Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hie0hXnIuAB4pedG0JZEzMyt0LI.roa
File: hie0hXnIuAB4pedG0JZEzMyt0LI.roa (raw, json)
Hash identifier: gK4aKsvtB8FfBrgpZluMQ5b2y78leeRFaQAGGnAPFIo=
Subject key identifier: 86:27:B4:85:79:C8:B8:00:78:A5:E7:46:D0:96:44:CC:CC:AD:D0:B2
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA756011DC8285E49EB281820E1D7A
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hie0hXnIuAB4pedG0JZEzMyt0LI.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199296
IP address blocks: 88.199.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:60:11:dc:82:85:e4:9e:b2:81:82:0e:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8627b48579c8b80078a5e746d09644ccccadd0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:e3:bf:10:6e:31:d9:8d:33:46:56:25:c5:
71:a1:a3:28:a6:85:07:06:46:ba:82:e4:46:bf:9e:
93:fb:96:0e:5f:af:0c:36:0d:00:82:b1:cc:0d:7b:
3c:45:f4:f5:73:ca:23:58:6a:4a:06:0e:e7:ac:11:
c4:47:dc:d1:39:6f:2b:35:9d:56:e4:1f:fd:5f:dc:
1c:54:5d:3f:2e:6c:38:da:c6:0c:bb:4b:e7:9e:77:
79:66:cc:82:1e:1a:6f:64:d3:b7:b1:bd:b8:05:f2:
29:f4:df:3d:0c:8d:d0:5b:4d:c8:76:16:7d:4e:2a:
ef:f8:a6:d2:c2:4e:cf:4b:23:9c:7d:66:00:d9:7b:
76:d1:5c:2a:14:dd:eb:4c:05:ca:d1:95:9c:aa:8e:
a4:19:02:7c:ad:94:88:a3:e8:46:c0:68:c7:3c:82:
f1:60:1d:e8:e0:0c:e8:e4:58:36:cc:b0:3a:4c:c8:
c3:e4:30:38:9e:ad:ef:9c:c1:46:2c:6f:25:01:ce:
83:db:a6:55:07:4b:fd:ee:5b:a9:a6:e9:c3:ef:6e:
8f:2e:54:23:54:0f:ca:db:4a:58:2c:2b:29:a6:db:
9e:cf:9a:76:5d:0b:2b:63:69:be:1d:4b:ba:2d:9b:
6d:9a:4e:46:df:a9:6b:78:93:15:03:c0:7d:ba:37:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:27:B4:85:79:C8:B8:00:78:A5:E7:46:D0:96:44:CC:CC:AD:D0:B2
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hie0hXnIuAB4pedG0JZEzMyt0LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:f9:a8:0d:db:c3:6d:3d:e0:7e:00:72:fd:9e:cc:2c:c5:e5:
03:c2:40:a1:c0:71:69:f6:e6:a1:8a:33:54:f6:34:c0:94:9f:
cb:cd:5c:aa:79:59:d9:23:4e:27:f8:2e:81:5a:22:26:3c:ab:
88:2f:44:c3:e3:68:d2:f4:61:8b:ea:8f:31:c4:60:8c:44:ce:
71:ac:ab:81:9b:69:cc:aa:0b:f8:4b:3b:2f:f0:8f:2a:c4:25:
94:b9:be:18:f4:03:6f:27:91:28:b8:5a:4a:b8:29:a2:e6:70:
65:f5:43:92:95:49:04:38:77:8d:d4:e1:2a:66:12:35:01:a3:
eb:eb:6d:c3:6d:86:db:83:1a:3a:0a:80:e7:da:4e:86:38:5e:
1e:37:be:46:98:8b:10:c1:f7:b8:6d:1c:e5:7d:d8:ab:be:a1:
89:ae:41:73:07:20:71:1b:78:8a:ab:6e:da:41:af:81:7e:e1:
39:52:06:6a:35:91:54:c6:35:23:11:0f:39:b4:4a:9f:e1:1c:
3b:40:d2:7e:c2:98:9f:be:fe:a9:0d:52:db:11:bc:4b:7e:4e:
32:a1:1b:42:ad:dc:c9:8f:13:62:08:c4:8f:08:5a:75:b1:b1:
c4:22:8d:f7:40:1f:94:6a:69:0e:c5:ca:d5:c6:e4:72:74:d7:
60:99:37:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+nVgEdyCheSesoGCDh16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjI3YjQ4NTc5YzhiODAwNzhhNWU3NDZkMDk2NDRjY2NjYWRkMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnjvxBuMdmNM0ZWJcVxoaMopoUH
Bka6guRGv56T+5YOX68MNg0AgrHMDXs8RfT1c8ojWGpKBg7nrBHER9zROW8rNZ1W
5B/9X9wcVF0/Lmw42sYMu0vnnnd5ZsyCHhpvZNO3sb24BfIp9N89DI3QW03IdhZ9
Tirv+KbSwk7PSyOcfWYA2Xt20VwqFN3rTAXK0ZWcqo6kGQJ8rZSIo+hGwGjHPILx
YB3o4Azo5Fg2zLA6TMjD5DA4nq3vnMFGLG8lAc6D26ZVB0v97luppunD726PLlQj
VA/K20pYLCspptuez5p2XQsrY2m+HUu6LZttmk5G36lreJMVA8B9ujcqYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIYntIV5yLgAeKXnRtCWRMzMrdCyMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvaGllMGhYbkl1QUI0cGVkRzBKWkV6TXl0MExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWMeQMA0G
CSqGSIb3DQEBCwUAA4IBAQB6+agN28NtPeB+AHL9nswsxeUDwkChwHFp9uahijNU
9jTAlJ/LzVyqeVnZI04n+C6BWiImPKuIL0TD42jS9GGL6o8xxGCMRM5xrKuBm2nM
qgv4Szsv8I8qxCWUub4Y9ANvJ5EouFpKuCmi5nBl9UOSlUkEOHeN1OEqZhI1AaPr
623DbYbbgxo6CoDn2k6GOF4eN75GmIsQwfe4bRzlfdirvqGJrkFzByBxG3iKq27a
Qa+BfuE5UgZqNZFUxjUjEQ85tEqf4Rw7QNJ+wpifvv6pDVLbEbxLfk4yoRtCrdzJ
jxNiCMSPCFp1sbHEIo33QB+UamkOxcrVxuRydNdgmTcM
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:55 2025 by rpki-client