Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/huK4reWjuqpSUlvsH5J9B319pwQ.roa
File: huK4reWjuqpSUlvsH5J9B319pwQ.roa (raw, json)
Hash identifier: 3fLUI6obOm0t51z/KMPSup8eoX3JerDNKOqd3ZmmNbQ=
Subject key identifier: 86:E2:B8:AD:E5:A3:BA:AA:52:52:5B:EC:1F:92:7D:07:7D:7D:A7:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827549665ABDCF3D1F9F994EB7AA945
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/huK4reWjuqpSUlvsH5J9B319pwQ.roa
Signing time: Thu 02 Jan 2025 17:54:13 +0000
ROA not before: Thu 02 Jan 2025 17:54:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.204.22.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:54:96:65:ab:dc:f3:d1:f9:f9:94:eb:7a:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86e2b8ade5a3baaa52525bec1f927d077d7da704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:be:dd:a8:c2:b5:6e:8e:66:7e:34:58:60:
bc:a0:39:a5:7d:e4:5e:f2:a1:0c:21:7b:54:86:b2:
2b:c4:d8:aa:53:ac:2f:c6:45:42:49:1c:05:84:58:
9e:ef:5a:de:3a:67:d2:bb:27:c4:e5:29:2b:8a:fb:
ad:b0:16:be:51:dc:8d:cd:35:e2:94:8d:0b:0d:74:
86:df:c0:5f:0d:8e:f6:59:69:2b:6e:67:78:6d:07:
7e:da:93:ef:d2:ba:1d:89:bb:c0:32:b3:03:c9:bc:
40:fb:9a:b7:e4:ef:6a:c1:8e:15:a9:a2:12:6c:1c:
eb:76:00:19:81:bc:02:9c:37:2b:0e:0d:86:97:a9:
57:44:6d:ac:9c:ad:cb:0f:5b:81:7d:71:e7:b4:7c:
69:c9:20:ce:f3:1d:0a:ab:8b:e9:b6:a2:78:0b:89:
df:35:e0:cf:b4:7f:11:2b:c1:84:91:7f:63:e4:18:
e5:4b:91:0a:b9:03:e4:ac:c9:a3:d5:9e:73:ce:bc:
ff:42:64:4e:be:0f:3d:8a:cd:df:43:be:02:56:a6:
d2:a5:a8:da:31:45:63:ac:43:36:32:0f:f0:19:6e:
1c:78:b5:f3:2d:64:79:23:5e:b4:8f:36:ee:f1:cd:
58:28:9f:78:92:32:85:3e:2c:51:f9:b1:46:c9:57:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:B8:AD:E5:A3:BA:AA:52:52:5B:EC:1F:92:7D:07:7D:7D:A7:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/huK4reWjuqpSUlvsH5J9B319pwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
80:69:d8:9e:ab:ef:3c:7d:26:e0:cc:fa:21:7e:07:a5:a4:d5:
fc:8f:c4:36:6b:89:e4:34:1d:1d:18:9e:e8:50:ad:51:35:5f:
41:4a:aa:26:35:1c:be:47:99:c7:dc:3b:af:f0:1b:e9:da:c8:
44:b6:9f:b3:c4:3f:87:21:fe:c4:8a:6c:34:a5:e0:37:f8:6b:
1c:d0:a3:dd:a3:b1:33:ad:4b:14:b3:f3:4b:0d:2e:a0:a6:50:
ef:71:c1:d3:ec:44:f0:23:50:53:19:bb:c9:a9:8d:40:d4:71:
be:88:02:22:07:f6:1b:6d:10:bb:be:61:24:58:6f:39:27:c3:
21:b2:ae:3b:19:f4:ad:5a:65:7f:21:70:9f:86:c8:c5:2a:c0:
c8:22:91:cd:5b:68:8d:80:99:82:0c:af:1c:93:03:f7:80:f0:
29:32:e4:1b:a0:15:0f:f3:a1:17:6d:c8:69:b0:31:fa:0e:77:
d2:5d:ea:3d:fd:94:c1:52:55:23:ca:c2:2e:7e:15:2e:2c:bc:
c3:ce:74:dc:e0:1b:57:45:d7:34:cd:07:ca:18:86:44:63:70:
76:26:28:f3:b7:50:c8:98:85:16:dc:1b:7b:bd:6f:86:1a:cc:
22:34:57:06:0e:3f:a1:a2:a5:03:59:c1:1e:51:33:60:2d:e2:
36:5b:28:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ1SWZavc89H5+ZTreqlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmUyYjhhZGU1YTNiYWFhNTI1MjViZWMxZjkyN2QwNzdkN2RhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNa+3ajCtW6OZn40WGC8oDmlfeRe
8qEMIXtUhrIrxNiqU6wvxkVCSRwFhFie71reOmfSuyfE5SkrivutsBa+UdyNzTXi
lI0LDXSG38BfDY72WWkrbmd4bQd+2pPv0rodibvAMrMDybxA+5q35O9qwY4VqaIS
bBzrdgAZgbwCnDcrDg2Gl6lXRG2snK3LD1uBfXHntHxpySDO8x0Kq4vptqJ4C4nf
NeDPtH8RK8GEkX9j5BjlS5EKuQPkrMmj1Z5zzrz/QmROvg89is3fQ74CVqbSpaja
MUVjrEM2Mg/wGW4ceLXzLWR5I160jzbu8c1YKJ94kjKFPixR+bFGyVdMqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIbiuK3lo7qqUlJb7B+SfQd9facEMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaHVLNHJlV2p1cXBTVWx2c0g1SjlCMzE5cHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcwWAwQA
XHIgMA0GCSqGSIb3DQEBCwUAA4IBAQCAadieq+88fSbgzPohfgelpNX8j8Q2a4nk
NB0dGJ7oUK1RNV9BSqomNRy+R5nH3Duv8Bvp2shEtp+zxD+HIf7Eimw0peA3+Gsc
0KPdo7EzrUsUs/NLDS6gplDvccHT7ETwI1BTGbvJqY1A1HG+iAIiB/YbbRC7vmEk
WG85J8Mhsq47GfStWmV/IXCfhsjFKsDIIpHNW2iNgJmCDK8ckwP3gPApMuQboBUP
86EXbchpsDH6DnfSXeo9/ZTBUlUjysIufhUuLLzDznTc4BtXRdc0zQfKGIZEY3B2
Jijzt1DImIUW3Bt7vW+GGswiNFcGDj+hoqUDWcEeUTNgLeI2WygQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:47:19 2025 by rpki-client