Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcWreomVamO6igDbYdaHvUovBJE.roa
File: HcWreomVamO6igDbYdaHvUovBJE.roa (raw, json)
Hash identifier: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=
Subject key identifier: 1D:C5:AB:7A:89:95:6A:63:BA:8A:00:DB:61:D6:87:BD:4A:2F:04:91
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0194244567956E87FBD8701D6A3D65F38926
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcWreomVamO6igDbYdaHvUovBJE.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 168.199.236.0/22 maxlen: 24
168.199.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:67:95:6e:87:fb:d8:70:1d:6a:3d:65:f3:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc5ab7a89956a63ba8a00db61d687bd4a2f0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:37:16:8d:42:17:4f:36:0f:c8:14:07:49:
a2:dc:8d:1c:d2:c5:3b:50:f3:fb:93:58:dd:e7:7c:
a3:74:c7:20:29:1d:76:2d:0e:81:7f:1e:dd:96:1c:
ba:e4:47:50:6e:ae:de:fb:04:c2:3b:4b:a5:14:e5:
65:dc:72:7f:df:58:47:82:7b:e3:11:af:3c:6f:66:
0f:29:4f:48:92:ff:c9:de:57:f3:f2:2b:da:c4:86:
28:1b:27:00:3f:3a:f4:1c:00:5d:4b:92:83:8e:30:
21:67:8f:35:36:e4:cd:95:03:63:dc:97:b4:01:ba:
ee:58:73:84:ed:09:2e:c9:48:a9:51:b5:5d:31:7c:
37:38:33:36:e1:a6:95:32:5a:96:06:8c:b3:4a:2a:
5e:82:f9:b1:17:31:75:10:55:ad:c6:80:52:4c:75:
04:5f:51:d8:55:31:2c:92:78:80:4e:d4:3e:13:09:
30:b0:6a:03:37:d9:3c:dd:2a:fa:9a:2f:cd:15:1f:
34:4d:38:af:47:56:3f:4d:63:0d:51:3f:bf:da:72:
48:a2:9d:00:f8:a4:ec:01:10:0f:cb:1b:b6:a8:60:
a5:f6:28:4c:10:b6:14:d3:9a:4d:33:64:2b:78:99:
84:c6:a6:ed:e4:ff:1c:d6:14:53:51:ab:a4:70:d7:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:AB:7A:89:95:6A:63:BA:8A:00:DB:61:D6:87:BD:4A:2F:04:91
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcWreomVamO6igDbYdaHvUovBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.236.0/22
168.199.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2f:61:44:d5:3d:6c:b1:ee:47:5f:a2:5d:19:41:40:2e:33:
fd:40:91:42:01:be:0b:ac:ae:94:15:ea:62:7b:be:7c:5a:e8:
e1:bd:b3:19:5c:ad:e1:fb:cd:ca:0d:d7:67:91:f6:7a:50:23:
ee:40:76:24:fa:63:0e:c7:9e:43:71:ff:0b:ad:2f:d9:b4:ed:
78:f1:fe:a8:b0:d1:87:47:8b:24:a6:80:ef:fe:19:f2:fa:58:
e1:fd:ae:21:cb:e6:9d:3c:70:ec:50:4e:c8:24:28:b1:fc:e3:
ba:88:4c:a4:c4:de:65:9a:3b:2d:ae:6e:ca:74:27:7c:f4:af:
4b:70:83:eb:4d:c5:b8:b6:27:5c:56:11:33:c8:44:0a:c8:f8:
40:30:f7:7a:b2:f2:68:a6:57:e0:c6:c5:67:98:32:63:0f:b5:
33:3f:cd:2c:42:6b:95:73:72:7a:c6:26:66:cf:b2:9f:71:a5:
ec:50:44:ad:c6:6d:71:77:ad:3f:51:a4:5d:e8:65:31:cb:1d:
7a:b2:bd:f4:4b:72:05:3a:51:a9:21:67:bb:66:5f:7b:8b:9b:
0d:39:7a:4b:83:b6:e4:d6:30:82:30:35:36:b4:da:0a:8e:03:
5e:b2:24:dc:a8:81:1f:74:55:eb:93:b0:37:65:76:43:1a:91:
a6:01:fd:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRWeVbof72HAdaj1l84kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjUwMTAxMjM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGM1YWI3YTg5OTU2YTYzYmE4YTAwZGI2MWQ2ODdiZDRhMmYwNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWc3Fo1CF082D8gUB0mi3I0c0sU7
UPP7k1jd53yjdMcgKR12LQ6Bfx7dlhy65EdQbq7e+wTCO0ulFOVl3HJ/31hHgnvj
Ea88b2YPKU9Ikv/J3lfz8ivaxIYoGycAPzr0HABdS5KDjjAhZ481NuTNlQNj3Je0
AbruWHOE7QkuyUipUbVdMXw3ODM24aaVMlqWBoyzSipegvmxFzF1EFWtxoBSTHUE
X1HYVTEskniATtQ+EwkwsGoDN9k83Sr6mi/NFR80TTivR1Y/TWMNUT+/2nJIop0A
+KTsARAPyxu2qGCl9ihMELYU05pNM2QreJmExqbt5P8c1hRTUaukcNdYDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB3Fq3qJlWpjuooA22HWh71KLwSRMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvSGNXcmVvbVZhbU82aWdEYllkYUh2VW92QkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqMfsAwQC
qMf4MA0GCSqGSIb3DQEBCwUAA4IBAQBML2FE1T1sse5HX6JdGUFALjP9QJFCAb4L
rK6UFepie758WujhvbMZXK3h+83KDddnkfZ6UCPuQHYk+mMOx55Dcf8LrS/ZtO14
8f6osNGHR4skpoDv/hny+ljh/a4hy+adPHDsUE7IJCix/OO6iEykxN5lmjstrm7K
dCd89K9LcIPrTcW4tidcVhEzyEQKyPhAMPd6svJoplfgxsVnmDJjD7UzP80sQmuV
c3J6xiZmz7KfcaXsUEStxm1xd60/UaRd6GUxyx16sr30S3IFOlGpIWe7Zl97i5sN
OXpLg7bk1jCCMDU2tNoKjgNesiTcqIEfdFXrk7A3ZXZDGpGmAf3q
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:08:32 2025 by rpki-client