Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hbkDGu-27NQwuA34KKvsthuBpoc.roa
File: hbkDGu-27NQwuA34KKvsthuBpoc.roa (raw, json)
Hash identifier: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=
Subject key identifier: 85:B9:03:1A:EF:B6:EC:D4:30:B8:0D:F8:28:AB:EC:B6:1B:81:A6:87
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7DE67DFC49D718E81AFE17692E1E3
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hbkDGu-27NQwuA34KKvsthuBpoc.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:de:67:df:c4:9d:71:8e:81:af:e1:76:92:e1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85b9031aefb6ecd430b80df828abecb61b81a687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:4f:24:fe:b5:79:1c:b9:4d:32:39:8b:dd:
0b:c0:4d:ea:2b:6b:45:70:5b:ac:65:e9:c5:bc:fc:
c5:a7:dc:2b:75:63:30:b7:90:03:8e:fe:c8:55:64:
ee:51:cf:7b:ff:4f:29:10:23:d3:1a:0d:74:1e:5b:
2b:54:e8:3e:35:b4:a9:36:ff:77:eb:58:4d:84:e5:
3e:a8:76:c8:20:67:58:3c:26:82:84:61:54:2b:b3:
01:b5:29:bb:60:cc:2a:f6:0c:c4:ce:a7:fe:2b:b4:
fe:35:62:bf:f9:47:f6:b9:09:dc:a3:ac:bc:ae:9f:
fe:dd:5c:29:8c:c0:78:b8:5d:87:ff:d5:36:c0:ed:
9f:99:da:a5:fc:ac:5a:b3:61:d3:03:8c:2e:a1:1b:
a6:c9:17:b2:7e:ee:f8:4e:f6:4e:c2:f8:a4:e6:2d:
e8:77:ab:98:7d:57:93:ad:ac:a3:ad:ff:50:3f:c7:
f7:7c:ff:dc:35:8f:86:e4:7e:0c:b5:19:87:4b:83:
ee:32:29:20:f8:f3:bf:e5:ab:dc:72:60:b9:05:7a:
c4:2f:09:35:6c:fd:c0:3b:ee:c8:00:a2:83:82:5f:
9f:4b:80:68:55:69:ed:5d:db:85:b8:71:ff:7b:6f:
80:c6:9e:76:fe:75:df:d1:10:9e:62:61:1e:06:84:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:03:1A:EF:B6:EC:D4:30:B8:0D:F8:28:AB:EC:B6:1B:81:A6:87
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/hbkDGu-27NQwuA34KKvsthuBpoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4b:78:98:9a:49:18:b2:87:ce:6b:c3:6c:5c:e4:e3:4c:8f:
fc:e4:9f:04:d9:91:90:71:8a:d5:6e:83:d2:e3:ad:ee:a3:b4:
83:09:70:ab:4d:e3:8b:10:ec:f8:bc:6b:64:ff:29:95:88:c4:
3b:1a:22:5b:3b:0c:57:c6:a1:b8:3f:e4:2c:9e:5e:e4:4f:31:
8e:03:17:26:5a:db:41:4e:d7:20:e9:08:f8:f2:e9:00:2d:7c:
13:9e:74:d4:2b:86:6a:b9:2b:db:f4:25:0a:b3:a7:aa:ef:29:
f8:de:9d:93:f0:6e:81:e4:df:08:99:05:05:db:1f:ec:3f:09:
0a:35:c4:28:c3:0b:1b:53:e5:44:be:9f:fb:80:ab:18:3a:27:
27:af:a3:b9:5f:f5:6f:22:ee:1b:e0:ff:76:a6:54:58:ff:9e:
b5:eb:c9:2e:c1:19:99:df:27:45:fb:91:5c:6b:0d:66:23:41:
b5:26:5d:67:a1:8a:9e:1b:b8:8f:14:4c:ce:46:1f:b9:9e:c9:
40:a2:6e:91:a3:46:fc:b5:77:19:b8:a4:2b:46:5f:7c:e3:fd:
e0:df:d3:8a:e9:7c:55:a8:0c:41:02:7c:a2:bc:27:19:1b:bb:
ff:1a:dd:a2:b5:5d:84:f5:6d:58:67:60:f4:15:78:cc:c4:ce:
95:0f:bc:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj195n38SdcY6Br+F2kuHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjUwMTAxMjE0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWI5MDMxYWVmYjZlY2Q0MzBiODBkZjgyOGFiZWNiNjFiODFhNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcxPJP61eRy5TTI5i90LwE3qK2tF
cFusZenFvPzFp9wrdWMwt5ADjv7IVWTuUc97/08pECPTGg10HlsrVOg+NbSpNv93
61hNhOU+qHbIIGdYPCaChGFUK7MBtSm7YMwq9gzEzqf+K7T+NWK/+Uf2uQnco6y8
rp/+3VwpjMB4uF2H/9U2wO2fmdql/Kxas2HTA4wuoRumyReyfu74TvZOwvik5i3o
d6uYfVeTrayjrf9QP8f3fP/cNY+G5H4MtRmHS4PuMikg+PO/5avccmC5BXrELwk1
bP3AO+7IAKKDgl+fS4BoVWntXduFuHH/e2+Axp52/nXf0RCeYmEeBoRRhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIW5AxrvtuzUMLgN+Cir7LYbgaaHMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvaGJrREd1LTI3TlF3dUEzNEtLdnN0aHVCcG9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX61MA0G
CSqGSIb3DQEBCwUAA4IBAQA1S3iYmkkYsofOa8NsXOTjTI/85J8E2ZGQcYrVboPS
463uo7SDCXCrTeOLEOz4vGtk/ymViMQ7GiJbOwxXxqG4P+Qsnl7kTzGOAxcmWttB
Ttcg6Qj48ukALXwTnnTUK4ZquSvb9CUKs6eq7yn43p2T8G6B5N8ImQUF2x/sPwkK
NcQowwsbU+VEvp/7gKsYOicnr6O5X/VvIu4b4P92plRY/56168kuwRmZ3ydF+5Fc
aw1mI0G1Jl1noYqeG7iPFEzORh+5nslAom6Ro0b8tXcZuKQrRl984/3g39OK6XxV
qAxBAnyivCcZG7v/Gt2itV2E9W1YZ2D0FXjMxM6VD7xQ
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:31 2025 by rpki-client