Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/HGF0XnEulxWULqSPMu5rErMyWs8.roa
File: HGF0XnEulxWULqSPMu5rErMyWs8.roa (raw, json)
Hash identifier: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=
Subject key identifier: 1C:61:74:5E:71:2E:97:15:94:2E:A4:8F:32:EE:6B:12:B3:32:5A:CF
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019427486AA176794E6C7F3F48728C00BDF0
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/HGF0XnEulxWULqSPMu5rErMyWs8.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400790
IP address blocks: 206.245.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:a1:76:79:4e:6c:7f:3f:48:72:8c:00:bd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c61745e712e9715942ea48f32ee6b12b3325acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:8d:e0:c3:46:69:4c:65:84:4e:ff:62:3b:
38:70:83:a1:19:7b:3c:d1:5d:16:5c:4c:b7:92:d7:
58:fe:c4:14:81:1d:1b:1d:1f:a8:59:48:22:d7:be:
f1:f8:6b:31:59:1c:a2:c7:d5:94:a5:52:7c:2f:6e:
54:b5:39:f0:0e:9c:8d:41:50:1a:3a:28:bf:c9:dd:
72:0e:99:54:fc:1a:1b:fa:97:45:ed:a3:79:c8:6d:
a5:6d:78:9a:94:34:92:4a:e4:c1:77:0b:9c:fb:57:
8b:37:69:df:08:fa:9e:8c:6e:5b:40:86:40:d9:e7:
8f:96:b4:44:2d:6a:17:4d:9e:e5:ce:78:8b:fd:42:
44:cc:dc:0d:8c:ab:68:7a:88:0a:7c:ad:80:92:66:
b4:60:f3:42:72:5c:77:b7:ee:99:fc:11:20:6b:d2:
fd:3f:51:55:92:a5:b3:36:88:92:01:ad:c9:d9:1d:
c2:52:26:49:bc:8b:8e:83:6c:48:6d:f9:ba:41:6a:
fa:c4:ee:15:15:1e:25:e6:0f:f3:eb:a9:33:f3:96:
8c:f1:8b:4c:6e:22:81:73:6e:46:8a:16:b9:ef:3e:
75:7e:e4:ed:03:12:bc:b9:98:c5:9b:da:3b:b3:e4:
cd:6a:73:e8:db:21:c9:d5:d5:a5:17:5a:5e:2b:e3:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:74:5E:71:2E:97:15:94:2E:A4:8F:32:EE:6B:12:B3:32:5A:CF
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/HGF0XnEulxWULqSPMu5rErMyWs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.208.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3b:85:92:48:71:f9:1c:7b:53:67:c3:b0:22:aa:5f:79:c7:
22:59:2c:48:ca:5a:e6:98:5b:3e:26:24:3d:10:0e:04:92:79:
27:d7:20:84:97:75:3c:de:de:85:6d:42:7b:63:e0:e1:32:b4:
6d:e3:f8:b5:83:b5:fd:a0:f8:e3:c4:24:c3:ef:bd:b7:39:0d:
e7:6d:3e:4f:8b:17:cd:6b:ef:de:78:73:58:bb:e6:05:34:6c:
25:10:05:dd:24:4a:9e:f7:ed:ef:ec:26:a6:b8:99:3b:ba:f8:
df:7b:64:dd:a6:ec:77:84:4c:9b:46:54:6f:75:90:80:24:70:
3f:f4:e1:78:39:53:78:70:82:51:65:09:40:66:16:cd:c2:78:
5c:65:7b:c3:05:73:af:03:49:aa:a7:1a:d5:65:66:ba:22:05:
fd:9f:fc:24:0e:e7:d4:c8:3c:f3:8d:07:e8:8e:08:5b:3e:51:
a5:e8:b5:cf:1d:a8:75:80:75:8d:7e:d6:16:6d:a1:aa:ee:2f:
2a:a2:3d:fa:3a:7e:21:d2:1f:33:14:00:9e:ab:77:c6:c8:f7:
71:cd:91:56:fc:52:78:9b:cf:af:67:a4:63:b7:a6:36:e3:3c:
ba:da:f7:b1:a1:17:be:ee:66:67:2d:35:e6:2d:41:60:7d:54:
a3:c3:49:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGqhdnlObH8/SHKMAL3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy
NTkxYzcwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzYxNzQ1ZTcxMmU5NzE1OTQyZWE0OGYzMmVlNmIxMmIzMzI1YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RmN4MNGaUxlhE7/Yjs4cIOhGXs8
0V0WXEy3ktdY/sQUgR0bHR+oWUgi177x+GsxWRyix9WUpVJ8L25UtTnwDpyNQVAa
Oii/yd1yDplU/Bob+pdF7aN5yG2lbXialDSSSuTBdwuc+1eLN2nfCPqejG5bQIZA
2eePlrRELWoXTZ7lzniL/UJEzNwNjKtoeogKfK2Akma0YPNCclx3t+6Z/BEga9L9
P1FVkqWzNoiSAa3J2R3CUiZJvIuOg2xIbfm6QWr6xO4VFR4l5g/z66kz85aM8YtM
biKBc25Giha57z51fuTtAxK8uZjFm9o7s+TNanPo2yHJ1dWlF1peK+OB/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxhdF5xLpcVlC6kjzLuaxKzMlrPMB8GA1UdIwQY
MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct
NDhjZjQxMmIzODdiLzEvSEdGMFhuRXVseFdVTHFTUE11NXJFck15V3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi
LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvXQMA0G
CSqGSIb3DQEBCwUAA4IBAQBoO4WSSHH5HHtTZ8OwIqpfecciWSxIylrmmFs+JiQ9
EA4Eknkn1yCEl3U83t6FbUJ7Y+DhMrRt4/i1g7X9oPjjxCTD7723OQ3nbT5PixfN
a+/eeHNYu+YFNGwlEAXdJEqe9+3v7CamuJk7uvjfe2Tdpux3hEybRlRvdZCAJHA/
9OF4OVN4cIJRZQlAZhbNwnhcZXvDBXOvA0mqpxrVZWa6IgX9n/wkDufUyDzzjQfo
jghbPlGl6LXPHah1gHWNftYWbaGq7i8qoj36On4h0h8zFACeq3fGyPdxzZFW/FJ4
m8+vZ6Rjt6Y24zy62vexoRe+7mZnLTXmLUFgfVSjw0mV
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:15 2025 by rpki-client