f3:a9:e6:4c:e5:35:e3:
73:cd:73:c2:70:82:52:09:85:b9:12:1b:20:82:b2:
19:af:fc:98:a3:77:01:87:81:99:e9:a5:cc:13:41:
b1:e3:96:b2:1d:6c:da:9a:1d:b1:74:fb:35:e5:40:
0d:9f:58:71:b1:be:27:3f:00:fa:60:05:13:d7:bf:
3a:0a:25:c4:13:eb:ea:ce:3b:02:f6:7d:38:01:c1:
ce:f0:27:34:b1:21:a1:ce:ce:92:c4:c5:d0:52:cb:
a8:e0:40:7d:e9:78:53:1b:1c:ac:73:17:d1:30:81:
c2:14:56:b3:28:76:0a:df:bc:1e:0a:b2:30:20:07:
1f:d7:e7:46:23:da:02:87:7c:ca:f5:fc:ee:52:6f:
45:e1:2a:f8:90:d1:b5:5b:4a:db:2b:d3:cf:b1:b0:
b1:f1:fa:52:f5:14:31:85:9d:47:57:21:10:90:fd:
7c:b3:e1:c6:a7:29:94:31:94:a9:81:4f:c4:6f:3a:
4d:ae:7b:d2:fe:ac:9c:58:c3:2f:d9:d2:9a:37:bb:
28:06:af:4c:1a:4f:5d:18:f6:11:31:3b:e3:18:a3:
1a:e4:1d:36:ad:22:90:37:ca:95:2b:7c:0d:cc:fb:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:3C:D8:B6:70:B1:6C:50:64:5D:7A:F2:19:9D:EE:10:33:C8:9C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hc082LZwsWxQZF168hmd7hAzyJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.153.0/24
146.120.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:72:59:43:d5:63:79:cd:d2:a6:ef:e0:20:5d:e7:57:e7:23:
9d:b2:8b:01:6f:e2:bd:d3:ac:e9:20:72:cf:7d:bc:5b:8a:d9:
00:c0:ed:51:09:12:cc:58:5e:2d:85:b4:6d:01:93:60:c2:79:
f4:15:d0:e3:24:c6:cc:31:ac:a7:6a:c4:77:90:e7:de:3e:1f:
c4:b0:51:dc:04:3e:bd:12:ee:37:d9:2d:70:69:5c:0a:1c:39:
5d:77:1c:88:db:4c:a7:82:16:8f:5a:70:07:f1:d5:35:40:e1:
71:b7:23:2c:8b:97:bf:51:3d:dc:2c:38:4c:fa:4d:34:22:09:
98:b9:6d:e2:31:96:93:f0:51:99:d0:47:dd:78:df:29:0d:1e:
02:5e:87:d8:e7:81:8d:78:95:6e:a0:26:e2:87:a6:97:20:6b:
49:31:76:1b:9d:51:78:d3:2a:1d:e3:bd:65:10:62:3f:3c:9b:
5b:ed:84:76:7f:8a:f4:3e:c1:48:51:87:99:36:a0:b6:eb:77:
16:db:a8:46:1d:5b:5f:56:56:c5:34:8a:71:32:97:66:b0:02:
9a:6a:af:e4:61:30:c0:04:8e:7a:a3:29:67:11:c6:ca:62:a2:
e0:3b:80:da:8b:fd:5c:f4:37:56:79:ff:b3:90:27:48:04:33:
a7:e4:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:21 2025 by rpki-client