Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa
File: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (raw, json)
Hash identifier: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=
Subject key identifier: 1C:75:C6:4A:E1:90:45:6F:F3:03:3E:D3:83:B5:01:C4:C9:14:1E:91
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019422FC420F54CA4FEC22752750FB20691F
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204720
IP address blocks: 185.141.224.0/24 maxlen: 24
185.141.225.0/24 maxlen: 24
185.141.226.0/24 maxlen: 24
185.141.227.0/24 maxlen: 24
2a0c:4480:1::/48 maxlen: 48
2a0c:4480:2::/48 maxlen: 48
2a0c:4480:3::/48 maxlen: 48
2a0c:4480:6::/48 maxlen: 48
2a0c:4480:7::/48 maxlen: 48
2a0c:4480:8::/48 maxlen: 48
2a0c:4480:9::/48 maxlen: 48
2a0c:4480:a::/48 maxlen: 48
2a0c:4480:b::/48 maxlen: 48
2a0c:4480:c::/48 maxlen: 48
2a0c:4480:d::/48 maxlen: 48
2a0c:4481::/48 maxlen: 48
2a0c:4481:1::/48 maxlen: 48
2a0c:4481:2::/48 maxlen: 48
2a0c:4481:3::/48 maxlen: 48
2a0c:4481:4::/48 maxlen: 48
2a0c:4481:5::/48 maxlen: 48
2a0c:4481:6::/48 maxlen: 48
2a0c:4481:7::/48 maxlen: 48
2a0c:4481:8::/48 maxlen: 48
2a0c:4481:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:0f:54:ca:4f:ec:22:75:27:50:fb:20:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c75c64ae190456ff3033ed383b501c4c9141e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:98:32:cd:49:73:8a:df:68:04:10:4d:33:
bb:62:68:f7:a7:28:a6:69:29:f6:6a:dc:fe:4c:29:
97:09:81:1b:07:b4:4d:1c:52:37:0a:ab:cb:d5:cb:
a5:52:93:58:31:52:43:d9:3b:4a:63:5d:dd:43:a9:
a2:d7:d0:3b:24:8d:8d:95:b3:85:5b:87:ac:0e:d6:
37:59:1e:89:7f:12:e9:56:53:99:35:e8:95:c3:37:
52:90:86:26:16:dc:dc:a8:4a:96:fc:e7:d4:04:d9:
4e:15:d1:00:91:ec:eb:f5:67:11:d1:56:95:e9:fe:
0d:73:b9:58:b2:4e:1a:96:f6:9d:20:44:04:d5:c8:
0a:5b:1d:d6:67:54:3d:d6:50:b6:a8:ae:03:fa:48:
51:78:c3:73:df:56:37:5e:d7:90:07:57:77:d6:f5:
81:11:5f:ac:85:ba:14:e9:d9:5d:f1:89:98:84:15:
60:20:8b:b9:82:93:46:8f:d7:a9:a0:36:08:60:05:
0c:3e:64:20:60:3a:45:57:29:28:9e:4d:db:cb:06:
ea:e5:37:b4:5c:c1:48:e1:9c:58:b5:19:df:9f:79:
02:48:4b:cb:8b:fb:76:63:f5:31:ce:2e:3f:81:46:
77:7b:e9:0d:66:f5:20:3b:32:24:63:ef:e2:2d:89:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:C6:4A:E1:90:45:6F:F3:03:3E:D3:83:B5:01:C4:C9:14:1E:91
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.224.0/22
IPv6:
2a0c:4480:1::-2a0c:4480:3:ffff:ffff:ffff:ffff:ffff
2a0c:4480:6::-2a0c:4480:d:ffff:ffff:ffff:ffff:ffff
