Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/hbB_a3Y8U324LaNC-0q5xvctY3o.roa
File: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (raw, json)
Hash identifier: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=
Subject key identifier: 85:B0:7F:6B:76:3C:53:7D:B8:2D:A3:42:FB:4A:B9:C6:F7:2D:63:7A
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019422FB1263CAF360B23A07301F57F7EB11
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/hbB_a3Y8U324LaNC-0q5xvctY3o.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47755
IP address blocks: 91.232.38.0/24 maxlen: 24
185.68.24.0/22 maxlen: 24
2a05:1540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:12:63:ca:f3:60:b2:3a:07:30:1f:57:f7:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85b07f6b763c537db82da342fb4ab9c6f72d637a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:eb:ec:10:ac:31:b9:25:e7:87:ba:fe:3c:
bf:83:61:11:88:87:70:33:19:eb:71:86:70:0d:54:
f0:7a:30:3f:c0:e9:aa:4b:ab:cf:65:43:01:9a:59:
e6:b9:b0:a4:0a:02:1c:b2:5e:d9:ce:5c:6d:57:d2:
d7:c4:01:c6:47:22:d7:be:3e:1f:c1:a3:88:92:2d:
56:20:97:52:9f:62:43:86:c7:c9:92:96:d2:47:f1:
b9:d9:37:62:5d:5d:3e:8c:58:f3:0c:48:d9:d3:f1:
f3:00:ef:d6:9e:8c:ec:af:6a:cf:3f:7b:6f:dd:89:
70:12:93:35:85:81:69:b3:dd:43:d5:73:05:3d:28:
4b:94:de:40:d6:63:63:cd:a4:9d:7d:7d:95:0d:ed:
fe:08:c2:4c:3d:04:87:65:36:74:51:74:c0:cf:b8:
7e:0f:1a:e9:8f:74:d4:9e:19:10:ba:60:7d:33:14:
c3:dd:9f:e7:1e:ff:f9:3f:36:02:f0:eb:16:da:8e:
3e:72:3d:ce:b7:8f:ee:e9:fa:f3:eb:64:8b:05:c7:
eb:83:a8:c2:fd:68:1b:e4:c8:4e:e8:44:04:55:38:
42:cc:a7:58:b6:ef:20:bc:a0:41:cd:72:f6:df:81:
f6:5d:d8:55:bb:58:4d:b1:35:83:d2:e0:49:19:58:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:7F:6B:76:3C:53:7D:B8:2D:A3:42:FB:4A:B9:C6:F7:2D:63:7A
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/hbB_a3Y8U324LaNC-0q5xvctY3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.38.0/24
185.68.24.0/22
IPv6:
2a05:1540::/29
Signature Algorithm: sha256WithRSAEncryption
95:b5:3b:6b:e5:e0:52:00:7c:e1:ae:dc:da:67:bc:2d:d9:cd:
e8:e5:f3:50:88:f0:29:b2:0d:d7:8e:19:dc:a6:a4:5b:aa:04:
cc:c9:b1:07:13:1c:dc:54:80:0b:a7:da:87:b2:7b:5e:f6:44:
af:a8:59:46:d6:3d:a8:ed:8c:95:95:9f:9f:a1:5a:19:63:50:
5a:1e:95:e0:c2:18:61:6b:1a:94:d9:25:ef:dc:2a:ab:42:67:
67:f4:8e:11:2c:1a:e7:61:f3:31:ad:d4:9b:10:f5:e3:93:97:
6b:6a:66:53:78:82:6f:1f:86:3a:8c:ad:b2:d2:17:1e:2e:cc:
ba:c4:1d:05:3a:2f:a7:0f:22:e6:f3:48:b9:b7:d1:65:b6:58:
24:8a:fe:9b:62:e2:9f:32:f6:98:02:f1:d3:4a:48:ab:d7:cd:
8b:6f:bc:8e:b6:d9:33:62:da:76:3d:13:dd:28:ff:3b:7b:af:
0b:5b:05:1d:bf:30:0a:95:85:f0:c5:b5:cf:ab:8d:9e:92:f7:
04:18:d1:d3:3b:22:10:e2:ff:b0:49:50:21:d4:c8:8d:ae:f3:
04:91:29:82:1b:95:b0:06:41:aa:fe:16:f4:c6:5e:0f:b9:15:
e5:5b:8f:1a:03:18:23:3c:18:63:8b:cf:51:d0:f2:5e:d6:1a:
c4:34:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:28:40 2025 by rpki-client