Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa
File: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (raw, json)
Hash identifier: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=
Subject key identifier: 86:69:FF:02:DB:C0:F8:EC:F1:A6:CE:E1:66:F5:FA:BC:E3:95:C9:58
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01963A51A27393A266392E1CD12D7C6420B4
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa
Signing time: Tue 15 Apr 2025 16:39:10 +0000
ROA not before: Tue 15 Apr 2025 16:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394432
IP address blocks: 103.86.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:51:a2:73:93:a2:66:39:2e:1c:d1:2d:7c:64:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 15 16:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8669ff02dbc0f8ecf1a6cee166f5fabce395c958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:74:9a:58:8b:05:06:2d:b0:ec:05:1e:1c:
27:08:fd:72:39:67:a8:77:05:1c:d8:a3:02:3f:0c:
44:11:e9:f5:de:63:77:9d:fe:89:13:8a:92:8d:04:
0b:b0:37:ba:3c:7c:8e:6f:19:88:b2:14:06:eb:b9:
55:1f:20:31:7f:0f:99:71:a3:38:3f:08:c3:98:bb:
69:0e:3a:c1:c9:b0:49:de:53:11:ed:7f:9e:26:94:
c9:18:cf:e4:e5:53:b8:ca:c7:a1:3a:58:7d:91:21:
78:78:16:0f:cb:88:11:7b:a1:cc:15:40:3a:38:17:
c0:4d:51:7a:77:87:2f:9f:96:60:70:54:40:d8:6f:
b9:0b:18:b3:c6:a0:bf:05:ea:a2:7a:b0:8d:58:ea:
40:8a:34:89:72:f5:5d:3d:27:e4:63:7a:02:03:87:
2c:6d:24:63:38:f5:79:47:a2:02:b4:8f:7f:58:c8:
de:ce:26:fb:9c:2a:14:6f:87:6f:2d:9d:98:4f:86:
4a:17:d4:5b:1c:45:c8:f2:be:a3:1c:b3:85:54:91:
6a:99:51:8c:5b:35:6d:97:7f:c1:8e:bc:45:5f:b8:
f9:3e:7b:a0:b6:3a:33:f0:5c:ac:cb:3f:97:09:19:
2a:15:9d:1c:91:d5:6e:4b:43:69:27:dc:25:85:76:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:FF:02:DB:C0:F8:EC:F1:A6:CE:E1:66:F5:FA:BC:E3:95:C9:58
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:d4:b5:e6:af:39:fb:ed:8e:b0:6b:75:2e:17:5d:98:92:54:
3e:eb:a1:d5:4e:8a:d5:62:d9:e6:e2:b3:6a:2c:9b:d6:f5:6e:
7a:33:a2:ad:58:d1:31:30:a9:2f:ed:f2:72:40:b4:2c:e5:85:
b3:1e:17:fa:ef:35:77:c9:a3:bc:2d:e5:40:84:20:34:6a:a4:
45:f6:73:9b:7d:87:09:96:bd:00:a6:2e:1d:8f:fa:02:ac:5b:
d4:db:29:0f:c4:c1:f1:97:97:c8:70:8b:04:18:30:6d:d4:5c:
d6:db:67:d7:2f:1e:49:8f:c6:33:e9:52:b4:83:4c:68:2d:d5:
3e:d6:59:3b:60:5a:d4:33:2a:91:80:2e:30:bb:2e:52:4f:d8:
ec:ee:ba:af:24:b5:72:07:08:7b:db:88:4d:f0:93:01:d9:86:
04:32:26:27:1c:82:99:4b:8b:86:22:81:6f:a0:a0:1e:38:08:
b2:11:00:aa:24:03:f2:c5:7f:70:5e:81:91:f8:d8:9b:fa:38:
1f:25:7c:51:e2:e6:11:93:fc:f3:0b:07:61:6d:c1:36:fe:e1:
ef:08:55:ca:02:0c:d3:dc:e8:80:dd:28:b4:5f:3e:21:89:bb:
29:ce:0a:35:1b:c7:07:77:a2:62:79:26:f2:de:73:58:0d:8a:
48:62:67:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY6UaJzk6JmOS4c0S18ZCC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjUwNDE1MTYzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjY5ZmYwMmRiYzBmOGVjZjFhNmNlZTE2NmY1ZmFiY2UzOTVjOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ah0mliLBQYtsOwFHhwnCP1yOWeo
dwUc2KMCPwxEEen13mN3nf6JE4qSjQQLsDe6PHyObxmIshQG67lVHyAxfw+ZcaM4
PwjDmLtpDjrBybBJ3lMR7X+eJpTJGM/k5VO4ysehOlh9kSF4eBYPy4gRe6HMFUA6
OBfATVF6d4cvn5ZgcFRA2G+5CxizxqC/BeqierCNWOpAijSJcvVdPSfkY3oCA4cs
bSRjOPV5R6ICtI9/WMjezib7nCoUb4dvLZ2YT4ZKF9RbHEXI8r6jHLOFVJFqmVGM
WzVtl3/BjrxFX7j5Pnugtjoz8Fysyz+XCRkqFZ0ckdVuS0NpJ9wlhXYhNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZp/wLbwPjs8abO4Wb1+rzjlclYMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvaG1uX0F0dkEtT3p4cHM3aFp2WDZ2T09WeVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1YkMA0G
CSqGSIb3DQEBCwUAA4IBAQAP1LXmrzn77Y6wa3UuF12YklQ+66HVTorVYtnm4rNq
LJvW9W56M6KtWNExMKkv7fJyQLQs5YWzHhf67zV3yaO8LeVAhCA0aqRF9nObfYcJ
lr0Api4dj/oCrFvU2ykPxMHxl5fIcIsEGDBt1FzW22fXLx5Jj8Yz6VK0g0xoLdU+
1lk7YFrUMyqRgC4wuy5ST9js7rqvJLVyBwh724hN8JMB2YYEMiYnHIKZS4uGIoFv
oKAeOAiyEQCqJAPyxX9wXoGR+Nib+jgfJXxR4uYRk/zzCwdhbcE2/uHvCFXKAgzT
3OiA3Si0Xz4hibspzgo1G8cHd6JieSby3nNYDYpIYmdb
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:01:22 2025 by rpki-client