2a0c:4481::-2a0c:4481:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:0b:df:d4:2f:e8:37:c9:4f:7b:33:07:45:39:c5:77:a7:28:
a9:df:e5:ed:ed:69:d9:c9:4f:80:81:ab:32:a8:50:1e:91:8d:
7c:c6:24:5b:40:a6:c3:7a:bc:c0:a6:cf:a0:8b:10:1f:47:5c:
83:c0:2e:1c:13:60:66:fe:df:b9:56:34:ca:93:b3:39:da:68:
16:ee:80:e5:55:f4:4c:83:cf:7a:2d:ee:a9:77:78:f5:95:b5:
cb:f8:38:c7:08:91:55:8e:28:ec:81:c2:3d:cb:a9:86:2d:85:
38:6f:e1:7c:48:21:e9:2c:33:f6:5f:20:4a:9d:10:85:75:6d:
03:17:ee:c7:36:8f:e6:46:83:c3:49:24:28:9e:cd:f9:7c:09:
1b:ed:32:88:17:35:41:2d:a1:d1:38:f3:a7:a0:5b:7e:d3:db:
89:42:a1:e2:c5:2a:67:34:73:b9:9b:4c:fb:be:33:64:31:ff:
1a:c5:4f:99:89:1c:4f:9d:6f:2d:86:5c:90:10:e8:2d:28:15:
88:90:fc:68:fc:74:f5:33:46:c1:68:9f:b4:b7:9c:16:22:f6:
cc:05:db:5f:01:75:cd:e7:fd:bb:f7:13:a0:40:03:80:32:ae:
ed:3e:3c:b9:21:94:d0:9c:41:51:d4:47:7c:98:a1:a1:6d:48:
f1:e2:eb:fe
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZQi/EIPVMpP7CJ1J1D7IGkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0
ZWI3YjkwHhcNMjUwMTAxMTc0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzc1YzY0YWUxOTA0NTZmZjMwMzNlZDM4M2I1MDFjNGM5MTQxZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3mYMs1Jc4rfaAQQTTO7Ymj3pyim
aSn2atz+TCmXCYEbB7RNHFI3CqvL1culUpNYMVJD2TtKY13dQ6mi19A7JI2NlbOF
W4esDtY3WR6JfxLpVlOZNeiVwzdSkIYmFtzcqEqW/OfUBNlOFdEAkezr9WcR0VaV
6f4Nc7lYsk4alvadIEQE1cgKWx3WZ1Q91lC2qK4D+khReMNz31Y3XteQB1d31vWB
EV+shboU6dld8YmYhBVgIIu5gpNGj9epoDYIYAUMPmQgYDpFVykonk3bywbq5Te0
XMFI4ZxYtRnfn3kCSEvLi/t2Y/Uxzi4/gUZ3e+kNZvUgOzIkY+/iLYk05QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBx1xkrhkEVv8wM+04O1AcTJFB6RMB8GA1UdIwQY
MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt
NzU2OGExMGRmNDQzLzEvSEhYR1N1R1FSV196QXo3VGc3VUJ4TWtVSHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz
LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAMBAIAATAGAwQCuY3gMEAE
AgACMDowEgMHACoMRIAAAQMHAioMRIAAADASAwcBKgxEgAAGAwcBKgxEgAAMMBAD
BQAqDESBAwcBKgxEgQAIMA0GCSqGSIb3DQEBCwUAA4IBAQBuC9/UL+g3yU97MwdF
OcV3pyip3+Xt7WnZyU+AgasyqFAekY18xiRbQKbDerzAps+gixAfR1yDwC4cE2Bm
/t+5VjTKk7M52mgW7oDlVfRMg896Le6pd3j1lbXL+DjHCJFVjijsgcI9y6mGLYU4
b+F8SCHpLDP2XyBKnRCFdW0DF+7HNo/mRoPDSSQons35fAkb7TKIFzVBLaHROPOn
oFt+09uJQqHixSpnNHO5m0z7vjNkMf8axU+ZiRxPnW8thlyQEOgtKBWIkPxo/HT1
M0bBaJ+0t5wWIvbMBdtfAXXN5/279xOgQAOAMq7tPjy5IZTQnEFR1Ed8mKGhbUjx
4uv+
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:13:48 2025 by rpki-client