Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HuSZPgdteKVUnufevzl4epPpaDw.roa
File: HuSZPgdteKVUnufevzl4epPpaDw.roa (raw, json)
Hash identifier: mk/AiiyZpKA+fudIKJcRy5QrlN76b9HECMiXE9BU8m8=
Subject key identifier: 1E:E4:99:3E:07:6D:78:A5:54:9E:E7:DE:BF:39:78:7A:93:E9:68:3C
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 01941F8C109EF21E053115495113F7F00610
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HuSZPgdteKVUnufevzl4epPpaDw.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8925
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:10:9e:f2:1e:05:31:15:49:51:13:f7:f0:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee4993e076d78a5549ee7debf39787a93e9683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:0e:c6:b6:f5:3b:1b:24:9c:9d:91:6f:66:
ac:4d:f4:73:9f:71:10:e0:e7:c5:4c:7b:c6:64:81:
03:03:8c:84:c8:67:71:29:f7:aa:b5:4c:75:bf:b1:
09:74:93:84:b3:db:5f:bb:07:bd:39:a3:85:5b:f3:
71:89:43:6b:c4:a8:b9:0f:8c:4a:af:a4:ee:db:ed:
2c:48:a9:c5:2d:93:5a:40:0b:ec:e4:91:b0:b3:e6:
92:cd:5d:7f:a9:ad:22:27:36:c6:f7:db:a2:5f:ae:
d4:96:be:7e:97:8a:7d:45:05:c5:96:5f:f5:89:a2:
87:5d:9f:f8:14:e9:9f:42:78:85:a0:98:a8:d3:31:
5a:a7:88:33:a5:b2:14:20:b7:e7:8a:1e:89:00:f0:
bb:fe:07:c5:13:ba:53:8e:57:6f:88:bf:45:5d:7d:
f1:03:b8:91:88:39:5e:e2:cf:84:14:e1:c2:49:a6:
0c:a7:b4:f4:b9:4b:19:fb:7e:68:62:5a:dc:46:77:
74:4d:96:cd:e7:de:88:8f:52:3b:f1:9d:41:30:d9:
f9:80:4c:dd:b3:78:9c:63:b9:e3:aa:58:af:df:61:
30:41:af:93:ed:09:50:d9:04:1c:a8:35:9d:86:e3:
16:21:50:82:78:94:32:48:73:d8:6f:73:0f:2d:9b:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:99:3E:07:6D:78:A5:54:9E:E7:DE:BF:39:78:7A:93:E9:68:3C
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HuSZPgdteKVUnufevzl4epPpaDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
b1:3d:95:bb:e5:6f:c5:16:6b:68:34:91:2c:ef:49:9a:81:3a:
00:14:a3:8e:f8:a6:6e:f3:92:ce:cc:3e:b5:dd:28:24:f0:87:
d2:49:06:e7:be:a7:b5:40:f0:c5:cc:4c:ea:cc:80:34:48:03:
58:e6:21:36:14:4f:90:29:79:ff:64:c9:12:72:73:a6:60:8d:
9f:bb:b1:30:b4:63:4b:13:31:72:c0:1f:5d:81:d5:57:f8:61:
5c:ad:6e:d1:b8:d1:b2:8d:cb:b3:2a:d2:c5:e5:b6:9c:2f:f3:
bd:0e:c8:41:bf:22:cb:ac:b8:57:32:aa:f6:9c:53:ad:c1:5e:
13:1c:df:ac:11:77:8e:4b:11:83:50:4f:b0:ae:f1:5f:4f:f8:
58:7f:be:3d:52:e6:02:99:96:5d:cd:a2:72:42:04:45:a3:79:
a2:c0:ef:cc:ea:4d:d4:7b:ee:46:76:13:1a:19:df:7c:53:90:
f5:da:0f:8d:19:d5:c6:5d:10:7b:79:50:42:d2:6d:80:fa:11:
c7:8e:a9:2a:3b:c4:f4:33:5e:fe:38:82:b0:53:80:a1:74:78:
58:b4:59:4f:b5:e5:96:69:44:bf:d8:27:61:a5:b9:ec:55:64:
ad:40:6c:be:de:94:69:7a:d6:ac:32:02:41:75:51:4c:f4:63:
70:5d:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:45:56 2025 by rpki-client