Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/1-HS-GAtu0xO4tX9gMBajYvH0eDY.roa
File: 1-HS-GAtu0xO4tX9gMBajYvH0eDY.roa (raw, json)
Hash identifier: 3G/k4gvGo7QrrbEOeGgh3YtrGJPVGEtXQYdtVP2LwmY=
Subject key identifier: F8:74:BE:18:0B:6E:D3:13:B8:B5:7F:60:30:16:A3:62:F1:F4:78:36
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 0194274872ABA96752D0376B70AB76E47473
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/1-HS-GAtu0xO4tX9gMBajYvH0eDY.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8374
IP address blocks: 5.172.224.0/19 maxlen: 19
31.0.0.0/16 maxlen: 16
37.98.208.0/20 maxlen: 20
37.109.0.0/16 maxlen: 16
37.152.16.0/20 maxlen: 20
37.209.128.0/19 maxlen: 19
37.247.128.0/17 maxlen: 17
37.247.241.0/28 maxlen: 28
37.248.0.0/16 maxlen: 16
46.76.0.0/15 maxlen: 15
78.30.64.0/18 maxlen: 18
84.39.160.0/20 maxlen: 20
87.251.224.0/19 maxlen: 19
92.60.128.0/20 maxlen: 20
93.154.128.0/17 maxlen: 17
151.248.32.0/20 maxlen: 20
185.4.212.0/22 maxlen: 22
188.125.32.0/19 maxlen: 19
193.41.112.0/23 maxlen: 23
212.2.96.0/19 maxlen: 19
2a01:2e0::/28 maxlen: 28
2a01:bb80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:72:ab:a9:67:52:d0:37:6b:70:ab:76:e4:74:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f874be180b6ed313b8b57f603016a362f1f47836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:f4:bf:4e:69:70:44:7e:cd:b5:43:46:a1:
21:4e:1f:fc:38:7e:5a:4b:74:91:fa:32:76:52:05:
26:6a:57:60:32:7c:ac:b0:97:f4:2a:e5:b3:92:a1:
b1:b8:b2:20:ab:dd:19:a4:a6:7e:6b:fc:1b:f9:ee:
52:80:e4:97:5b:58:12:38:d2:bf:f7:1b:ac:f3:a7:
ef:09:11:1e:41:8f:a9:24:6a:f9:31:ca:a5:2a:c8:
f9:bc:d9:57:06:a4:de:40:3d:48:c8:3d:f4:88:64:
2a:62:b2:8a:b4:13:7d:66:48:ed:8d:65:76:a9:b2:
88:4b:5a:9b:23:ba:52:53:37:00:b0:ca:f3:09:4e:
2f:c7:2e:d8:3d:74:cd:b3:74:ae:42:69:b8:1d:cd:
c9:1d:a7:2f:fa:78:c7:46:64:5f:bb:5e:99:90:7e:
cc:13:29:66:d9:5d:9d:8e:6f:41:c3:81:d3:40:0c:
d8:d6:ee:b2:7b:15:c2:0a:9d:4b:95:21:6c:4d:97:
cf:d9:b0:f8:f4:14:39:11:f9:c7:a4:14:11:0c:4b:
d6:8b:d6:fb:53:55:fb:03:a0:b5:23:f8:06:c4:d0:
12:68:c2:de:79:37:a5:b1:17:e8:39:c1:3e:70:21:
21:61:3c:3e:2b:90:b7:93:3b:5c:c8:0d:fc:47:4c:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:BE:18:0B:6E:D3:13:B8:B5:7F:60:30:16:A3:62:F1:F4:78:36
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/1-HS-GAtu0xO4tX9gMBajYvH0eDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.224.0/19
31.0.0.0/16
37.98.208.0/20
37.109.0.0/16
37.152.16.0/20
37.209.128.0/19
37.247.128.0-37.248.255.255
46.76.0.0/15
78.30.64.0/18
84.39.160.0/20
87.251.224.0/19
92.60.128.0/20
93.154.128.0/17
151.248.32.0/20
185.4.212.0/22
188.125.32.0/19
193.41.112.0/23
212.2.96.0/19
IPv6:
2a01:2e0::/28
2a01:bb80::/32
Signature Algorithm: sha256WithRSAEncryption
64:ec:0f:dc:99:0f:04:96:aa:47:41:ae:8b:fe:b0:d0:00:bf:
c7:7a:3f:4f:d0:a9:68:4d:b8:ae:4b:f7:2d:cc:e7:b0:b6:43:
73:30:f0:76:fe:31:44:f5:e5:92:89:b9:6f:ae:88:38:e9:41:
88:8d:d9:5c:5f:f0:03:f3:21:39:f8:17:24:86:e4:36:b2:5d:
c3:ae:69:d9:80:a5:f3:a8:97:eb:16:8c:80:3a:b1:fc:ea:2e:
75:2b:9e:75:22:99:05:5e:38:37:fe:e0:bf:38:73:13:be:85:
07:04:d8:94:ff:18:4e:31:6c:b0:eb:89:21:92:61:4f:a3:88:
a0:d2:e1:c4:89:70:e0:39:f8:fc:f0:4d:12:de:aa:a5:44:2d:
f6:35:d2:bf:09:a8:89:57:d5:21:14:ee:7a:bf:6a:ea:bd:16:
52:1f:0a:de:99:61:e9:47:07:8f:1b:0b:30:db:3c:71:f5:31:
74:1d:43:e2:a7:0e:48:ae:fc:3b:71:8b:01:37:a5:50:c1:e6:
72:3c:4d:46:2e:19:77:f7:81:20:f6:e1:ec:88:31:65:73:52:
79:6c:44:19:18:09:8f:77:ec:98:cb:b1:7f:e2:2c:0a:98:1e:
fb:7c:1f:bd:1c:c7:a9:72:4e:fc:c2:fa:9e:ba:ea:d0:6f:51:
5f:7e:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:48 2025 by rpki-client