Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HCRZ7kidZrpHRM8SX0jXI98_QOg.roa
File: HCRZ7kidZrpHRM8SX0jXI98_QOg.roa (raw, json)
Hash identifier: HUPg13X8WTvtMO+SgQO0HEMJKkRMS4NI1byIhfG01j4=
Subject key identifier: 1C:24:59:EE:48:9D:66:BA:47:44:CF:12:5F:48:D7:23:DF:3F:40:E8
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01955CDCA9A2EBB78B2AE65089AA6BB10561
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HCRZ7kidZrpHRM8SX0jXI98_QOg.roa
Signing time: Mon 03 Mar 2025 16:35:19 +0000
ROA not before: Mon 03 Mar 2025 16:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211790
IP address blocks: 46.32.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:dc:a9:a2:eb:b7:8b:2a:e6:50:89:aa:6b:b1:05:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Mar 3 16:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c2459ee489d66ba4744cf125f48d723df3f40e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:2f:26:82:7d:2a:38:21:89:c9:f5:ec:30:
a5:d8:4e:cf:d0:a0:1d:bf:bf:83:bd:a8:9a:3b:5a:
49:e7:60:03:fd:41:d3:b2:b6:a5:ce:5f:50:fb:5b:
61:08:6a:d7:8c:26:ab:7f:f9:46:ac:97:17:d7:a8:
74:29:aa:e8:89:e3:02:50:75:2f:e5:8f:47:4c:a5:
a8:51:ce:80:3c:fb:63:c0:a4:12:d7:5d:11:65:f8:
09:5b:d2:03:92:91:cd:03:cc:6c:10:9f:52:81:80:
6d:ff:f6:08:a5:27:96:2f:f4:58:bf:9d:5e:de:07:
6d:ae:ef:9d:fe:ee:e8:8d:ca:32:ad:77:df:e2:d1:
a3:84:ae:9d:2e:ff:3d:0d:2b:a7:9c:a3:0a:6f:45:
2c:2b:60:56:80:d0:ec:9e:5e:fe:b0:3d:b7:fb:f0:
f1:f3:11:11:63:4e:4b:b2:f0:20:c7:cb:5e:3a:0d:
14:84:df:fa:65:9f:97:b6:c9:9d:c6:df:83:32:0e:
4c:17:31:fc:dd:ea:36:1b:38:fd:82:43:e4:3b:5d:
70:67:4a:6e:61:af:81:d0:38:59:42:0a:61:98:0d:
89:bc:48:21:b7:e0:b7:bd:10:f6:1e:d3:4f:d4:e6:
01:a9:31:d9:7a:0d:2d:3c:66:97:ab:f0:a7:62:46:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:59:EE:48:9D:66:BA:47:44:CF:12:5F:48:D7:23:DF:3F:40:E8
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HCRZ7kidZrpHRM8SX0jXI98_QOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:55:95:03:c6:08:cc:5f:10:3d:7c:e7:23:1b:93:7e:0e:39:
6f:53:30:22:04:b6:0e:59:99:eb:d2:28:a0:ff:a7:a7:06:1a:
a9:a6:09:61:5f:36:85:ec:9c:c5:71:fb:bf:42:14:d0:5d:ba:
75:9e:1a:fa:36:87:b7:49:5a:cc:9f:fa:48:f4:c1:08:11:60:
e2:fa:67:09:69:b8:69:40:a2:de:1b:4f:7c:16:4f:1f:91:b4:
61:58:41:a4:82:fc:09:1e:ec:6f:0b:cb:17:f7:5a:4c:7f:38:
ba:7a:6c:83:db:2f:86:81:66:95:64:f2:21:60:3c:b7:f4:87:
68:b3:5c:02:88:16:33:81:57:68:9c:3a:f4:ae:05:e8:55:bc:
9f:41:e2:82:13:fc:59:89:26:65:89:59:ad:a4:7d:23:ab:4c:
0a:fa:2d:4c:e6:79:a9:df:8d:89:6a:49:e3:36:67:ab:3f:8a:
54:8a:b4:4f:70:fe:09:41:da:aa:3f:7f:95:b8:60:cd:01:e2:
e5:40:00:aa:13:fa:5c:a9:20:d8:da:73:d2:71:59:83:70:31:
d1:4b:68:7f:9f:07:f3:1b:6c:6c:fb:67:b7:87:71:03:96:92:
29:b1:39:53:43:8f:a2:d6:97:91:d7:4e:a2:f1:57:72:68:3f:
e4:9c:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:30:24 2025 by rpki-client