Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa
File: 1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa (raw, json)
Hash identifier: OZx3u6xzIMjyl5Um2kz+G+WpnO01yNqGdt7/mp9FJDI=
Subject key identifier: FB:C1:E4:74:10:42:96:D0:CF:C4:D9:F7:89:89:C8:11:7C:39:4B:38
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019425FC0FE1F6E82C47B2FB2D36DBED656B
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57610
IP address blocks: 5.250.255.0/24 maxlen: 24
185.123.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0f:e1:f6:e8:2c:47:b2:fb:2d:36:db:ed:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc1e474104296d0cfc4d9f78989c8117c394b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:41:fb:89:dc:0f:58:ff:2e:b8:ea:49:29:
b0:f9:2f:b8:e9:6d:78:62:a4:c3:8d:18:75:2c:2a:
d2:95:e0:9a:f8:e4:eb:26:7b:97:95:9e:67:5d:02:
30:0f:a5:4b:16:51:fb:88:81:c5:b0:27:22:b4:ed:
09:0a:83:a5:9e:4b:ec:b6:4c:f5:68:78:d6:3f:e1:
7c:16:f2:33:25:3d:4f:53:f1:6c:01:07:2f:14:7f:
1b:fa:8b:77:92:db:ee:ff:6a:48:8f:78:e7:f0:e8:
db:4a:6c:26:bc:2f:e4:44:25:33:c1:3c:d9:b9:2a:
57:2b:24:af:75:10:55:7a:af:f3:37:18:f9:ad:20:
30:a5:66:85:d3:d8:84:b2:cb:2b:6a:a2:a8:62:66:
5c:18:92:2d:26:32:f7:7a:61:5b:5f:5c:b9:97:f0:
d4:75:9f:df:4b:f7:f5:0d:1a:42:15:2f:62:64:71:
fb:e4:90:6e:3b:32:94:84:8b:11:ae:98:29:8d:cd:
a2:a2:f4:66:54:b0:36:7f:5f:54:99:65:47:c2:01:
e5:75:f0:bb:7a:9f:65:0e:5e:98:1e:d5:40:24:64:
45:ac:01:c6:f3:ee:e1:a2:7d:20:2d:e2:41:de:26:
6e:9a:4b:f7:4e:41:b2:9e:7b:c1:bf:82:c4:c0:01:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:E4:74:10:42:96:D0:CF:C4:D9:F7:89:89:C8:11:7C:39:4B:38
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.255.0/24
185.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:df:ad:e6:67:9f:aa:29:26:0a:7d:5d:52:af:07:40:ec:13:
6f:1a:98:81:db:6c:8b:d3:35:9a:a8:19:9f:c0:1b:7f:86:03:
01:c9:03:74:00:69:e8:4c:dc:57:e8:3c:56:a9:ae:93:65:09:
b6:9d:01:93:29:fe:22:61:90:d1:fe:9f:fe:ed:1c:66:ff:2a:
bb:4e:26:d4:cf:95:73:c3:14:ee:c3:2e:7c:66:7b:b8:84:ea:
6d:c3:9d:de:6d:97:1d:6c:17:05:c3:a1:f5:76:1e:96:00:03:
ce:e9:e5:ed:69:f5:a4:3d:10:c2:4c:f1:7f:db:ac:72:84:0a:
d9:f7:72:63:7c:c3:6e:33:99:cc:7f:5f:71:6d:96:f8:27:cb:
d6:a1:8f:b5:fd:80:a3:91:b4:5a:6b:ca:8f:29:d6:a3:ad:54:
35:ad:90:b0:aa:74:3b:a9:a3:1d:b0:08:0c:81:10:6a:03:0d:
a8:74:38:6a:8c:78:6b:49:d5:73:b9:59:c2:4e:9d:a9:7e:a2:
b2:f9:38:39:05:4d:f5:1b:6c:9b:2e:8f:52:f1:a4:63:05:e7:
b4:61:4b:6e:27:89:99:70:e5:b7:0b:8b:9d:26:d6:25:d0:d4:
7b:a2:10:c7:b6:fd:c7:9f:18:3f:52:c2:70:0d:c4:fa:a4:75:
e9:aa:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:52 2025 by rpki-client