Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa
File: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (raw, json)
Hash identifier: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=
Subject key identifier: 1F:C0:D0:5F:21:F4:29:5C:6D:C8:0B:3E:AE:54:D6:00:9C:39:9F:43
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0195F62BF19D309D0B1424953BCB524210D8
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa
Signing time: Wed 02 Apr 2025 11:03:49 +0000
ROA not before: Wed 02 Apr 2025 11:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59776
IP address blocks: 185.72.120.0/22 maxlen: 22
185.72.121.0/24 maxlen: 24
2001:678:82c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:2b:f1:9d:30:9d:0b:14:24:95:3b:cb:52:42:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Apr 2 11:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fc0d05f21f4295c6dc80b3eae54d6009c399f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a4:ff:c6:b3:07:d7:3b:5d:22:1c:a1:f9:2c:
b4:61:c8:ac:e9:ad:d3:a0:f1:39:52:ed:a4:f9:9d:
7e:7d:f8:6c:5b:7d:91:ba:1e:80:f2:03:8b:a1:4e:
25:49:69:b7:c1:f1:d9:57:1d:30:9a:1d:24:80:cd:
24:41:a3:6a:ae:bf:97:7c:6e:82:8f:70:98:93:73:
d8:7c:0d:b9:db:cf:a4:12:8c:29:20:a8:60:17:52:
50:1d:c8:83:7f:e0:ac:af:ba:e3:00:fc:c4:98:91:
d6:1b:3b:bd:0f:0a:59:7f:96:dc:6e:92:4f:27:06:
a9:6a:a5:80:9c:65:12:c7:49:cf:de:fc:ad:8d:b8:
56:3f:95:22:c7:25:4f:eb:77:5c:fe:55:66:02:2d:
c0:3d:58:40:c0:ee:84:88:b8:38:7b:df:02:38:24:
1e:9e:2a:1a:f4:8b:1a:c1:7d:9f:0c:b9:47:75:4a:
cc:94:d4:37:cc:a3:44:2c:d3:61:da:b5:b6:e5:46:
54:63:5f:85:85:61:dd:6b:53:b6:5e:8f:c2:88:09:
94:5a:55:8c:7d:ef:cf:63:cd:0a:b6:e9:6a:72:bc:
0f:15:f8:cf:07:1b:a0:30:56:df:b4:b8:00:3a:6f:
1e:60:6d:e0:58:03:83:8f:75:e8:9e:08:a5:8e:d2:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:D0:5F:21:F4:29:5C:6D:C8:0B:3E:AE:54:D6:00:9C:39:9F:43
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.120.0/22
IPv6:
2001:678:82c::/48
Signature Algorithm: sha256WithRSAEncryption
62:1c:a1:f6:bc:22:fb:ab:84:e8:1e:4a:04:35:c6:b3:a9:f8:
69:46:d6:f5:c0:27:75:ff:55:6d:ef:ee:53:ea:89:3b:25:39:
d8:be:58:54:ef:20:5b:41:23:d3:a1:f4:92:b1:31:8e:59:c6:
7f:6a:96:1a:8a:96:2f:55:69:8b:56:1d:30:1c:20:88:16:89:
a8:80:3f:08:ef:8c:ab:34:36:27:9a:14:37:b8:ad:c4:de:c4:
e9:95:4b:d8:5f:22:22:42:6b:5c:cc:30:69:6b:5f:86:1b:33:
2b:a6:fd:74:e5:1e:ad:3f:fd:dc:f0:61:3e:c4:c5:9f:19:0d:
12:80:03:05:8d:9e:5f:a8:13:f5:ff:3b:4c:a7:2a:26:be:38:
73:83:ef:7d:fe:9f:bb:21:34:11:fa:9c:a5:92:48:28:02:de:
44:a6:ba:12:4a:48:b3:4b:19:d6:4c:03:22:88:fe:e0:47:51:
32:77:86:07:bd:10:78:1d:15:01:0b:13:c3:08:f7:2b:99:37:
bb:32:9d:41:79:b3:9a:55:ce:b4:61:6c:c9:1a:80:bd:cd:3d:
d2:ca:e5:fb:5a:86:59:65:2a:f8:5e:ee:c4:8b:b9:1f:10:53:
f8:57:4d:51:93:24:2b:74:45:36:53:f7:43:d3:79:cc:39:e6:
ce:47:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:07 2025 by rpki-client