Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/hn5PYDOLpsdmTwt2qZTXNCawnyY.roa
File: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (raw, json)
Hash identifier: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=
Subject key identifier: 86:7E:4F:60:33:8B:A6:C7:66:4F:0B:76:A9:94:D7:34:26:B0:9F:26
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 01942368D15A256A6DBC3F2FBAEBBA1D47FD
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/hn5PYDOLpsdmTwt2qZTXNCawnyY.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198318
IP address blocks: 185.148.224.0/23 maxlen: 24
2a07:6200:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d1:5a:25:6a:6d:bc:3f:2f:ba:eb:ba:1d:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=867e4f60338ba6c7664f0b76a994d73426b09f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:25:c8:26:79:ea:a0:fb:14:8e:a6:9f:e6:
f4:70:9a:1f:c9:42:1c:55:e3:b3:6a:d2:53:39:43:
a5:77:e4:64:45:ec:5b:c5:0f:4f:e4:0e:79:c3:3f:
0e:01:09:d2:8a:c5:dc:36:21:14:35:b8:e7:45:a5:
53:9d:ac:4b:ca:fa:fd:b6:64:38:6a:4e:49:e8:ff:
51:da:d2:34:3f:f8:79:69:f8:11:16:33:9b:d8:ac:
8e:6d:22:4b:b2:dc:2c:2c:92:9d:6b:bf:5d:c6:26:
68:09:c8:e6:a1:d3:1e:d6:5d:8c:4f:fb:34:4a:80:
73:3c:6e:4b:c1:ba:6f:ef:b1:06:bb:71:cb:ee:01:
3e:91:d6:bd:96:40:ba:39:16:80:eb:c7:e6:de:39:
23:20:a5:34:b0:93:10:04:b0:1d:32:0c:c1:a2:e7:
58:25:f2:c4:59:2e:ca:79:91:5e:2b:ae:23:8b:a9:
11:0b:53:f5:39:f5:ac:12:b2:e1:56:fa:b1:1f:05:
6e:6e:e5:a6:d2:c9:c6:01:0f:93:a5:1a:22:2e:a1:
41:6a:38:d3:db:76:d4:a6:ad:04:b9:0f:e6:9c:f6:
8e:7e:9b:3c:b5:24:ad:9e:55:b8:52:8a:6e:c9:67:
47:a8:6f:07:8e:67:b5:86:26:71:e3:9a:f5:e4:b9:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:4F:60:33:8B:A6:C7:66:4F:0B:76:A9:94:D7:34:26:B0:9F:26
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/hn5PYDOLpsdmTwt2qZTXNCawnyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.224.0/23
IPv6:
2a07:6200:1::/48
Signature Algorithm: sha256WithRSAEncryption
72:b8:93:12:52:1e:c8:67:a2:34:df:3e:ab:aa:07:54:ae:87:
03:7e:2a:82:f7:0b:9d:54:c7:a9:64:50:3e:f4:8e:4d:12:3b:
b0:a3:ea:fd:66:a4:75:14:97:8d:17:37:c0:d1:91:40:6b:44:
3f:ff:67:e3:65:d1:3c:3b:8c:88:a5:12:31:bc:cc:ba:ef:60:
b9:7a:a9:76:a1:cf:b7:a0:fc:0b:5a:46:a0:15:23:f4:5c:5f:
dd:af:07:99:85:cf:89:f2:8d:ca:7e:c8:46:5c:3a:2b:29:12:
b8:cf:3b:95:8e:24:13:83:43:99:ba:99:9a:dd:bf:66:23:20:
65:79:54:7c:f7:7a:a7:da:08:64:08:88:bc:3f:b0:28:f1:e0:
a3:60:1e:9a:d6:97:16:f3:46:80:95:3f:d3:72:30:5b:23:3f:
c4:b2:82:97:1c:d9:62:12:cd:43:25:44:4b:85:5f:f5:79:03:
1b:1f:80:a6:e5:c0:ca:7e:15:43:24:90:1f:be:d0:e1:32:a8:
97:23:ce:cd:e8:74:ed:56:1c:2a:6f:7b:fe:bb:f2:23:d9:ad:
11:a0:62:84:7c:9b:41:16:c5:20:b8:b6:ca:df:be:14:3e:1b:
1b:97:a4:a4:5b:f8:ff:be:9d:07:d5:df:76:fb:48:0a:79:97:
6e:6e:d8:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQjaNFaJWptvD8vuuu6HUf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0
NTBhZWIwHhcNMjUwMTAxMTk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjdlNGY2MDMzOGJhNmM3NjY0ZjBiNzZhOTk0ZDczNDI2YjA5ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+glyCZ56qD7FI6mn+b0cJofyUIc
VeOzatJTOUOld+RkRexbxQ9P5A55wz8OAQnSisXcNiEUNbjnRaVTnaxLyvr9tmQ4
ak5J6P9R2tI0P/h5afgRFjOb2KyObSJLstwsLJKda79dxiZoCcjmodMe1l2MT/s0
SoBzPG5Lwbpv77EGu3HL7gE+kda9lkC6ORaA68fm3jkjIKU0sJMQBLAdMgzBoudY
JfLEWS7KeZFeK64ji6kRC1P1OfWsErLhVvqxHwVubuWm0snGAQ+TpRoiLqFBajjT
23bUpq0EuQ/mnPaOfps8tSStnlW4UopuyWdHqG8Hjme1hiZx45r15LmMKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIZ+T2Azi6bHZk8LdqmU1zQmsJ8mMB8GA1UdIwQY
MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt
YTRkYjM5NmM4OTg3LzEvaG41UFlET0xwc2RtVHd0MnFaVFhOQ2F3bnlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3
LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuZTgMA8E
AgACMAkDBwAqB2IAAAEwDQYJKoZIhvcNAQELBQADggEBAHK4kxJSHshnojTfPquq
B1SuhwN+KoL3C51Ux6lkUD70jk0SO7Cj6v1mpHUUl40XN8DRkUBrRD//Z+Nl0Tw7
jIilEjG8zLrvYLl6qXahz7eg/AtaRqAVI/RcX92vB5mFz4nyjcp+yEZcOispErjP
O5WOJBODQ5m6mZrdv2YjIGV5VHz3eqfaCGQIiLw/sCjx4KNgHprWlxbzRoCVP9Ny
MFsjP8Sygpcc2WISzUMlREuFX/V5AxsfgKblwMp+FUMkkB++0OEyqJcjzs3odO1W
HCpve/678iPZrRGgYoR8m0EWxSC4tsrfvhQ+GxuXpKRb+P++nQfV33b7SAp5l25u
2Gw=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:52:08 2025 by rpki-client