Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/H87BgtgHIgu3QOsmyVPPsdsknwE.roa
File: H87BgtgHIgu3QOsmyVPPsdsknwE.roa (raw, json)
Hash identifier: xkDJ76AwerYWSRPO+inuQ8jDirisQ4H3gsMF8VViH04=
Subject key identifier: 1F:CE:C1:82:D8:07:22:0B:B7:40:EB:26:C9:53:CF:B1:DB:24:9F:01
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 019422FBD4FFE34A37407E4618637E9A07CE
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/H87BgtgHIgu3QOsmyVPPsdsknwE.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211510
IP address blocks: 85.193.190.0/24 maxlen: 24
85.193.191.0/24 maxlen: 24
185.54.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d4:ff:e3:4a:37:40:7e:46:18:63:7e:9a:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fcec182d807220bb740eb26c953cfb1db249f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:25:c4:60:65:65:cc:60:00:ed:08:b4:3a:
36:19:72:1f:88:06:62:11:36:f0:04:29:c9:73:a1:
52:44:40:0b:be:63:0a:92:97:1b:57:0d:a1:6f:5a:
a4:f5:e2:f8:a2:a4:7e:92:5d:0f:fa:e5:58:14:d8:
6c:5a:0e:23:5d:fb:97:8c:ee:8c:d2:10:8e:ce:7c:
c7:00:59:a2:5c:ee:d6:a0:52:de:0e:81:43:71:07:
f7:e6:69:ce:27:90:57:3f:38:f6:2a:3a:03:7d:37:
bd:57:e8:2a:60:d1:54:58:bc:4a:a7:d2:20:d6:69:
43:b8:7a:cd:e0:cf:ce:30:d5:a6:fe:f8:8b:3b:b8:
38:45:cf:d0:e6:65:db:66:05:8f:f1:fa:20:94:73:
39:03:b8:60:33:ed:24:11:96:d8:50:8d:aa:8f:f5:
d7:87:dc:f7:46:5b:f3:6a:89:c0:74:96:7e:71:63:
76:63:d3:72:20:cd:5e:4b:c8:cd:ce:0b:c0:eb:0d:
3e:11:74:f4:60:3e:fb:1d:cf:a4:fb:4d:dd:f4:e7:
3e:1d:ce:b2:11:7a:7e:ef:bd:97:e0:aa:7a:f4:2c:
ac:4b:2b:c9:8a:74:7f:b4:80:de:83:19:17:73:e3:
5e:ad:b7:64:47:45:f8:60:0c:1e:77:84:2c:d8:65:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:C1:82:D8:07:22:0B:B7:40:EB:26:C9:53:CF:B1:DB:24:9F:01
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/H87BgtgHIgu3QOsmyVPPsdsknwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.190.0/23
185.54.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:64:7d:c0:fe:f3:84:9c:48:75:87:fd:f4:e3:c5:2e:85:a5:
6a:13:5a:7f:58:4a:50:7c:8d:0a:3b:3d:55:7c:46:cf:f6:e1:
9e:af:bf:3b:7d:07:23:0e:d2:45:c6:2b:c3:75:63:e9:9d:b8:
b7:27:58:0e:7f:1d:72:c9:c4:93:a9:88:32:96:2a:08:84:56:
c5:eb:40:b1:1d:d5:c5:31:4e:d6:96:62:d2:7c:4d:32:a5:98:
7e:94:e8:2e:92:06:37:56:de:4e:31:e1:14:e6:81:0b:be:66:
ff:cc:e7:c3:7a:6a:2b:20:02:e9:25:2d:35:7a:80:2e:45:8f:
5b:ed:83:19:cf:4b:fc:91:f2:9d:c0:1a:20:6c:6b:a5:f1:05:
c8:08:3d:dc:54:7e:25:8b:4c:f6:6d:e0:fe:70:68:ec:f1:e5:
af:d6:8f:29:c9:a5:12:74:83:68:43:30:df:52:2f:4d:e2:24:
aa:c4:cc:d7:21:c7:07:c1:55:f2:bc:93:15:4a:78:f8:9e:8c:
4a:a7:55:8b:e1:7d:86:42:53:5a:0a:86:d8:ab:b7:01:d0:d9:
ed:b4:b5:df:23:1c:4e:69:7c:94:a0:9c:f3:2b:7a:99:99:2f:
47:68:49:7e:6f:19:22:54:3d:c6:8d:8b:4a:97:87:f0:68:c0:
ee:84:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:30:58 2025 by rpki-client