Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa
File: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (raw, json)
Hash identifier: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=
Subject key identifier: 1D:06:F2:EE:51:82:C5:58:5C:B1:8A:C5:07:1B:4B:BE:ED:4D:AB:5B
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C9783E36F9854986DB100C8B55445
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198192
IP address blocks: 45.10.128.0/24 maxlen: 24
45.131.52.0/23 maxlen: 23
45.131.54.0/23 maxlen: 23
158.255.236.0/23 maxlen: 23
185.92.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:83:e3:6f:98:54:98:6d:b1:00:c8:b5:54:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d06f2ee5182c5585cb18ac5071b4bbeed4dab5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:4f:73:b4:c8:ff:ac:60:6d:d8:94:12:ea:
c1:b4:ee:fc:1d:e5:49:7f:fc:35:db:ea:38:62:45:
c2:52:e2:7d:61:69:e7:7b:ff:64:4e:d6:1a:d8:dc:
5e:0b:27:a5:be:ef:2f:2d:29:36:ea:12:89:df:d9:
a0:e9:3c:7e:68:92:35:b6:60:47:3b:71:cb:08:c8:
8d:04:00:4f:e4:7a:3f:7c:f0:cd:e2:55:62:eb:2f:
8d:32:a2:ca:2c:81:4a:d3:54:04:7d:49:30:7f:6e:
a9:9d:a0:5a:ae:cf:51:58:f6:40:2c:51:8e:b0:b7:
5d:48:e1:7b:91:61:98:e5:2c:40:bd:f8:55:1b:a9:
1f:07:40:b5:60:8b:f8:63:2b:67:1b:70:fc:26:5b:
87:f3:ea:a5:b6:bf:f2:81:8a:b6:b0:2f:e3:6e:c8:
8f:ba:e1:bd:b6:5c:6f:9f:d3:be:72:40:99:50:a9:
4a:5a:1e:08:e3:d7:2b:a1:fa:45:c7:5e:39:6c:66:
f3:d4:73:0c:4f:47:d3:b1:1f:7e:9b:b3:54:bd:74:
fc:21:90:14:33:c9:71:3f:66:39:c3:09:57:ee:4a:
2c:47:1d:f9:45:99:15:13:52:ca:83:c1:75:9d:82:
6f:fa:49:0a:f3:7b:42:74:c0:0e:09:c6:8d:ce:3d:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:F2:EE:51:82:C5:58:5C:B1:8A:C5:07:1B:4B:BE:ED:4D:AB:5B
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.128.0/24
45.131.52.0/22
158.255.236.0/23
185.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
98:68:e0:ab:a8:b5:fd:26:30:29:12:96:78:e1:a6:9a:56:36:
22:13:e9:63:32:da:a1:3c:aa:18:60:51:42:48:d1:27:48:57:
d3:b0:f1:b4:b8:43:e6:3f:65:f5:3d:5e:72:45:eb:7f:6b:b5:
51:38:ac:1b:80:ff:ff:63:09:d7:10:1d:24:84:05:a5:94:d7:
7b:fa:8e:d1:70:91:ca:48:5e:ee:3f:4b:09:e5:3c:a2:40:69:
f4:dc:67:f6:e6:89:c3:1a:a4:17:c5:71:0c:b6:b3:ac:3b:09:
1d:62:74:d0:3f:eb:d7:29:fa:78:61:b1:54:17:ee:4b:73:db:
45:53:05:51:5c:87:1d:f2:be:78:4a:fc:3d:c9:8e:5b:8e:36:
b1:1d:c7:74:6c:4e:d7:5a:ab:b2:89:7a:f2:ea:e6:20:50:ed:
77:72:f7:8a:4b:12:ef:e7:f5:4b:24:ab:97:f6:2f:e7:44:73:
b8:2a:28:8a:aa:e8:6f:94:95:91:4c:1d:44:50:1b:17:11:76:
32:98:e3:11:05:b0:a5:c6:75:a6:28:b3:30:a3:04:b3:95:da:
8e:7d:b1:03:00:e9:86:d7:b9:b7:13:89:7e:89:ff:53:8b:64:
9e:04:e5:d0:19:6c:6f:83:94:44:98:f6:ca:91:32:04:9b:c5:
38:0a:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:09 2025 by rpki-client