Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/HnZ1VjQW735MMUi4UDqiepCAdeM.roa
File: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (raw, json)
Hash identifier: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=
Subject key identifier: 1E:76:75:56:34:16:EF:7E:4C:31:48:B8:50:3A:A2:7A:90:80:75:E3
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0194274803C17C036F17BBE19FB1AB5AA2D7
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/HnZ1VjQW735MMUi4UDqiepCAdeM.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44407
IP address blocks: 185.235.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:c1:7c:03:6f:17:bb:e1:9f:b1:ab:5a:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e7675563416ef7e4c3148b8503aa27a908075e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:b0:db:6c:28:b8:51:d3:4a:24:d2:0f:46:
b9:c2:be:1d:f9:f9:2b:cd:c7:40:5d:f4:5b:d6:3b:
3c:73:4a:3b:36:84:62:5b:14:3d:27:27:0b:c2:4b:
14:2e:b9:b5:8b:6a:bf:17:cf:ca:6a:38:8c:9c:11:
3c:dd:3e:ea:ca:00:69:55:a8:ed:5b:55:4e:8b:58:
5d:68:94:2a:13:8f:e1:38:d0:f8:e3:25:ec:0b:bc:
cf:e9:f7:9c:7d:ef:66:cf:e0:5f:5c:1e:3c:62:9e:
d2:52:4c:1d:c2:6d:be:1d:2d:6b:96:1a:0e:df:b6:
7a:10:ff:2f:65:0d:8c:31:14:e0:a0:42:ae:5c:8d:
49:b4:7d:93:55:bc:40:dd:95:6c:2e:b3:ac:23:6f:
d2:b9:17:e8:f0:e9:93:31:1f:05:90:ee:65:57:47:
28:c8:f5:4f:0a:90:87:a1:4c:90:ee:3a:62:0e:75:
0c:98:81:a9:5d:5d:10:12:2f:3b:09:db:38:d8:f8:
2f:be:c3:63:d4:2e:fc:33:1c:47:02:88:5e:41:42:
3d:35:16:9f:ca:ba:b6:83:7e:a7:5a:79:49:d3:92:
97:53:fb:45:ef:be:db:5a:c9:65:5e:90:20:67:44:
d2:58:7d:56:dc:aa:cd:cc:9f:8a:a8:1c:14:9c:79:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:75:56:34:16:EF:7E:4C:31:48:B8:50:3A:A2:7A:90:80:75:E3
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/HnZ1VjQW735MMUi4UDqiepCAdeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f3:e4:ba:b1:69:85:0a:72:73:0e:03:cb:98:a6:13:e2:6b:
27:1f:38:74:30:fd:50:48:8b:7f:c1:f4:52:b1:ac:39:0d:a5:
0c:8c:32:29:5d:5a:38:95:a3:a7:d8:bb:76:b6:6c:5f:17:6f:
3f:08:58:ab:d1:0a:05:b6:fd:6e:f2:ff:97:0f:a6:97:3b:5e:
90:b9:28:d5:a3:7b:5c:ff:bf:ac:09:9c:9c:c5:27:e8:ce:b1:
ff:e7:cc:6e:be:5e:9a:9b:16:ee:2a:60:f7:9a:9f:2c:02:19:
b6:a9:20:57:c7:c8:61:f5:fb:ea:45:68:5b:29:de:33:87:de:
e3:aa:de:dc:20:4f:74:48:22:9b:93:99:2c:bc:98:b0:92:9e:
28:94:6d:2d:b1:a5:ed:80:05:11:fe:d8:98:43:a9:aa:fc:39:
2b:ec:de:c0:06:84:62:9a:f8:4b:2f:a8:40:7e:05:84:c0:f2:
78:b0:eb:ef:42:0f:bd:dc:91:70:c5:50:c3:22:d2:d7:99:4f:
03:3c:37:83:3f:1c:91:3f:f2:1c:e7:73:f9:fc:b7:b7:ec:9c:
d7:28:40:c2:27:20:16:61:58:75:40:5c:bb:71:7c:d6:3f:1d:
2a:aa:f0:3a:92:db:79:6a:99:80:46:00:ab:e1:b1:55:de:b6:
f4:96:59:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:42:47 2025 by rpki-client