Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa
File: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (raw, json)
Hash identifier: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=
Subject key identifier: 1C:AA:01:97:1E:0A:8B:E9:F3:C4:2C:3D:68:4C:FE:A1:31:93:4B:9B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195DD7FB8A39E9C7D93DC4F2FD24DE9CF0C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa
Signing time: Fri 28 Mar 2025 16:04:49 +0000
ROA not before: Fri 28 Mar 2025 16:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213596
IP address blocks: 77.239.126.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:7f:b8:a3:9e:9c:7d:93:dc:4f:2f:d2:4d:e9:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 28 16:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1caa01971e0a8be9f3c42c3d684cfea131934b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:00:5e:a3:01:fe:a7:62:fd:dc:e5:b3:9d:
5a:92:39:73:fa:a0:88:09:67:14:45:29:d7:12:f3:
91:5b:f2:9a:69:de:22:bf:c3:ba:5c:25:bb:84:82:
26:76:01:ae:f5:11:02:46:3b:bd:d7:d3:75:5b:bb:
31:79:c4:d0:39:4d:f2:ae:8a:eb:d5:43:84:ea:1b:
a9:4a:35:ed:d8:d5:91:8c:0f:1d:54:6d:d6:15:6a:
ac:c8:7e:5f:3d:3f:80:71:06:56:ef:0c:cd:8a:0d:
64:0c:9b:39:60:6a:1f:09:e3:aa:ea:b0:f5:52:37:
03:f2:e2:42:5c:3a:97:a3:04:71:a1:5f:5e:46:2a:
8c:0e:22:cc:af:ac:52:68:56:13:19:e1:5e:7a:81:
af:68:44:45:eb:7a:67:62:05:42:3e:d6:8c:3d:77:
69:db:b2:bf:8a:bb:fb:0b:a9:f2:d7:38:26:e8:50:
51:1c:30:26:7f:1a:c9:c3:85:df:85:01:c0:16:6b:
30:a1:cc:d0:ee:48:3f:51:d3:2b:3a:c6:67:5b:22:
3e:77:a3:78:11:9e:fc:94:ac:e6:ad:57:80:28:12:
95:cc:24:a3:10:06:99:e8:26:d8:32:2d:0a:7f:ca:
10:0b:47:da:ab:83:83:46:e8:a9:37:b3:2e:2c:33:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:01:97:1E:0A:8B:E9:F3:C4:2C:3D:68:4C:FE:A1:31:93:4B:9B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.126.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:98:1d:54:be:0e:7f:b6:6f:ee:dc:19:68:73:50:f1:ff:fc:
4c:8c:ae:67:c6:bb:ae:51:47:34:96:50:52:de:9b:25:3a:24:
c4:1c:d7:9e:09:0b:2d:7c:2e:86:0a:f2:3e:8f:d3:05:2c:f9:
1d:c5:75:cc:99:e0:0a:3b:c8:4e:74:f1:2a:78:b3:19:4f:5a:
81:c4:0a:ee:7b:d5:2a:09:21:99:1f:43:11:6b:5b:a5:fb:2a:
c4:37:67:a8:78:31:b1:bb:f9:8c:c6:52:5b:33:1b:68:e6:6f:
b3:db:4e:9c:0e:13:a6:3e:21:82:d1:cd:8a:15:f6:fd:6b:4f:
6a:17:c6:3e:86:44:53:66:3e:a8:d2:df:1c:eb:72:4e:ab:85:
1e:6d:59:16:d4:ad:18:48:d6:46:4d:f6:ad:2e:db:bd:97:b9:
98:7f:ab:02:2f:54:6f:d6:55:6e:74:94:1e:59:bb:26:32:34:
7f:f4:5c:7d:d8:75:b4:11:e8:76:90:5a:a5:eb:ef:79:fe:04:
b8:e3:70:e6:bd:56:17:5b:e6:42:46:71:3d:5c:b3:01:de:34:
84:58:b6:46:44:73:c0:e8:11:ab:d5:62:ec:fa:d7:c9:32:9c:
89:6d:97:78:08:a0:c1:6e:e3:a7:ac:9c:41:5e:98:c8:1a:b8:
4e:22:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:15:35 2025 by rpki-client