Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa
File: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (raw, json)
Hash identifier: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=
Subject key identifier: 1D:53:8E:1D:03:DC:FB:91:2E:ED:CC:16:16:16:CD:44:2A:40:F4:0D
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019421445094B5A8EE3EB0946C73CC643459
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12850
IP address blocks: 91.225.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:50:94:b5:a8:ee:3e:b0:94:6c:73:cc:64:34:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d538e1d03dcfb912eedcc161616cd442a40f40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:92:b1:ec:da:c3:50:b4:7d:7d:80:1d:36:
01:82:dc:29:7c:69:72:61:d5:d3:c3:43:cb:60:da:
0d:6d:cb:98:3b:5d:3d:a6:d5:1f:3f:98:4d:86:2b:
ab:86:5f:37:a9:ee:42:2d:08:50:f2:b9:83:50:5e:
7b:f3:1b:b0:b6:b6:1f:1c:a6:69:60:de:5e:01:b5:
9c:e9:61:2e:fb:7d:3a:95:32:15:0a:27:f0:f7:9f:
8b:27:50:de:b9:c3:52:34:49:7c:c8:ae:6e:6c:73:
d6:f2:99:10:d1:1a:2e:ef:1e:a7:80:b4:b4:27:74:
82:5a:f9:0f:19:cf:4a:70:ee:b4:8d:ff:d7:45:fc:
a3:03:df:33:8d:53:ef:fb:f0:a2:18:88:04:0e:75:
1a:3a:d4:89:7c:cd:8d:6d:62:5f:d7:2f:ff:ea:06:
97:a8:0c:58:4c:0b:ee:0e:89:6e:ae:bc:1b:21:c0:
73:6c:6e:3a:86:89:fc:d3:71:1d:09:98:d3:94:2b:
39:b1:1f:f2:05:08:64:70:0f:64:77:67:1e:c7:2b:
6f:0f:5b:dd:81:fb:71:97:9b:4b:1e:e1:1e:7a:e5:
63:e5:54:72:d9:ff:0b:f8:4f:90:a0:6e:c3:08:cd:
d2:a1:fe:8a:1b:d2:3a:8e:2a:b4:52:cd:04:fb:fc:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:8E:1D:03:DC:FB:91:2E:ED:CC:16:16:16:CD:44:2A:40:F4:0D
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
59:1d:23:94:25:3a:46:62:d7:e6:8e:ae:d3:77:38:7b:d6:ba:
e8:86:e0:ea:02:0c:7e:5a:f6:e2:26:d3:1e:27:cf:06:c9:cd:
b1:20:93:b1:43:54:b1:ad:54:c6:4b:bb:aa:5e:67:e1:43:20:
e0:0d:20:6f:9d:06:e9:df:9a:da:07:0d:ca:3e:ec:d6:9f:93:
1a:12:ef:f4:35:f2:30:d6:6a:c7:bb:45:25:7d:49:28:51:6a:
2b:c2:02:9a:12:fd:b3:27:bd:d6:ba:a3:4f:53:02:47:82:96:
28:60:90:bc:cf:6a:b9:b7:24:6e:be:52:83:db:c0:2c:f4:f3:
de:76:94:c1:b5:33:82:5b:e9:9f:3f:25:cd:8e:91:7d:cb:00:
73:f0:25:27:d7:7d:77:e9:87:c0:df:22:29:cc:f2:ac:ce:b3:
bb:fd:e5:1a:a6:b9:2c:d3:70:05:a4:64:7d:3c:94:e5:ec:27:
b5:ac:94:10:d8:d4:75:8d:9a:77:25:59:04:9b:5e:a2:b7:3c:
af:f0:85:b6:5c:fc:45:bb:06:4a:f8:fd:f4:90:31:66:e8:b7:
4b:d4:7c:c2:de:34:e2:db:57:09:66:91:ae:bd:03:85:6e:76:
fe:03:3f:38:51:69:97:69:82:40:2b:7e:45:f2:aa:67:92:1b:
87:e3:13:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRFCUtajuPrCUbHPMZDRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz
M2M4YmYwHhcNMjUwMTAxMDk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDUzOGUxZDAzZGNmYjkxMmVlZGNjMTYxNjE2Y2Q0NDJhNDBmNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASSsezaw1C0fX2AHTYBgtwpfGly
YdXTw0PLYNoNbcuYO109ptUfP5hNhiurhl83qe5CLQhQ8rmDUF578xuwtrYfHKZp
YN5eAbWc6WEu+306lTIVCifw95+LJ1DeucNSNEl8yK5ubHPW8pkQ0Rou7x6ngLS0
J3SCWvkPGc9KcO60jf/XRfyjA98zjVPv+/CiGIgEDnUaOtSJfM2NbWJf1y//6gaX
qAxYTAvuDolurrwbIcBzbG46hon803EdCZjTlCs5sR/yBQhkcA9kd2cexytvD1vd
gftxl5tLHuEeeuVj5VRy2f8L+E+QoG7DCM3Sof6KG9I6jiq0Us0E+/xDjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1Tjh0D3PuRLu3MFhYWzUQqQPQNMB8GA1UdIwQY
MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt
ZDU3MzczYmY1MTYyLzEvSFZPT0hRUGMtNUV1N2N3V0ZoYk5SQ3BBOUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy
LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+G0MA0G
CSqGSIb3DQEBCwUAA4IBAQBZHSOUJTpGYtfmjq7Tdzh71rrohuDqAgx+WvbiJtMe
J88Gyc2xIJOxQ1SxrVTGS7uqXmfhQyDgDSBvnQbp35raBw3KPuzWn5MaEu/0NfIw
1mrHu0UlfUkoUWorwgKaEv2zJ73WuqNPUwJHgpYoYJC8z2q5tyRuvlKD28As9PPe
dpTBtTOCW+mfPyXNjpF9ywBz8CUn13136YfA3yIpzPKszrO7/eUaprks03AFpGR9
PJTl7Ce1rJQQ2NR1jZp3JVkEm16itzyv8IW2XPxFuwZK+P30kDFm6LdL1HzC3jTi
21cJZpGuvQOFbnb+Az84UWmXaYJAK35F8qpnkhuH4xMV
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:55 2025 by rpki-client