Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H2DW_M25-QCYolrlIRZGomeEMF0.roa
File: H2DW_M25-QCYolrlIRZGomeEMF0.roa (raw, json)
Hash identifier: QNG5M7AD7r68ZxgHF7lcHJcUTl2qPFntO8wflVquA88=
Subject key identifier: 1F:60:D6:FC:CD:B9:F9:00:98:A2:5A:E5:21:16:46:A2:67:84:30:5D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B262B93100304DCB28182D4E0BB0AD
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H2DW_M25-QCYolrlIRZGomeEMF0.roa
Signing time: Wed 01 Jan 2025 11:48:46 +0000
ROA not before: Wed 01 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51562
IP address blocks: 85.143.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:62:b9:31:00:30:4d:cb:28:18:2d:4e:0b:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f60d6fccdb9f90098a25ae5211646a26784305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:38:7b:72:1c:2b:af:80:75:6c:76:c4:7d:
0c:51:e5:15:4f:41:69:e0:44:cf:8e:0b:28:27:db:
b1:28:17:ef:0b:70:41:a0:cc:d2:36:29:42:39:de:
33:55:2e:5b:11:f7:a3:7a:93:fd:a7:57:4e:18:17:
fe:f5:16:bc:b8:3b:65:20:92:59:0c:e1:0b:63:61:
f1:fc:65:e5:ea:04:46:7b:22:6a:5b:72:62:32:23:
ec:4a:5d:0d:8a:21:77:db:d6:95:41:6a:8e:80:bd:
2e:2e:b5:33:93:63:15:94:61:fc:bc:be:5f:88:92:
da:f6:69:a4:27:65:9e:fb:0b:cf:60:09:b7:41:06:
de:92:5a:ef:e8:13:85:f9:95:a9:e5:a4:9b:91:1f:
c6:52:ed:fe:68:29:02:a1:c3:c4:bf:ad:08:66:33:
85:aa:41:df:b6:17:b3:b4:d5:30:de:bf:ea:51:c3:
43:14:5a:c9:43:a8:fb:e7:25:fd:73:62:2d:e4:da:
10:4f:f1:b0:98:e3:cb:47:14:15:96:b5:73:7e:f9:
1f:63:c5:0e:0f:77:2c:30:de:e1:14:22:dd:63:43:
7e:3a:0b:4b:67:67:2c:4f:48:31:3a:c8:6a:5b:c4:
02:68:b2:9d:9f:d4:80:5f:53:8e:1e:f8:61:0f:dd:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:D6:FC:CD:B9:F9:00:98:A2:5A:E5:21:16:46:A2:67:84:30:5D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H2DW_M25-QCYolrlIRZGomeEMF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
98:71:cd:e1:9c:55:ab:ab:50:42:15:4c:56:5c:c0:bf:e4:10:
39:94:ff:be:7b:31:11:c5:c7:b9:5a:56:eb:42:67:e5:bd:d3:
8c:be:53:06:45:12:8c:bd:3b:9e:14:5f:40:f6:2c:76:f9:07:
44:7a:6d:8d:51:b9:de:6a:b2:45:73:9c:fd:7e:72:ba:e1:18:
ce:2c:b8:e6:fe:e0:96:d8:5b:55:f8:27:6c:28:49:d4:5c:b1:
22:19:52:31:0a:1f:de:8c:7e:02:d3:de:77:e5:c6:86:15:3c:
0d:64:79:0f:3e:78:ed:05:67:26:38:a0:af:4a:cd:2f:16:38:
7f:b1:11:07:8c:9d:2d:49:2d:3e:10:de:16:cd:39:3d:0b:77:
a1:68:0d:5c:a9:97:24:f3:07:0c:41:13:66:9b:ca:af:3d:b7:
fc:93:b3:dd:12:47:07:14:a9:d5:05:9a:ea:12:1a:c0:eb:b3:
6e:fd:83:5f:29:36:25:a4:52:ee:27:f9:4b:b5:7a:20:03:2b:
3b:72:f2:4a:97:99:0b:d4:d0:e7:38:41:cc:78:7b:36:ed:9e:
dd:e4:a1:39:72:d9:33:08:5f:33:55:2e:27:c2:56:f5:35:1a:
2b:e9:e8:d2:04:bb:54:a8:f3:f6:eb:12:3e:6e:9a:d2:62:32:
a0:5c:09:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsmK5MQAwTcsoGC1OC7CtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjYwZDZmY2NkYjlmOTAwOThhMjVhZTUyMTE2NDZhMjY3ODQzMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh04e3IcK6+AdWx2xH0MUeUVT0Fp
4ETPjgsoJ9uxKBfvC3BBoMzSNilCOd4zVS5bEfejepP9p1dOGBf+9Ra8uDtlIJJZ
DOELY2Hx/GXl6gRGeyJqW3JiMiPsSl0NiiF329aVQWqOgL0uLrUzk2MVlGH8vL5f
iJLa9mmkJ2We+wvPYAm3QQbeklrv6BOF+ZWp5aSbkR/GUu3+aCkCocPEv60IZjOF
qkHftheztNUw3r/qUcNDFFrJQ6j75yX9c2It5NoQT/GwmOPLRxQVlrVzfvkfY8UO
D3csMN7hFCLdY0N+OgtLZ2csT0gxOshqW8QCaLKdn9SAX1OOHvhhD91qeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9g1vzNufkAmKJa5SEWRqJnhDBdMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvSDJEV19NMjUtUUNZb2xybElSWkdvbWVFTUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/IMA0G
CSqGSIb3DQEBCwUAA4IBAQCYcc3hnFWrq1BCFUxWXMC/5BA5lP++ezERxce5Wlbr
QmflvdOMvlMGRRKMvTueFF9A9ix2+QdEem2NUbnearJFc5z9fnK64RjOLLjm/uCW
2FtV+CdsKEnUXLEiGVIxCh/ejH4C09535caGFTwNZHkPPnjtBWcmOKCvSs0vFjh/
sREHjJ0tSS0+EN4WzTk9C3ehaA1cqZck8wcMQRNmm8qvPbf8k7PdEkcHFKnVBZrq
EhrA67Nu/YNfKTYlpFLuJ/lLtXogAys7cvJKl5kL1NDnOEHMeHs27Z7d5KE5ctkz
CF8zVS4nwlb1NRor6ejSBLtUqPP26xI+bprSYjKgXAlO
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:33 2025 by rpki-client