Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HF4WzxoDXgbg5yBxSS03tW9aru8.roa
File: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (raw, json)
Hash identifier: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=
Subject key identifier: 1C:5E:16:CF:1A:03:5E:06:E0:E7:20:71:49:2D:37:B5:6F:5A:AE:EF
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019423D7CF7CD29003396E71CE1246014190
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HF4WzxoDXgbg5yBxSS03tW9aru8.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61102
IP address blocks: 185.104.195.0/24 maxlen: 24
2a01:8640:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cf:7c:d2:90:03:39:6e:71:ce:12:46:01:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c5e16cf1a035e06e0e72071492d37b56f5aaeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:ea:7a:03:af:e5:a0:f5:81:99:8b:13:50:
d4:99:ba:ee:78:99:90:b9:4c:f0:65:95:66:7f:d0:
07:db:71:cb:cd:16:4a:fd:8d:c6:a3:1b:d4:d4:3a:
fa:98:2f:3a:af:43:05:6c:14:b5:af:0c:98:98:9e:
e0:01:58:d0:0f:cf:c5:96:d1:1c:5d:5d:dc:9e:cc:
d8:8f:15:e2:c2:bb:c1:6e:93:1e:06:5b:0c:f7:65:
8d:48:ee:3a:2e:01:8a:a1:06:f4:88:0a:a8:84:bd:
1f:17:40:0d:eb:1f:ef:b3:3a:37:5d:20:c0:2e:bf:
f2:51:f1:9c:5d:08:ad:90:05:e3:fb:7c:32:03:97:
fa:9b:72:59:85:ff:9d:a8:90:ff:05:06:4f:40:95:
c4:03:b5:32:25:87:b6:1c:87:b2:a7:f4:af:11:3c:
30:85:5a:63:fb:ce:0c:4d:74:9d:f5:a8:57:12:2c:
6a:a3:af:04:da:75:26:c0:ca:e8:4f:b5:e6:0a:10:
2e:03:6f:1c:22:4c:9e:af:99:7f:db:19:f0:70:da:
d5:12:c3:39:70:35:fc:ec:eb:5f:d1:a6:b6:b1:19:
45:42:ea:da:fd:d6:77:7d:91:0b:85:86:ec:34:a6:
19:71:10:f1:f2:a6:2b:89:5f:87:ad:48:1f:47:f9:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:16:CF:1A:03:5E:06:E0:E7:20:71:49:2D:37:B5:6F:5A:AE:EF
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HF4WzxoDXgbg5yBxSS03tW9aru8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.195.0/24
IPv6:
2a01:8640:c::/48
Signature Algorithm: sha256WithRSAEncryption
04:be:53:f2:31:f0:1d:c1:ab:93:7d:ff:2b:cc:8f:3a:df:f2:
28:aa:9a:48:40:b8:76:48:be:59:fe:3d:47:a0:8e:8a:c2:8b:
6f:e4:39:73:a4:3a:45:75:3b:4a:60:93:c2:c9:1a:97:5d:fe:
f9:6c:1d:74:66:09:e6:d7:6c:f3:a3:b2:a4:3b:34:65:de:8a:
aa:00:72:93:21:f7:cf:a9:48:f0:32:81:73:b0:77:0a:e3:14:
1c:f0:34:ab:36:d9:2a:04:e1:ed:f2:2c:56:bc:fc:b9:e2:be:
da:09:98:dd:d7:a4:d8:fa:5b:a1:0d:ed:f3:b0:e4:1f:7c:b3:
a1:e5:8c:93:7f:5b:7e:44:2d:3f:ad:1e:32:12:f1:32:7a:87:
6a:2a:64:88:57:f1:25:20:19:27:12:77:3f:d6:af:cb:95:c9:
a4:9f:e0:c8:90:84:11:ca:42:c4:a9:4a:7c:cf:ba:a1:0c:44:
d9:1c:d8:e2:11:88:98:10:f3:65:11:4e:71:ff:ef:ae:9b:0e:
5c:f0:ff:1f:62:11:30:b6:17:f6:f4:9f:0a:7f:de:31:66:8b:
c7:da:d0:14:78:e9:30:5c:31:78:8b:28:bc:ab:0b:dc:06:7e:
79:9b:b7:7b:1f:c4:72:c2:3f:45:8b:f1:64:e2:a1:40:17:bc:
0c:59:28:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQj18980pADOW5xzhJGAUGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjUwMTAxMjE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzVlMTZjZjFhMDM1ZTA2ZTBlNzIwNzE0OTJkMzdiNTZmNWFhZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7jqegOv5aD1gZmLE1DUmbrueJmQ
uUzwZZVmf9AH23HLzRZK/Y3GoxvU1Dr6mC86r0MFbBS1rwyYmJ7gAVjQD8/FltEc
XV3cnszYjxXiwrvBbpMeBlsM92WNSO46LgGKoQb0iAqohL0fF0AN6x/vszo3XSDA
Lr/yUfGcXQitkAXj+3wyA5f6m3JZhf+dqJD/BQZPQJXEA7UyJYe2HIeyp/SvETww
hVpj+84MTXSd9ahXEixqo68E2nUmwMroT7XmChAuA28cIkyer5l/2xnwcNrVEsM5
cDX87Otf0aa2sRlFQura/dZ3fZELhYbsNKYZcRDx8qYriV+HrUgfR/mv8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBxeFs8aA14G4OcgcUktN7VvWq7vMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvSEY0V3p4b0RYZ2JnNXlCeFNTMDN0VzlhcnU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWjDMA8E
AgACMAkDBwAqAYZAAAwwDQYJKoZIhvcNAQELBQADggEBAAS+U/Ix8B3Bq5N9/yvM
jzrf8iiqmkhAuHZIvln+PUegjorCi2/kOXOkOkV1O0pgk8LJGpdd/vlsHXRmCebX
bPOjsqQ7NGXeiqoAcpMh98+pSPAygXOwdwrjFBzwNKs22SoE4e3yLFa8/LnivtoJ
mN3XpNj6W6EN7fOw5B98s6HljJN/W35ELT+tHjIS8TJ6h2oqZIhX8SUgGScSdz/W
r8uVyaSf4MiQhBHKQsSpSnzPuqEMRNkc2OIRiJgQ82URTnH/766bDlzw/x9iETC2
F/b0nwp/3jFmi8fa0BR46TBcMXiLKLyrC9wGfnmbt3sfxHLCP0WL8WTioUAXvAxZ
KDc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:42 2025 by rpki-client