Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HFBF7ONJEZa7AmSzgf9tpauuhoE.roa
File: HFBF7ONJEZa7AmSzgf9tpauuhoE.roa (raw, json)
Hash identifier: pnuy+yGrKJLH6UTr4JCmBCl9VtFneFc9PWSqmQ/XZuc=
Subject key identifier: 1C:50:45:EC:E3:49:11:96:BB:02:64:B3:81:FF:6D:A5:AB:AE:86:81
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CC9605ADF6F9BB888CF4DCFE0C06
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HFBF7ONJEZa7AmSzgf9tpauuhoE.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64453
IP address blocks: 95.182.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cc:96:05:ad:f6:f9:bb:88:8c:f4:dc:fe:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c5045ece3491196bb0264b381ff6da5abae8681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:f3:de:ff:47:87:db:75:d6:09:cc:47:fd:
1a:c5:94:31:47:89:d8:46:82:fa:52:87:24:57:71:
51:d0:aa:01:61:67:bc:d3:0c:5c:0b:2f:11:76:45:
66:c6:c5:ce:90:33:ad:09:86:e9:24:bc:6e:bf:29:
eb:78:9a:d2:7b:ee:a7:87:4d:25:b1:36:3d:67:5a:
8b:57:2f:39:8e:6a:58:67:65:37:8d:56:a4:5a:63:
0b:9c:71:1d:94:45:ac:3a:3d:b7:74:d0:65:f2:e5:
b1:bb:d9:d8:60:60:14:5e:78:c0:b3:06:0b:72:fa:
33:75:6c:89:b2:3e:f3:16:60:55:ed:b8:31:fd:46:
76:4c:a1:89:ba:3d:50:62:2e:cd:ce:53:8c:73:6b:
10:e8:2e:0a:e1:6c:9d:99:62:69:a1:a2:f9:53:72:
10:57:ef:0b:e7:49:5d:c2:f8:05:d9:ef:4c:a7:9b:
e3:d4:b8:95:0e:be:45:1e:06:92:7d:74:4e:30:3e:
64:42:38:d6:c3:b8:80:7a:ed:63:82:fd:88:f8:78:
0f:5e:51:8c:0f:c3:ee:b2:7f:47:a8:b6:59:2e:51:
ec:63:42:1f:5d:2e:92:22:36:ab:86:45:d7:cf:19:
e3:e7:83:45:b5:95:c9:d1:bd:35:87:5a:81:b2:c4:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:50:45:EC:E3:49:11:96:BB:02:64:B3:81:FF:6D:A5:AB:AE:86:81
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HFBF7ONJEZa7AmSzgf9tpauuhoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.76.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6f:79:08:57:0a:59:85:1d:f6:dd:87:df:15:4d:f4:cb:85:
1f:c7:68:fb:f9:11:85:91:40:36:7f:63:7f:d4:bb:fa:a8:df:
a9:ec:43:9d:b2:48:f6:e5:a5:4f:0f:3e:c7:6a:da:e4:00:07:
82:f2:f7:d4:86:72:bf:e8:80:bb:a8:9e:d5:9d:71:61:ba:59:
2b:4f:96:45:15:b2:55:03:be:48:39:8b:72:eb:89:64:64:f6:
8b:ac:69:09:6e:c4:33:60:aa:8b:ca:23:0d:33:d5:af:e3:29:
fc:ba:d9:a5:d8:06:89:21:fc:86:53:8f:a8:33:ae:65:89:ec:
ec:f5:e0:4b:57:2b:85:fa:78:ca:31:0e:29:96:ff:a6:87:ef:
dc:14:ad:7c:45:51:4d:01:22:21:a4:9e:47:a7:27:ca:1c:61:
94:8e:c7:db:ef:84:97:80:b4:80:3c:9b:ae:e2:b2:b0:98:8d:
3f:7e:4e:8e:bb:84:44:b0:33:f3:a2:03:23:18:5c:df:4e:5e:
61:48:be:41:6f:fe:34:c8:f5:4f:51:55:b7:72:03:fd:1e:50:
ea:8b:ab:a5:14:34:a2:33:bb:90:4c:a2:4a:45:22:d1:93:35:
0e:d7:df:05:6c:91:b6:b5:be:05:8d:4d:ab:c9:5f:87:d0:e4:
d8:7c:dd:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8yWBa32+buIjPTc/gwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzUwNDVlY2UzNDkxMTk2YmIwMjY0YjM4MWZmNmRhNWFiYWU4NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIPz3v9Hh9t11gnMR/0axZQxR4nY
RoL6UockV3FR0KoBYWe80wxcCy8RdkVmxsXOkDOtCYbpJLxuvynreJrSe+6nh00l
sTY9Z1qLVy85jmpYZ2U3jVakWmMLnHEdlEWsOj23dNBl8uWxu9nYYGAUXnjAswYL
cvozdWyJsj7zFmBV7bgx/UZ2TKGJuj1QYi7NzlOMc2sQ6C4K4WydmWJpoaL5U3IQ
V+8L50ldwvgF2e9Mp5vj1LiVDr5FHgaSfXROMD5kQjjWw7iAeu1jgv2I+HgPXlGM
D8Pusn9HqLZZLlHsY0IfXS6SIjarhkXXzxnj54NFtZXJ0b01h1qBssRDOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxQRezjSRGWuwJks4H/baWrroaBMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvSEZCRjdPTkpFWmE3QW1TemdmOXRwYXV1aG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7ZMMA0G
CSqGSIb3DQEBCwUAA4IBAQAjb3kIVwpZhR323YffFU30y4Ufx2j7+RGFkUA2f2N/
1Lv6qN+p7EOdskj25aVPDz7HatrkAAeC8vfUhnK/6IC7qJ7VnXFhulkrT5ZFFbJV
A75IOYty64lkZPaLrGkJbsQzYKqLyiMNM9Wv4yn8utml2AaJIfyGU4+oM65liezs
9eBLVyuF+njKMQ4plv+mh+/cFK18RVFNASIhpJ5HpyfKHGGUjsfb74SXgLSAPJuu
4rKwmI0/fk6Ou4REsDPzogMjGFzfTl5hSL5Bb/40yPVPUVW3cgP9HlDqi6ulFDSi
M7uQTKJKRSLRkzUO198FbJG2tb4FjU2ryV+H0OTYfN2G
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:12 2025 by rpki-client