Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xpnbOWgAfiIJZmpjmdv34zXX7iA.roa
File: xpnbOWgAfiIJZmpjmdv34zXX7iA.roa (raw, json)
Hash identifier: hxYTr7x86gGFLz4Uj6fKUzE6Fc/CR0rrmrlRUyOVlSA=
Subject key identifier: C6:99:DB:39:68:00:7E:22:09:66:6A:63:99:DB:F7:E3:35:D7:EE:20
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194D785061F89FF815B1308DDE202804892
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xpnbOWgAfiIJZmpjmdv34zXX7iA.roa
Signing time: Wed 05 Feb 2025 19:10:06 +0000
ROA not before: Wed 05 Feb 2025 19:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:85:06:1f:89:ff:81:5b:13:08:dd:e2:02:80:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 5 19:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c699db3968007e2209666a6399dbf7e335d7ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:db:ef:32:be:a3:c7:7f:e9:0d:c0:ec:b3:
7e:a4:c1:e8:9c:e7:fa:ba:af:cf:0f:87:96:b6:39:
01:e5:f8:5a:98:1e:14:32:39:f2:8b:46:f1:ce:79:
84:7e:dc:e1:33:c1:b0:b3:81:bd:73:17:a0:2f:f7:
4d:94:21:61:c9:0e:00:77:eb:38:43:8a:c8:a8:90:
16:7c:49:d4:41:1f:75:6b:50:f5:e8:08:92:c6:6e:
a5:a1:1b:a9:19:cc:23:94:82:6e:97:b0:06:74:3f:
9f:2a:99:66:70:3a:82:81:e8:44:b2:ac:ee:b9:93:
77:f1:0e:11:cf:aa:8c:ea:12:e6:fa:af:88:18:fc:
5a:bd:cc:23:1c:ec:b9:82:de:26:f1:97:b0:51:ea:
f1:3b:8f:92:f5:d2:c6:31:a8:b5:8e:db:bb:39:bf:
3e:bf:82:df:0d:16:47:ea:e9:24:85:cf:1f:2b:54:
d8:40:bc:d7:be:93:a4:d1:4b:2a:b3:7a:9a:99:a5:
1f:ad:65:50:ee:81:e3:53:c2:85:0a:b9:d6:3c:28:
03:cb:45:74:7c:d2:da:0c:cf:93:79:1e:3f:c9:0f:
7a:c0:28:64:d5:62:f9:ae:d6:05:26:73:b1:a4:bb:
35:c4:97:11:23:b1:f8:70:70:c7:4b:6b:36:1a:06:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:DB:39:68:00:7E:22:09:66:6A:63:99:DB:F7:E3:35:D7:EE:20
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xpnbOWgAfiIJZmpjmdv34zXX7iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.96.0/23
77.239.104.0/23
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
185.207.133.0/24
Signature Algorithm: sha256WithRSAEncryption
68:31:ea:ee:c8:d5:46:4b:be:25:4b:67:45:99:fa:4b:14:cb:
4e:5c:69:83:dc:6b:85:80:e0:ca:46:9b:c3:78:9b:15:93:9d:
3c:99:53:08:d4:34:b3:fe:08:51:bc:4a:9a:2e:b6:9c:b6:6f:
23:81:44:3e:63:62:da:e6:f4:6e:bc:8e:47:3c:97:2c:4b:6a:
f1:82:10:73:ec:7f:f6:0d:de:7d:8f:e2:92:6b:2b:84:95:b9:
bf:2e:40:84:33:1a:f9:16:da:a6:66:6f:59:7e:ff:d3:13:72:
9d:11:8c:59:81:03:ab:b3:97:49:94:19:ce:67:05:5b:20:8a:
c3:99:aa:a0:8d:6f:bc:e8:78:97:30:46:4c:37:da:59:87:4b:
cc:2f:5a:f6:ae:eb:6e:84:96:09:5f:b5:e4:41:13:cf:d2:d0:
b1:c6:eb:08:f9:cb:c6:11:6f:1b:4c:0e:fc:5d:ca:b3:85:c4:
39:c2:58:86:4a:44:9d:e0:3d:b0:d9:c4:e1:02:c8:ad:1c:c8:
20:3b:a0:3f:2f:5f:12:30:22:fa:f3:a4:c8:9a:e7:43:67:b6:
11:35:9d:59:47:84:45:f3:8a:d9:9e:9a:2c:64:32:89:9e:c2:
56:4f:58:03:0e:2b:ba:ad:6a:36:d4:9d:7f:b9:da:80:8a:64:
da:b9:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:51 2025 by rpki-client