Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hYdlQZoJApaUrpLPSwRpF_Alth8.roa
File: hYdlQZoJApaUrpLPSwRpF_Alth8.roa (raw, json)
Hash identifier: lAjo+84ZROUk28Kp0cwaSeeA7ssn2GU1agYTVX8INPc=
Subject key identifier: 85:87:65:41:9A:09:02:96:94:AE:92:CF:4B:04:69:17:F0:25:B6:1F
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 019492FF0E749D65C84BB995D6A9D8EAF592
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hYdlQZoJApaUrpLPSwRpF_Alth8.roa
Signing time: Thu 23 Jan 2025 11:49:36 +0000
ROA not before: Thu 23 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8456
IP address blocks: 79.123.176.0/23 maxlen: 23
79.123.178.0/24 maxlen: 24
79.123.179.0/24 maxlen: 24
79.123.180.0/24 maxlen: 24
79.123.181.0/24 maxlen: 24
79.123.182.0/24 maxlen: 24
79.123.183.0/24 maxlen: 24
95.183.228.0/24 maxlen: 24
193.140.192.0/24 maxlen: 24
193.140.193.0/24 maxlen: 24
193.140.194.0/24 maxlen: 24
193.140.195.0/24 maxlen: 24
193.140.196.0/22 maxlen: 22
193.140.196.0/24 maxlen: 24
193.140.199.0/24 maxlen: 24
193.140.200.0/22 maxlen: 22
193.140.200.0/24 maxlen: 24
193.140.201.0/24 maxlen: 24
193.140.203.0/24 maxlen: 24
193.140.204.0/22 maxlen: 24
193.140.208.0/21 maxlen: 24
193.255.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:ff:0e:74:9d:65:c8:4b:b9:95:d6:a9:d8:ea:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 23 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=858765419a09029694ae92cf4b046917f025b61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:f9:fb:4a:da:a6:16:df:b4:fb:fb:13:86:
42:dc:64:ad:21:5b:24:eb:c1:d1:c9:6a:30:3c:93:
41:6c:13:ed:5b:6c:48:12:96:6f:e0:a2:11:9b:81:
e3:bd:7f:48:99:78:9b:18:dd:69:ba:1f:27:71:f5:
12:79:bd:35:a0:1a:59:80:3e:96:7a:55:e4:3a:ec:
d8:43:ed:96:1c:ce:43:db:39:01:b0:0f:fd:9c:3e:
a8:3c:4e:a4:b6:21:4a:36:44:a7:00:1a:05:16:de:
af:d9:bd:c0:3d:8f:fd:e7:83:3d:84:4f:07:3d:36:
31:e0:78:12:9b:17:d0:b1:dd:fe:17:6a:2f:db:ba:
48:5a:dd:f4:41:27:dc:f6:b5:c5:9f:c3:8f:ad:6c:
9f:fa:d5:a3:7a:ae:72:fb:d5:8e:13:9b:1f:e0:2c:
7c:0f:72:20:8f:6e:8f:d3:af:63:e1:35:74:0b:49:
a5:bc:dd:f3:21:bc:8b:d6:03:df:48:bd:cf:f3:8a:
fd:01:f6:24:1c:ec:10:8c:6c:3b:ab:4d:8e:dc:96:
a6:d1:96:5c:1c:a5:78:7f:78:03:f6:29:69:84:b1:
7c:05:8c:80:4b:41:51:4f:68:aa:d3:cf:ff:45:46:
14:ba:c2:f1:66:4e:08:d2:90:35:b2:c9:1b:c6:0a:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:65:41:9A:09:02:96:94:AE:92:CF:4B:04:69:17:F0:25:B6:1F
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hYdlQZoJApaUrpLPSwRpF_Alth8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.123.176.0/21
95.183.228.0/24
193.140.192.0-193.140.215.255
193.255.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f0:b1:e7:e8:1d:8d:ad:31:8a:2b:6a:a6:b4:4a:97:94:7f:
1c:16:79:95:c0:6a:34:ef:18:70:36:c8:a9:f3:f0:ba:4e:8c:
8a:29:1b:36:70:6d:11:0e:25:35:a6:82:7a:d3:79:42:9f:b7:
ff:f2:01:ea:f7:74:ea:a6:d1:d5:a3:ca:db:9d:76:a9:38:87:
2a:c3:0f:57:86:cb:02:e4:a7:7f:55:44:c6:b0:97:45:93:15:
6e:cb:7e:62:14:f5:12:e8:9e:9a:b1:ea:c5:33:6a:56:2c:f5:
7e:f8:ee:95:5c:2a:6b:54:95:95:69:b9:36:69:c2:a6:a5:90:
5d:ec:42:f5:09:f2:6b:6d:73:5a:d6:de:ef:b5:4f:e8:a3:08:
9d:75:0a:62:14:90:af:29:a4:17:15:2b:f4:60:59:f0:01:a3:
31:57:67:90:71:af:75:55:f3:d0:7b:f4:bc:15:16:d6:05:20:
cc:bb:83:60:85:a6:44:59:95:9f:26:3d:39:29:52:65:5e:63:
01:54:a4:3c:1b:e1:e8:39:f7:9e:8a:d0:96:d5:27:16:a5:99:
a6:7f:17:b6:28:b8:d2:76:f6:35:7c:73:76:6f:ed:6d:a3:26:
27:99:f8:7b:a3:6e:95:0b:4c:e7:4a:ff:15:d0:dc:37:bd:af:
3e:86:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:23 2025 by rpki-client