Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/HCmwt2WAK-H7WYTy1icgaTefv78.roa
File: HCmwt2WAK-H7WYTy1icgaTefv78.roa (raw, json)
Hash identifier: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=
Subject key identifier: 1C:29:B0:B7:65:80:2B:E1:FB:59:84:F2:D6:27:20:69:37:9F:BF:BF
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 01942827C88E58675AAFD4E2CFD58E35EFB5
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/HCmwt2WAK-H7WYTy1icgaTefv78.roa
Signing time: Thu 02 Jan 2025 17:54:43 +0000
ROA not before: Thu 02 Jan 2025 17:54:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24929
IP address blocks: 45.66.140.0/22 maxlen: 24
83.175.168.0/22 maxlen: 24
109.232.240.0/24 maxlen: 24
194.54.24.0/22 maxlen: 22
2a0e:84c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c8:8e:58:67:5a:af:d4:e2:cf:d5:8e:35:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Jan 2 17:54:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c29b0b765802be1fb5984f2d6272069379fbfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:f2:cf:81:93:68:fa:dd:67:92:2d:d4:20:
a2:5b:84:8a:19:33:4f:2b:19:55:71:92:72:d1:a0:
f3:15:cf:61:a9:b1:5f:02:e3:ec:60:26:26:03:d6:
d6:66:ad:79:91:77:85:18:ef:4b:a4:41:82:4c:e0:
7d:2f:95:1b:af:cf:d0:e4:76:e2:5e:75:02:2a:91:
a0:45:5d:c0:9a:69:84:2d:b9:54:c1:c8:62:c9:c9:
98:00:ea:19:7b:94:96:09:e6:c2:c0:d0:a0:42:70:
05:41:b0:77:e2:5f:74:42:21:86:9e:7f:bf:79:75:
63:ee:63:63:63:02:48:de:56:1e:41:ab:ea:06:31:
6c:cb:1d:a2:c1:5d:e8:75:2b:ef:30:30:1b:82:27:
c2:f4:ef:82:07:19:c2:54:c3:53:6a:09:bf:2c:b7:
72:ac:da:39:cb:5d:05:48:78:99:82:12:ff:fa:3c:
41:b8:9d:69:8c:0b:79:6a:aa:79:37:ff:14:b9:eb:
37:8a:50:52:73:f3:9b:3b:2d:1c:bd:e1:fb:02:26:
df:6d:16:4c:b5:59:de:bd:63:e4:37:6e:af:e5:bc:
2f:03:0e:b3:63:fd:22:16:e4:12:08:c9:19:46:21:
c5:e3:8f:35:2a:b7:66:b0:49:9d:c7:b3:55:2e:0c:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:B0:B7:65:80:2B:E1:FB:59:84:F2:D6:27:20:69:37:9F:BF:BF
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/HCmwt2WAK-H7WYTy1icgaTefv78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.140.0/22
83.175.168.0/22
109.232.240.0/24
194.54.24.0/22
IPv6:
2a0e:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:a1:75:a1:14:dc:14:22:7b:60:1a:09:c2:34:dc:62:45:58:
c4:20:19:97:70:5d:a1:bb:33:42:c4:2b:b1:35:02:a6:c2:88:
a9:9b:52:11:3a:9f:34:f3:26:9e:5f:af:e3:1f:a4:72:ed:23:
8a:8e:91:78:40:27:70:08:0e:5a:63:7a:a1:38:8f:ed:8f:e7:
e6:02:8d:e5:f6:06:22:78:17:1d:aa:48:db:5e:6f:21:a4:e3:
7c:a8:86:1b:df:b9:55:e2:af:c9:90:81:b7:cc:63:65:1a:eb:
fe:6f:61:3a:d6:ab:e8:58:5d:9c:74:f0:6e:9e:d7:19:3d:a6:
7d:32:47:88:17:4b:9e:40:92:1d:c1:4e:51:f0:4f:89:da:99:
02:a1:98:69:90:28:6f:f1:e5:46:4d:94:e7:81:b1:8a:e8:38:
f5:4b:77:07:4a:b9:11:aa:74:d3:a1:0e:4f:a7:1d:60:ae:fa:
21:1f:61:f9:a8:4f:6d:7c:a9:16:90:78:1d:95:d3:34:88:26:
71:94:43:f2:d7:40:dc:71:13:77:54:25:3d:69:da:04:09:75:
7a:f3:cb:64:14:00:ad:de:ef:2e:3c:85:ad:0f:cd:40:50:d2:
a4:3e:0c:3e:12:31:4d:6f:5a:66:a1:8f:1b:15:51:67:7c:c9:
67:59:25:0b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQoJ8iOWGdar9Tiz9WONe+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3
NjVlYmEwHhcNMjUwMTAyMTc1NDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzI5YjBiNzY1ODAyYmUxZmI1OTg0ZjJkNjI3MjA2OTM3OWZiZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pPyz4GTaPrdZ5It1CCiW4SKGTNP
KxlVcZJy0aDzFc9hqbFfAuPsYCYmA9bWZq15kXeFGO9LpEGCTOB9L5Ubr8/Q5Hbi
XnUCKpGgRV3AmmmELblUwchiycmYAOoZe5SWCebCwNCgQnAFQbB34l90QiGGnn+/
eXVj7mNjYwJI3lYeQavqBjFsyx2iwV3odSvvMDAbgifC9O+CBxnCVMNTagm/LLdy
rNo5y10FSHiZghL/+jxBuJ1pjAt5aqp5N/8Uues3ilBSc/ObOy0cveH7AibfbRZM
tVnevWPkN26v5bwvAw6zY/0iFuQSCMkZRiHF4481KrdmsEmdx7NVLgzcKQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBwpsLdlgCvh+1mE8tYnIGk3n7+/MB8GA1UdIwQY
MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt
MGJjZmM1MzI5MzNjLzEvSENtd3QyV0FLLUg3V1lUeTFpY2dhVGVmdjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj
LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLUKMAwQC
U6+oAwQAbejwAwQCwjYYMA0EAgACMAcDBQAqDoTAMA0GCSqGSIb3DQEBCwUAA4IB
AQCAoXWhFNwUIntgGgnCNNxiRVjEIBmXcF2huzNCxCuxNQKmwoipm1IROp808yae
X6/jH6Ry7SOKjpF4QCdwCA5aY3qhOI/tj+fmAo3l9gYieBcdqkjbXm8hpON8qIYb
37lV4q/JkIG3zGNlGuv+b2E61qvoWF2cdPBuntcZPaZ9MkeIF0ueQJIdwU5R8E+J
2pkCoZhpkChv8eVGTZTngbGK6Dj1S3cHSrkRqnTToQ5Ppx1grvohH2H5qE9tfKkW
kHgdldM0iCZxlEPy10DccRN3VCU9adoECXV688tkFACt3u8uPIWtD81AUNKkPgw+
EjFNb1pmoY8bFVFnfMlnWSUL
-----END CERTIFICATE-----
Generated at Tue Apr 15 15:10:58 2025 by rpki-client