Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/HzvKGtUs7sPJzismOjvVuToO40U.roa
File: HzvKGtUs7sPJzismOjvVuToO40U.roa (raw, json)
Hash identifier: k2eXr/bkVJcJ9MGb6TTJoQRt6lF8uUxgmHehUrD684g=
Subject key identifier: 1F:3B:CA:1A:D5:2C:EE:C3:C9:CE:2B:26:3A:3B:D5:B9:3A:0E:E3:45
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 0194266BA9C7A1C449A84E918A65FDFFDE65
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/HzvKGtUs7sPJzismOjvVuToO40U.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47719
IP address blocks: 185.61.48.0/24 maxlen: 24
185.61.49.0/24 maxlen: 24
185.61.50.0/24 maxlen: 24
185.61.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:c7:a1:c4:49:a8:4e:91:8a:65:fd:ff:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f3bca1ad52ceec3c9ce2b263a3bd5b93a0ee345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:58:2c:31:bd:84:aa:cf:ee:4d:35:0b:6b:
9e:ca:79:6a:7e:0f:4d:a4:9c:aa:d4:a6:65:ba:8a:
6d:b0:c0:02:b2:0a:b0:7c:b4:2f:42:82:5e:48:c9:
81:9f:e2:55:7c:45:1a:16:bd:85:fe:28:03:4c:46:
8e:14:2c:e0:41:6a:f5:2e:5c:ef:4a:7e:90:2f:75:
33:33:b6:96:85:42:36:83:1c:0e:8c:7a:1e:6e:30:
27:ff:b9:4a:9d:a6:70:37:84:32:bc:d1:26:98:c0:
29:2c:22:c8:bc:8d:f2:b4:f4:1a:8f:30:81:c7:55:
43:de:ad:c7:63:69:b4:29:89:2a:ef:a1:6e:0d:b9:
30:b5:65:62:ad:00:a9:8c:49:3c:e9:3c:d3:af:be:
2e:54:ef:03:94:1e:96:e7:8a:36:47:a7:7f:b0:14:
26:41:58:14:7d:83:5a:b0:7d:c6:50:3c:57:3f:d8:
a1:6f:4a:07:17:46:e3:0e:16:98:6b:25:8c:c7:4a:
cd:72:55:85:4d:55:2a:43:89:ca:2d:4a:b6:35:1c:
2c:f4:e1:01:c2:30:40:bc:d2:5b:0c:4a:61:3e:26:
cc:27:0b:71:15:ba:04:34:ac:ed:6c:3b:ab:83:4a:
92:67:e1:f3:71:02:6c:59:de:8d:0f:b4:71:67:4f:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:CA:1A:D5:2C:EE:C3:C9:CE:2B:26:3A:3B:D5:B9:3A:0E:E3:45
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/HzvKGtUs7sPJzismOjvVuToO40U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:14:f4:1e:44:18:24:a0:f3:54:bb:27:42:bf:71:2a:8e:c7:
d8:67:4a:cb:33:f0:74:57:0a:9c:1e:72:c2:2f:ae:e2:ec:98:
6b:aa:dd:46:c9:0e:27:ba:df:ac:4c:ba:9f:4e:e0:52:1c:e3:
3c:03:08:4d:59:25:f3:59:de:5a:e3:d3:65:e9:45:73:d4:9c:
6f:9a:9b:bf:2f:74:a6:53:6b:2e:9d:31:b6:36:28:4b:55:02:
98:93:1e:65:05:4a:99:b8:ed:7a:60:c8:74:c3:96:26:b1:ac:
04:4a:d2:40:ff:e1:98:8c:73:1c:cb:71:36:c6:6c:25:e0:12:
a5:17:5a:5e:82:e8:ba:29:cd:66:55:08:c1:de:05:4d:21:6f:
ea:ff:d4:f0:72:74:89:b9:06:80:34:72:26:84:a4:82:47:18:
20:c6:da:1c:ca:df:71:45:84:f3:fe:2a:da:eb:c4:07:06:56:
31:1a:f2:78:67:5c:bb:d6:e5:75:85:6e:ac:0c:2c:28:14:2d:
7f:ec:45:15:a0:44:9b:fe:88:28:9f:cc:f9:1f:14:15:6a:e8:
44:45:ad:ed:69:83:70:b5:60:d0:4b:7b:9d:72:5b:79:7c:ac:
27:46:70:68:b6:c9:81:eb:f7:2a:ba:cc:b3:b6:bd:e5:0d:dc:
1c:d2:ad:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6nHocRJqE6RimX9/95lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk
OWRjYzgwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjNiY2ExYWQ1MmNlZWMzYzljZTJiMjYzYTNiZDViOTNhMGVlMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzZYLDG9hKrP7k01C2ueynlqfg9N
pJyq1KZluoptsMACsgqwfLQvQoJeSMmBn+JVfEUaFr2F/igDTEaOFCzgQWr1Llzv
Sn6QL3UzM7aWhUI2gxwOjHoebjAn/7lKnaZwN4QyvNEmmMApLCLIvI3ytPQajzCB
x1VD3q3HY2m0KYkq76FuDbkwtWVirQCpjEk86TzTr74uVO8DlB6W54o2R6d/sBQm
QVgUfYNasH3GUDxXP9ihb0oHF0bjDhaYayWMx0rNclWFTVUqQ4nKLUq2NRws9OEB
wjBAvNJbDEphPibMJwtxFboENKztbDurg0qSZ+HzcQJsWd6ND7RxZ0+a1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB87yhrVLO7Dyc4rJjo71bk6DuNFMB8GA1UdIwQY
MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEvSHp2S0d0VXM3c1BKemlzbU9qdlZ1VG9PNDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT0wMA0G
CSqGSIb3DQEBCwUAA4IBAQDFFPQeRBgkoPNUuydCv3EqjsfYZ0rLM/B0VwqcHnLC
L67i7Jhrqt1GyQ4nut+sTLqfTuBSHOM8AwhNWSXzWd5a49Nl6UVz1Jxvmpu/L3Sm
U2sunTG2NihLVQKYkx5lBUqZuO16YMh0w5YmsawEStJA/+GYjHMcy3E2xmwl4BKl
F1pegui6Kc1mVQjB3gVNIW/q/9TwcnSJuQaANHImhKSCRxggxtocyt9xRYTz/ira
68QHBlYxGvJ4Z1y71uV1hW6sDCwoFC1/7EUVoESb/ogon8z5HxQVauhERa3taYNw
tWDQS3udclt5fKwnRnBotsmB6/cqusyztr3lDdwc0q39
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:58 2025 by rpki-client