Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HUZyt7apSdG04WeDPm-vBFHKmnQ.roa
File: HUZyt7apSdG04WeDPm-vBFHKmnQ.roa (raw, json)
Hash identifier: SNroY9lWDIkguVanpfjsYVRMUYbzrGCLCh1Mj5EyrI0=
Subject key identifier: 1D:46:72:B7:B6:A9:49:D1:B4:E1:67:83:3E:6F:AF:04:51:CA:9A:74
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019742BFD7E5ABD3FDE86A9455B95247DA92
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HUZyt7apSdG04WeDPm-vBFHKmnQ.roa
Signing time: Fri 06 Jun 2025 00:59:18 +0000
ROA not before: Fri 06 Jun 2025 00:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:bf:d7:e5:ab:d3:fd:e8:6a:94:55:b9:52:47:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 6 00:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d4672b7b6a949d1b4e167833e6faf0451ca9a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:94:18:6f:c9:24:3d:33:eb:d2:13:5f:50:
60:f7:02:25:ad:cd:e1:51:21:17:4f:fc:5e:ce:f4:
e0:21:96:bd:3e:c8:5a:d1:fd:aa:82:53:85:b3:df:
c1:4f:ca:74:eb:0f:1b:35:5c:60:d1:53:89:62:d7:
d7:62:5b:b4:56:92:ad:2b:84:83:1d:1d:7c:21:fa:
00:6c:72:30:03:a7:a3:ce:5b:4f:f4:43:e5:46:b8:
62:91:ee:21:59:2b:3b:e4:64:9a:87:04:f9:c5:82:
41:2c:25:f2:18:97:79:d1:8c:a4:71:9f:b8:04:3b:
02:4b:6e:6e:9d:3a:91:6b:08:e6:37:2b:4a:ad:f0:
28:97:27:29:4a:ab:61:f6:57:d0:fa:bf:cd:9c:17:
e0:4e:76:38:49:29:c9:fc:6b:0b:1e:e3:af:e9:f0:
39:ef:29:9a:81:81:24:b9:fb:ed:a0:d7:74:13:19:
15:b1:aa:72:f0:a6:e4:64:54:ef:8e:8d:0c:98:53:
2c:51:c8:95:3e:97:86:05:41:1c:2d:83:8e:75:e3:
c9:0e:f2:86:1b:f0:64:fc:50:0d:11:e9:85:4c:ab:
49:b5:83:12:4f:d3:f3:61:05:0b:20:3f:61:87:d9:
0c:06:9d:46:16:0b:d8:9d:de:cf:38:4a:bd:4f:0d:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:72:B7:B6:A9:49:D1:B4:E1:67:83:3E:6F:AF:04:51:CA:9A:74
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HUZyt7apSdG04WeDPm-vBFHKmnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
66.56.87.0/24
103.61.196.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cc:6a:b3:cd:54:22:bc:93:b7:74:1e:8e:da:1a:39:d9:5e:
86:2c:74:67:6c:c1:34:9e:9c:38:d1:a3:9b:15:40:11:e4:c0:
b9:12:90:24:b0:2a:9f:5a:f7:2d:23:bf:aa:1d:6d:87:b6:49:
13:4d:d0:13:a4:a4:37:c1:af:fa:f0:2a:46:f7:94:b9:43:97:
00:fc:22:dd:9c:0a:3f:04:dd:8a:77:2f:b5:e8:07:ac:dd:11:
2b:f7:7a:ae:1e:fd:0e:12:5e:6b:44:68:68:d3:8b:dd:e3:5d:
43:b5:ee:0a:e2:3a:8b:30:b6:24:37:bd:f7:88:db:65:73:01:
d5:23:0b:c8:a2:0e:a0:81:01:1d:74:7b:82:eb:7d:d3:09:69:
2a:97:db:ae:52:34:67:a2:72:e6:29:bc:e4:bb:77:f0:6b:7e:
e6:d0:19:88:14:68:a1:8b:2a:ee:f9:67:a5:b1:09:73:11:50:
26:ee:13:38:44:57:62:53:15:e2:e3:38:ab:90:97:41:b2:ed:
5f:46:be:d7:e7:ac:c4:b3:b2:c0:71:2d:4b:2b:28:ef:0d:ae:
fb:c5:27:7b:f4:11:f7:c1:4d:4a:44:07:bd:82:46:72:17:af:
d0:b1:57:cf:2e:4d:f8:31:4b:0e:0c:e0:79:29:43:28:d2:f0:
f9:e7:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:34:21 2025 by rpki-client