Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/hNRdZItPl-_x1hY3C3RjmRZbjnY.roa
File: hNRdZItPl-_x1hY3C3RjmRZbjnY.roa (raw, json)
Hash identifier: RX1AwwjMh7GoVfAGeesdzdmROnn3H+S+x/ans2oUFUQ=
Subject key identifier: 84:D4:5D:64:8B:4F:97:EF:F1:D6:16:37:0B:74:63:99:16:5B:8E:76
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 019427B404310491BA49FB78FED6247A5DAB
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/hNRdZItPl-_x1hY3C3RjmRZbjnY.roa
Signing time: Thu 02 Jan 2025 15:48:16 +0000
ROA not before: Thu 02 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.147.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:04:31:04:91:ba:49:fb:78:fe:d6:24:7a:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Jan 2 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d45d648b4f97eff1d616370b746399165b8e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:df:7b:de:4f:03:b8:14:29:7b:9e:11:46:
5c:e1:88:69:f2:40:4a:e1:06:ee:f3:35:97:b2:f0:
55:d0:7e:79:1e:2b:be:81:12:ac:60:4b:11:c9:d8:
5d:d1:e1:fe:2a:27:63:f5:fb:d5:2f:30:20:72:26:
c6:f5:d3:e5:2f:65:07:c1:22:9b:b4:ac:51:46:bc:
8c:b1:2a:20:9d:6b:61:56:51:07:af:ad:01:bd:4b:
0d:5a:a8:5d:19:f8:52:8d:3f:b5:9a:47:76:8d:a9:
b0:f2:d9:ed:9f:7b:a9:35:49:cb:19:18:04:70:28:
e0:43:a7:0b:e2:5c:a6:d2:44:05:49:7b:84:3f:8f:
33:20:08:89:c0:4f:43:b2:6b:48:77:21:5a:ae:17:
44:3e:8e:f5:dc:7b:bf:0d:22:1a:8f:4c:1b:52:a8:
91:69:c1:34:f5:90:f4:9e:6a:bd:19:60:f6:22:a9:
10:5d:86:07:98:90:e0:62:3d:1f:4e:f8:76:ef:44:
73:13:1a:50:93:d2:12:28:fa:0c:21:aa:87:02:7e:
1a:c8:15:4d:25:2f:18:af:a0:cc:5a:e7:76:4c:d7:
24:02:de:7d:bf:0c:a0:7f:83:64:3c:76:69:cb:7c:
c0:0f:73:c4:72:01:9e:3f:f1:32:f5:4f:68:b7:2f:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:5D:64:8B:4F:97:EF:F1:D6:16:37:0B:74:63:99:16:5B:8E:76
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/hNRdZItPl-_x1hY3C3RjmRZbjnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4a:fa:80:30:02:10:34:f2:07:df:d5:26:43:89:ed:3c:e1:
ba:ab:17:75:a8:8e:db:e5:97:15:ec:52:4b:da:2c:52:1b:b7:
5d:7e:45:8c:6b:38:68:ba:c8:e8:42:3b:8c:bb:61:f4:bb:64:
fa:05:5c:ad:c0:5e:b6:9a:bb:b9:4d:9b:fd:d2:04:4c:56:c6:
01:a5:ab:5c:a0:68:84:85:a3:96:38:9e:5c:03:53:4f:8d:6e:
31:8c:f0:45:09:fe:f0:4c:92:7e:d3:07:0d:bc:ef:b7:76:0b:
b5:a7:77:a7:91:16:cf:7b:c7:d9:8a:ce:25:f0:5c:a4:c5:d3:
a3:de:75:2a:a4:e7:20:03:18:6c:dd:4a:fa:4e:d0:e2:78:f5:
14:d2:b5:f8:5d:ca:05:ad:78:57:02:61:9c:c1:05:36:55:d7:
93:28:81:e8:7d:0d:c9:87:69:15:bd:68:09:94:f0:48:9e:2d:
7d:0f:c9:fd:1c:7c:f4:f4:34:00:f7:a2:16:01:39:9b:48:03:
df:bb:07:67:b6:0d:b0:d7:c7:a4:f6:ca:ba:8e:70:e7:3f:c8:
59:61:ab:89:4c:bd:76:88:ae:98:a1:a8:b8:a5:06:24:99:d1:
7c:5f:c8:8f:e4:25:78:27:ae:30:68:ce:56:3a:31:18:1c:44:
e9:65:36:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntAQxBJG6Sft4/tYkel2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3
OGRiMWYwHhcNMjUwMTAyMTU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGQ0NWQ2NDhiNGY5N2VmZjFkNjE2MzcwYjc0NjM5OTE2NWI4ZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01bfe95PA7gUKXueEUZc4Yhp8kBK
4Qbu8zWXsvBV0H55Hiu+gRKsYEsRydhd0eH+Kidj9fvVLzAgcibG9dPlL2UHwSKb
tKxRRryMsSognWthVlEHr60BvUsNWqhdGfhSjT+1mkd2jamw8tntn3upNUnLGRgE
cCjgQ6cL4lym0kQFSXuEP48zIAiJwE9DsmtIdyFarhdEPo713Hu/DSIaj0wbUqiR
acE09ZD0nmq9GWD2IqkQXYYHmJDgYj0fTvh270RzExpQk9ISKPoMIaqHAn4ayBVN
JS8Yr6DMWud2TNckAt59vwygf4NkPHZpy3zAD3PEcgGeP/Ey9U9oty/XhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITUXWSLT5fv8dYWNwt0Y5kWW452MB8GA1UdIwQY
MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt
ZDVkZDQ2YWFhNDAxLzEvaE5SZFpJdFBsLV94MWhZM0MzUmptUlpiam5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx
LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOfMA0G
CSqGSIb3DQEBCwUAA4IBAQCMSvqAMAIQNPIH39UmQ4ntPOG6qxd1qI7b5ZcV7FJL
2ixSG7ddfkWMazhousjoQjuMu2H0u2T6BVytwF62mru5TZv90gRMVsYBpatcoGiE
haOWOJ5cA1NPjW4xjPBFCf7wTJJ+0wcNvO+3dgu1p3enkRbPe8fZis4l8FykxdOj
3nUqpOcgAxhs3Ur6TtDiePUU0rX4XcoFrXhXAmGcwQU2VdeTKIHofQ3Jh2kVvWgJ
lPBIni19D8n9HHz09DQA96IWATmbSAPfuwdntg2w18ek9sq6jnDnP8hZYauJTL12
iK6Yoai4pQYkmdF8X8iP5CV4J64waM5WOjEYHETpZTZW
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:31:36 2025 by rpki-client