Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa
File: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (raw, json)
Hash identifier: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=
Subject key identifier: 1E:D1:AD:9C:3D:56:1B:EB:91:E2:53:59:E6:1F:80:F3:EA:63:52:B5
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E345876500A45766BB5CF11BD13F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48528
IP address blocks: 212.22.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e3:45:87:65:00:a4:57:66:bb:5c:f1:1b:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ed1ad9c3d561beb91e25359e61f80f3ea6352b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:73:23:75:7b:e1:34:ca:73:b8:5f:d2:06:
14:29:4c:53:2b:dc:fe:c0:65:e5:83:12:8b:6f:1d:
ef:6d:3c:43:b3:a6:e5:4e:4f:82:40:74:f3:88:9f:
43:03:58:f0:6c:5b:11:ec:bd:b3:2e:6f:60:58:90:
c1:b7:4e:45:58:03:1d:e1:55:cd:35:23:0c:69:22:
0c:1a:eb:57:8a:40:1d:4a:7f:62:bf:73:f8:40:f7:
8d:c6:f4:0b:df:ee:ba:85:7f:47:58:bf:e7:07:a1:
1a:6e:b2:80:b3:b3:98:21:a2:68:70:fa:30:44:b3:
49:23:91:00:16:aa:18:95:a5:f7:18:12:20:0f:18:
ab:39:fb:eb:c7:06:93:a2:e7:fb:fc:28:93:99:f1:
ad:04:29:1a:96:23:9e:3d:90:74:ef:0d:b3:4c:11:
bc:21:2e:d7:80:74:d4:71:a1:a9:47:66:02:86:12:
8d:5b:c6:db:31:47:9d:47:03:9e:6b:13:ed:b2:c6:
ee:4d:0f:3d:46:94:6f:a9:87:6d:b0:ac:cf:3c:ce:
21:73:ce:50:9e:75:5d:63:ef:fc:ac:d6:9d:36:dc:
4a:b3:d5:39:95:5f:bc:35:80:10:ae:5f:37:1c:b2:
05:d8:13:32:28:0a:3b:67:eb:9e:05:f8:7b:ff:52:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:AD:9C:3D:56:1B:EB:91:E2:53:59:E6:1F:80:F3:EA:63:52:B5
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d8:48:11:f7:8f:80:c1:0c:d5:2b:83:f1:fe:17:5d:58:2b:
cc:de:5f:77:51:01:75:77:0a:bd:02:64:fb:76:61:2d:e0:03:
ea:20:c9:e6:97:fa:3d:11:98:bb:6f:f9:9d:b5:61:f9:e0:a0:
41:f3:bc:e8:ec:3b:db:fe:be:d6:8b:47:b7:85:aa:34:30:ad:
57:de:f5:50:87:a9:57:9e:05:b7:f0:0f:7c:3e:66:93:4f:4e:
54:04:eb:cb:c7:59:b6:9a:b9:c3:76:82:55:bf:37:89:18:46:
af:9a:9f:2f:92:cc:01:d4:aa:f0:4e:12:7d:2f:de:d1:f7:4e:
97:ce:4b:9c:08:dc:09:3d:c5:3f:74:ef:d5:1f:40:01:ba:08:
4c:2e:01:1a:b5:88:32:01:e7:a5:64:e7:2e:02:8f:13:f0:76:
e3:c5:1f:fe:bc:12:ef:0b:34:84:3c:74:29:1e:7c:6f:af:a1:
82:d2:f3:c3:18:e8:02:1f:e1:ee:37:aa:2e:08:bb:01:88:95:
42:f0:4d:ab:00:54:a1:45:ae:9f:38:f0:d4:7c:01:6f:e7:1a:
72:f3:69:94:c8:02:80:74:06:1a:b3:44:03:3f:26:37:e0:42:
d2:21:9a:fb:03:4f:14:59:24:76:f8:06:3f:d2:30:b1:1c:50:
4b:1e:e1:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1+NFh2UApFdmu1zxG9E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjUwMTAxMjE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWQxYWQ5YzNkNTYxYmViOTFlMjUzNTllNjFmODBmM2VhNjM1MmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlklzI3V74TTKc7hf0gYUKUxTK9z+
wGXlgxKLbx3vbTxDs6blTk+CQHTziJ9DA1jwbFsR7L2zLm9gWJDBt05FWAMd4VXN
NSMMaSIMGutXikAdSn9iv3P4QPeNxvQL3+66hX9HWL/nB6EabrKAs7OYIaJocPow
RLNJI5EAFqoYlaX3GBIgDxirOfvrxwaTouf7/CiTmfGtBCkaliOePZB07w2zTBG8
IS7XgHTUcaGpR2YChhKNW8bbMUedRwOeaxPtssbuTQ89RpRvqYdtsKzPPM4hc85Q
nnVdY+/8rNadNtxKs9U5lV+8NYAQrl83HLIF2BMyKAo7Z+ueBfh7/1LurQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB7RrZw9VhvrkeJTWeYfgPPqY1K1MB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvSHRHdG5EMVdHLXVSNGxOWjVoLUE4LXBqVXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZHMA0G
CSqGSIb3DQEBCwUAA4IBAQAP2EgR94+AwQzVK4Px/hddWCvM3l93UQF1dwq9AmT7
dmEt4APqIMnml/o9EZi7b/mdtWH54KBB87zo7Dvb/r7Wi0e3hao0MK1X3vVQh6lX
ngW38A98PmaTT05UBOvLx1m2mrnDdoJVvzeJGEavmp8vkswB1KrwThJ9L97R906X
zkucCNwJPcU/dO/VH0ABughMLgEatYgyAeelZOcuAo8T8HbjxR/+vBLvCzSEPHQp
Hnxvr6GC0vPDGOgCH+HuN6ouCLsBiJVC8E2rAFShRa6fOPDUfAFv5xpy82mUyAKA
dAYas0QDPyY34ELSIZr7A08UWSR2+AY/0jCxHFBLHuGU
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:20 2025 by rpki-client