Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/HnXbxzajLhcisRCq_fB03kkxY7Q.roa
File: HnXbxzajLhcisRCq_fB03kkxY7Q.roa (raw, json)
Hash identifier: 3RLbNAEyHJR+jTuUtPlDmJk48r533+OhDx8HcGj/79c=
Subject key identifier: 1E:75:DB:C7:36:A3:2E:17:22:B1:10:AA:FD:F0:74:DE:49:31:63:B4
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 0195BBDFEEAE283B92FD7633CBB488C343E9
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/HnXbxzajLhcisRCq_fB03kkxY7Q.roa
Signing time: Sat 22 Mar 2025 03:22:49 +0000
ROA not before: Sat 22 Mar 2025 03:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57276
IP address blocks: 37.157.32.0/22 maxlen: 22
37.157.36.0/22 maxlen: 22
82.163.112.0/22 maxlen: 22
82.163.116.0/22 maxlen: 22
82.163.124.0/23 maxlen: 23
82.163.126.0/23 maxlen: 23
185.53.224.0/23 maxlen: 23
185.53.226.0/23 maxlen: 23
195.250.16.0/24 maxlen: 24
195.250.17.0/24 maxlen: 24
195.250.18.0/24 maxlen: 24
195.250.19.0/24 maxlen: 24
2a01:a220::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bb:df:ee:ae:28:3b:92:fd:76:33:cb:b4:88:c3:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: Mar 22 03:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e75dbc736a32e1722b110aafdf074de493163b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:f5:54:3f:22:ae:8b:c8:59:95:d9:c3:1f:
47:17:6f:ab:3d:7b:7f:f4:6c:cb:17:a5:9b:8b:c5:
50:b7:b1:52:10:4c:ef:2f:58:79:70:1f:72:8e:e8:
a0:33:9f:97:0a:5a:b2:a6:2f:2c:44:91:d4:95:44:
31:93:83:5b:21:a5:de:2b:a2:9f:6d:1d:b0:58:8d:
18:df:92:bf:71:db:e1:4e:ea:ba:c2:e8:e6:9f:58:
85:d9:8a:3c:77:37:49:a6:1f:ff:50:16:5d:92:7e:
40:ee:5e:bd:43:eb:fe:84:00:3c:3d:92:99:d4:a0:
60:94:78:88:88:b3:1f:3d:5d:2d:f6:41:06:cd:c2:
61:6c:42:bc:7d:54:1a:c1:b1:35:90:6c:14:1b:26:
69:36:1a:9a:dc:b0:d3:de:dd:d9:10:48:a4:85:40:
25:5d:b8:e1:34:fd:2b:b2:6d:ad:8c:e1:10:c8:dc:
4a:b0:ce:2e:fb:da:3e:1b:8c:a7:ef:5f:9f:0c:1e:
01:f0:d9:4e:88:57:95:45:69:c0:57:f8:6f:a3:fb:
be:8d:9f:ce:c0:72:92:c4:95:88:43:81:82:31:d6:
a1:e6:48:13:1a:18:22:b4:0d:38:71:d7:b2:47:ad:
52:37:af:c3:77:eb:67:1d:cd:65:17:c0:c6:e7:16:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:DB:C7:36:A3:2E:17:22:B1:10:AA:FD:F0:74:DE:49:31:63:B4
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/HnXbxzajLhcisRCq_fB03kkxY7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.32.0/21
82.163.112.0/21
82.163.124.0/22
185.53.224.0/22
195.250.16.0/22
IPv6:
2a01:a220::/29
Signature Algorithm: sha256WithRSAEncryption
2a:e7:21:0a:5d:8b:80:97:0c:14:a8:58:9a:fe:21:17:1c:27:
8a:14:b6:39:70:d7:84:7e:3f:e7:49:51:c5:ef:7f:09:e4:eb:
cc:ab:f5:2d:ba:fb:64:a1:43:99:2e:cb:e9:0b:46:f0:1a:3b:
68:4f:be:fc:89:d1:f2:45:2c:e5:a9:94:1d:b9:76:6e:18:df:
e4:72:4a:a3:65:51:90:19:09:75:39:54:e5:c2:c1:8f:ea:25:
67:e3:89:36:43:e6:b5:b1:2e:4d:83:46:0b:84:1b:6d:b8:e2:
33:5f:57:a3:0e:56:c2:ba:8f:55:3a:30:53:23:42:ff:a3:ce:
f1:2c:a2:d6:4e:08:6d:a5:a0:69:c4:1b:a6:34:46:fb:9b:a7:
3e:49:8e:6b:03:31:1b:5d:74:e9:0b:84:95:55:d6:cc:45:59:
21:6c:30:7d:66:92:e5:66:69:0b:9c:83:52:25:09:2b:a2:e8:
2a:8c:e6:00:e5:6a:3d:0c:f7:e6:93:b0:9d:ec:7c:8e:e1:20:
d3:60:32:1d:5b:c4:8b:fa:5e:93:6b:bc:b1:dc:43:0f:ec:e6:
55:dc:36:d8:50:c1:4c:08:fc:c3:df:a8:e7:29:8e:b8:5e:28:
6d:be:84:9e:e4:f2:a9:1a:0d:a7:1d:b6:d5:a6:2c:78:f1:9e:
49:c2:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:19:47 2025 by rpki-client