Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hqAa-HGl9YYSVOAZse-mATGGJYM.roa
File: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (raw, json)
Hash identifier: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=
Subject key identifier: 86:A0:1A:F8:71:A5:F5:86:12:54:E0:19:B1:EF:A6:01:31:86:25:83
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E1447CCC6B04B2D251421256E6DEB
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hqAa-HGl9YYSVOAZse-mATGGJYM.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205052
IP address blocks: 151.248.92.0/23 maxlen: 23
151.248.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:14:47:cc:c6:b0:4b:2d:25:14:21:25:6e:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a01af871a5f5861254e019b1efa60131862583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:13:3d:64:cc:c9:b1:41:00:80:8c:f8:80:
2d:07:17:20:94:c5:a0:f6:e2:5b:09:9b:0c:df:5c:
01:1e:cd:8a:a4:b0:ab:a9:12:69:34:08:e6:fa:d1:
bc:86:da:4b:22:d2:a7:fd:6b:5d:0e:8d:51:a8:73:
02:91:e4:82:2b:4c:15:4e:89:62:9a:73:87:a9:10:
6e:c4:93:bd:8e:a2:7d:0e:49:f2:36:46:4a:c0:4f:
c9:a7:21:31:3e:f1:a2:9e:dd:4a:b1:ca:20:5a:8a:
f1:3e:34:7d:0b:e1:ac:87:c0:ae:da:1d:a2:a0:06:
0a:e9:8b:3b:71:5f:e3:90:2d:44:09:3a:37:fb:dc:
ea:c5:c4:2b:ea:d2:29:eb:73:86:cb:d7:da:32:1e:
4a:f6:44:3d:81:27:dd:1d:3a:7a:f5:10:66:75:5d:
9e:b7:1e:bc:69:14:22:d2:8b:48:ae:0f:c2:d8:92:
df:e6:a2:a5:70:72:35:09:f5:27:58:c2:3d:04:5b:
c3:f8:5b:e6:24:7c:a6:ca:6a:6c:97:7f:f0:ca:46:
a7:21:9f:af:f1:f6:d7:c0:c4:a8:b2:e5:10:9f:d1:
63:71:6b:68:42:98:71:09:f8:6f:4d:ef:1f:45:3a:
13:43:ac:bb:c6:74:3f:94:ef:23:26:ab:55:81:f8:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:1A:F8:71:A5:F5:86:12:54:E0:19:B1:EF:A6:01:31:86:25:83
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hqAa-HGl9YYSVOAZse-mATGGJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.92.0-151.248.94.255
Signature Algorithm: sha256WithRSAEncryption
79:64:ca:b1:22:bf:2e:f6:89:8e:e9:51:07:51:0c:d3:4b:b1:
80:c4:8e:cd:76:ba:99:2b:90:1b:83:21:b6:f3:7b:c2:68:ad:
1b:77:42:57:a6:ec:fa:88:d9:29:2b:4b:02:f0:90:5c:41:d7:
88:f8:fa:45:8e:5f:3c:57:24:1e:5c:75:53:e2:85:8f:bf:c9:
5b:25:9e:60:22:75:56:ce:2a:51:1f:0f:cc:16:9a:c3:7a:ca:
4a:94:c6:89:56:0b:54:2f:b9:7d:17:fb:a6:38:14:c9:eb:36:
67:33:7d:c4:ae:6a:51:f4:50:3b:05:7a:f4:c9:36:a1:0a:07:
f0:80:a9:61:41:7b:94:61:54:e3:6b:d0:13:fc:7c:f2:58:5c:
ae:3a:bb:c7:e8:ef:ad:c0:cb:58:59:37:44:a4:44:1c:ed:39:
cc:aa:8b:aa:10:72:22:29:97:62:31:96:a5:77:80:5d:70:f0:
38:b6:3a:6d:1b:71:a0:b6:e0:f4:f8:56:b9:ad:92:42:61:7a:
94:16:ea:41:c4:77:c4:02:e0:47:74:83:17:6b:07:77:22:31:
98:f9:a4:5c:b6:50:14:f0:4b:a8:a2:3b:09:0d:b0:32:d1:ad:
9b:53:29:71:4b:2a:56:1a:83:e3:ae:58:d8:b2:17:34:7f:8c:
1b:f7:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:17:15 2025 by rpki-client