Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HALpEGEBvZD_CDU-sez8eFP7grw.roa
File: HALpEGEBvZD_CDU-sez8eFP7grw.roa (raw, json)
Hash identifier: bhVLNP3MI9b1SET54E4QOy+L5i0474wlo4TlVk+dp9U=
Subject key identifier: 1C:02:E9:10:61:01:BD:90:FF:08:35:3E:B1:EC:FC:78:53:FB:82:BC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB7E0807CF030819E9474E295021B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HALpEGEBvZD_CDU-sez8eFP7grw.roa
Signing time: Wed 01 Jan 2025 01:48:23 +0000
ROA not before: Wed 01 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201153
IP address blocks: 45.155.48.0/22 maxlen: 24
80.209.255.0/24 maxlen: 24
95.214.108.0/22 maxlen: 24
185.81.76.0/22 maxlen: 24
185.142.100.0/22 maxlen: 24
195.181.255.0/24 maxlen: 24
212.237.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b7:e0:80:7c:f0:30:81:9e:94:74:e2:95:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c02e9106101bd90ff08353eb1ecfc7853fb82bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:81:90:5d:ad:c3:89:2a:8e:52:13:2b:2c:
44:77:40:da:da:73:84:b7:40:6a:44:f6:37:a9:1a:
55:aa:94:ff:0c:d9:08:aa:b1:09:f8:9f:34:39:ea:
fe:5c:09:26:c0:b1:41:60:64:be:09:d2:ef:cd:f8:
c3:7d:f3:d5:cb:31:00:70:cb:6e:64:eb:0e:a8:16:
fd:47:f8:5d:93:43:81:0b:a7:26:eb:2b:3e:1b:80:
4d:2e:60:52:15:63:a5:bb:58:d9:3b:ac:43:48:89:
7d:7a:66:24:96:07:38:52:f1:13:5e:8b:90:6e:7f:
de:cf:49:cd:c1:03:df:e3:80:68:a2:43:31:53:28:
84:43:b5:b5:d7:e2:5c:32:a8:12:b7:79:20:65:cb:
91:f7:de:b9:45:e1:7e:b7:4c:e5:5d:95:e5:25:48:
8a:72:1d:a2:7d:9e:f6:94:05:86:32:da:87:d1:e0:
47:44:1d:b9:0a:0a:29:f6:1a:24:fa:c0:b4:be:ed:
d8:b6:a8:ca:6a:25:fa:46:01:c0:12:32:50:be:e5:
e7:2f:c2:f2:bf:52:ef:7d:9b:a7:a7:11:a2:5b:b4:
ec:af:a1:22:26:aa:2d:ff:a5:9e:96:84:a4:76:42:
a7:e2:4d:66:68:db:7f:c7:0a:2c:32:34:5a:8f:d7:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:E9:10:61:01:BD:90:FF:08:35:3E:B1:EC:FC:78:53:FB:82:BC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HALpEGEBvZD_CDU-sez8eFP7grw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.48.0/22
80.209.255.0/24
95.214.108.0/22
185.81.76.0/22
185.142.100.0/22
195.181.255.0/24
212.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:69:37:b4:0e:d7:48:c5:15:dc:22:94:ea:28:cd:2d:a1:30:
7a:5e:ed:37:fb:7e:20:91:bf:f8:b8:e4:42:13:c4:f8:25:9e:
48:ac:8b:34:02:06:85:77:3f:b4:41:78:b6:27:e6:35:a9:da:
e5:c8:e9:54:b2:ac:4f:ad:bf:ec:a6:2b:5f:ba:ff:34:51:ac:
7c:e6:06:34:08:92:26:a2:27:62:58:28:d0:e6:73:e1:c1:ca:
02:5c:6c:50:4c:cb:f3:36:60:ed:ae:09:72:ed:34:8a:8e:01:
2d:b3:3c:47:f0:fb:41:e7:a8:03:e5:13:26:51:f0:4e:d8:36:
66:db:29:a2:20:04:19:81:11:7a:77:47:70:d2:8d:7e:bc:95:
86:bb:a0:84:fd:48:25:45:ca:c1:8a:b2:13:06:df:23:87:13:
2d:0c:4c:31:0c:0c:9b:46:b4:d5:5d:c4:8f:60:0a:6f:c9:27:
35:63:38:ca:3d:9a:51:29:12:eb:05:46:31:6a:67:89:c1:b6:
de:e6:c4:ee:8a:55:29:da:26:d8:6f:31:d2:cd:f5:fd:2a:4f:
74:7b:ca:b5:73:6a:7a:68:3b:5f:be:76:d7:d1:f8:3c:a6:c7:
75:80:b5:21:3a:c8:b8:6a:52:67:bb:4f:d0:53:9c:83:a0:e9:
99:c4:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:38:21 2025 by rpki-client