Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/HYom0-kciwsBpHtG02N8IppZ_kA.roa
File: HYom0-kciwsBpHtG02N8IppZ_kA.roa (raw, json)
Hash identifier: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=
Subject key identifier: 1D:8A:26:D3:E9:1C:8B:0B:01:A4:7B:46:D3:63:7C:22:9A:59:FE:40
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 019421443244EB1D52FE849E24DB77F8DEC7
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/HYom0-kciwsBpHtG02N8IppZ_kA.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59720
IP address blocks: 185.5.232.0/22 maxlen: 24
185.5.232.0/24 maxlen: 24
185.5.233.0/24 maxlen: 24
185.5.234.0/24 maxlen: 24
185.5.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:44:eb:1d:52:fe:84:9e:24:db:77:f8:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d8a26d3e91c8b0b01a47b46d3637c229a59fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:dd:06:b7:d8:f5:15:5e:67:d3:32:41:b1:
5b:4d:71:2a:fd:d3:4f:8d:8f:e3:bf:f6:2d:d8:c5:
d7:2b:47:40:f1:12:6b:b7:f1:d9:bc:ad:c9:27:de:
b3:52:b0:6f:76:d8:dd:59:62:54:42:ca:c8:27:7d:
cd:a9:2e:9e:c1:ce:99:e5:d6:e8:8a:0a:50:e0:55:
d4:53:7b:4a:8f:93:16:57:db:a9:3a:4b:43:4c:e8:
c2:bb:54:05:03:1d:5d:a8:9f:2e:b1:4b:70:bd:0c:
83:ec:b3:c7:1a:26:6d:81:eb:a5:0a:c3:6d:3f:90:
eb:04:41:27:7c:1a:ee:ef:cc:e5:97:5a:a6:eb:a8:
0b:a3:b4:56:55:29:b7:71:82:07:af:4f:9e:31:0b:
17:18:ba:57:ee:8b:75:77:ba:64:6d:7c:cc:8e:f0:
8b:d0:1e:1d:7a:78:cc:8b:f9:cf:d6:8d:dd:6a:ab:
b8:08:f3:06:97:73:05:e4:c1:c9:62:82:41:74:53:
73:9d:da:ec:f9:a7:29:79:c3:ab:2a:f0:d1:0b:12:
c4:7e:8e:cc:db:8c:03:e6:94:1f:30:5b:36:db:a0:
27:a0:8f:55:c5:7d:07:f6:f9:7c:e9:09:a9:d7:79:
40:76:a4:08:c1:c9:65:97:65:37:90:0e:fe:25:1b:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:26:D3:E9:1C:8B:0B:01:A4:7B:46:D3:63:7C:22:9A:59:FE:40
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/HYom0-kciwsBpHtG02N8IppZ_kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
12:aa:b5:6b:a9:35:d8:82:0a:25:2b:d5:4e:b5:34:cc:85:e1:
b4:d4:d8:42:d8:48:ee:3a:3b:98:f2:28:90:7a:c2:c9:6a:55:
1f:98:2d:92:f7:f1:f4:72:ea:37:4a:3f:89:c2:b5:be:9a:11:
fa:6a:a6:93:b7:52:fd:0c:08:8e:54:84:be:10:36:37:05:37:
6f:9c:c6:19:71:47:38:cc:b9:91:e2:b2:d7:3b:45:5a:a7:49:
78:30:be:e4:97:23:9e:9a:65:e7:c6:2b:f6:c3:29:0b:7b:c5:
d6:92:77:06:56:88:a4:62:e2:2b:9d:d9:eb:29:ec:a4:8f:b9:
c6:a1:c0:a5:07:28:9e:1b:1b:a5:2e:a0:e4:cc:3f:d2:0b:c5:
5e:cd:a5:4d:e3:2a:c0:a0:32:10:ce:0a:c5:05:0f:8a:ac:6e:
a1:8c:6b:65:c3:0e:a0:4b:0c:54:12:c4:ee:0c:a7:39:2c:03:
76:00:27:30:f7:db:84:d2:70:da:4d:c7:49:9b:c0:00:25:e9:
c5:25:3f:ae:6d:05:88:cb:e0:3e:d1:21:7b:08:64:c2:95:51:
b2:7a:67:d3:e2:4c:33:e5:da:e3:0f:64:f1:d0:6f:a2:67:8b:
6b:fc:f5:fe:75:19:00:ed:c2:1b:11:fc:62:e6:96:b8:62:68:
63:a3:60:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDJE6x1S/oSeJNt3+N7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5
ZTViZTAwHhcNMjUwMTAxMDk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDhhMjZkM2U5MWM4YjBiMDFhNDdiNDZkMzYzN2MyMjlhNTlmZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RTdBrfY9RVeZ9MyQbFbTXEq/dNP
jY/jv/Yt2MXXK0dA8RJrt/HZvK3JJ96zUrBvdtjdWWJUQsrIJ33NqS6ewc6Z5dbo
igpQ4FXUU3tKj5MWV9upOktDTOjCu1QFAx1dqJ8usUtwvQyD7LPHGiZtgeulCsNt
P5DrBEEnfBru78zll1qm66gLo7RWVSm3cYIHr0+eMQsXGLpX7ot1d7pkbXzMjvCL
0B4denjMi/nP1o3daqu4CPMGl3MF5MHJYoJBdFNzndrs+acpecOrKvDRCxLEfo7M
24wD5pQfMFs226AnoI9VxX0H9vl86Qmp13lAdqQIwclll2U3kA7+JRtVRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2KJtPpHIsLAaR7RtNjfCKaWf5AMB8GA1UdIwQY
MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt
OTNiNTc4ZDE4YzhjLzEvSFlvbTAta2Npd3NCcEh0RzAyTjhJcHBaX2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj
LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQXoMA0G
CSqGSIb3DQEBCwUAA4IBAQASqrVrqTXYggolK9VOtTTMheG01NhC2EjuOjuY8iiQ
esLJalUfmC2S9/H0cuo3Sj+JwrW+mhH6aqaTt1L9DAiOVIS+EDY3BTdvnMYZcUc4
zLmR4rLXO0Vap0l4ML7klyOemmXnxiv2wykLe8XWkncGVoikYuIrndnrKeykj7nG
ocClByieGxulLqDkzD/SC8VezaVN4yrAoDIQzgrFBQ+KrG6hjGtlww6gSwxUEsTu
DKc5LAN2ACcw99uE0nDaTcdJm8AAJenFJT+ubQWIy+A+0SF7CGTClVGyemfT4kwz
5drjD2Tx0G+iZ4tr/PX+dRkA7cIbEfxi5pa4Ymhjo2BM
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:26 2025 by rpki-client