Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/HiGziAUktoRlyueuC0_hHiCDmQ8.roa
File: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (raw, json)
Hash identifier: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=
Subject key identifier: 1E:21:B3:88:05:24:B6:84:65:CA:E7:AE:0B:4F:E1:1E:20:83:99:0F
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F925ED358BA417562BF581B7C1E2D
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/HiGziAUktoRlyueuC0_hHiCDmQ8.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206645
IP address blocks: 85.14.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:92:5e:d3:58:ba:41:75:62:bf:58:1b:7c:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e21b3880524b68465cae7ae0b4fe11e2083990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:eb:f0:08:25:3d:1b:dc:bb:ec:52:af:ff:
9c:99:c1:dc:6e:18:df:b3:20:cf:d4:94:a9:1b:39:
24:8d:4c:95:50:26:15:44:5f:45:6e:34:1e:53:43:
68:e4:e5:41:b8:92:ad:8b:2c:fe:9e:12:df:11:28:
50:db:95:87:6e:2b:f1:67:f4:ff:2c:cd:d6:7d:f0:
b5:90:48:ff:ea:bf:2f:d6:1a:ba:b8:41:fa:88:43:
49:a7:ad:06:9c:0e:67:bc:e7:70:b7:f8:19:6f:8d:
59:3f:02:b6:86:af:e5:5d:cc:f1:42:05:58:34:e8:
2e:f0:0a:63:39:26:1f:1e:72:2b:08:74:7b:48:71:
b0:60:17:6e:ee:74:b6:34:6d:bd:2f:e3:3e:59:3f:
5d:20:0b:cd:d0:1a:e9:09:01:e5:60:3d:fe:09:8e:
0c:7d:05:1d:91:ad:8b:a9:78:3f:b1:17:c2:29:d5:
43:a0:81:90:6e:68:07:06:7a:64:4c:23:8a:82:16:
53:d2:0a:52:24:29:69:9f:21:a6:0f:c2:ce:d6:64:
0c:57:03:11:40:0d:cb:07:fc:fa:08:8d:a8:3e:97:
6f:19:c2:67:7e:ff:66:a0:11:d3:49:94:98:d6:65:
6c:d6:cf:27:89:02:a7:6f:1e:50:6e:1c:66:a0:8b:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:21:B3:88:05:24:B6:84:65:CA:E7:AE:0B:4F:E1:1E:20:83:99:0F
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/HiGziAUktoRlyueuC0_hHiCDmQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f5:98:3e:8b:f7:2b:71:9e:5b:ab:2c:d1:71:b8:16:81:eb:
8d:b0:a5:23:d6:c4:19:91:4f:34:93:98:01:31:a2:77:c0:61:
00:d3:c2:45:3c:84:5a:4f:aa:46:c9:76:63:56:bc:74:9d:71:
4e:bd:62:1c:16:82:d8:2b:a5:3a:a1:96:49:28:6a:4b:43:c1:
10:0c:b8:df:16:a2:90:be:0b:9f:90:84:54:93:e9:d5:15:56:
0a:4d:af:f4:3f:ca:3e:eb:54:54:ae:4d:4f:72:50:39:c5:22:
f0:10:16:98:15:3a:b2:86:b5:d0:ea:e1:73:6b:ad:92:fb:87:
96:31:71:92:a3:25:b6:6c:ac:cb:9c:3e:c7:8a:0e:54:8c:48:
d5:1b:b4:13:5e:07:dd:63:d9:b5:0e:32:4a:96:67:8b:41:63:
d1:14:02:c8:21:a3:87:59:64:fb:19:c8:56:7a:6b:2b:f6:7f:
fe:62:98:b2:66:0f:8b:8d:04:34:84:e5:75:e7:ea:aa:06:3b:
47:e4:53:0d:af:41:9f:b6:52:b6:2a:37:16:5e:d0:57:c6:40:
bc:de:90:f5:b6:0b:2a:f5:01:a2:a1:84:21:c7:3e:36:a1:0e:
73:5f:35:67:b7:34:9c:72:a9:b7:c2:78:81:3e:42:e2:c1:e9:
37:97:73:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH5Je01i6QXViv1gbfB4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjUwMTAxMTM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTIxYjM4ODA1MjRiNjg0NjVjYWU3YWUwYjRmZTExZTIwODM5OTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyfr8AglPRvcu+xSr/+cmcHcbhjf
syDP1JSpGzkkjUyVUCYVRF9FbjQeU0No5OVBuJKtiyz+nhLfEShQ25WHbivxZ/T/
LM3WffC1kEj/6r8v1hq6uEH6iENJp60GnA5nvOdwt/gZb41ZPwK2hq/lXczxQgVY
NOgu8ApjOSYfHnIrCHR7SHGwYBdu7nS2NG29L+M+WT9dIAvN0BrpCQHlYD3+CY4M
fQUdka2LqXg/sRfCKdVDoIGQbmgHBnpkTCOKghZT0gpSJClpnyGmD8LO1mQMVwMR
QA3LB/z6CI2oPpdvGcJnfv9moBHTSZSY1mVs1s8niQKnbx5QbhxmoIu0JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4hs4gFJLaEZcrnrgtP4R4gg5kPMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvSGlHemlBVWt0b1JseXVldUMwX2hIaUNEbVE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQ4lMA0G
CSqGSIb3DQEBCwUAA4IBAQCt9Zg+i/crcZ5bqyzRcbgWgeuNsKUj1sQZkU80k5gB
MaJ3wGEA08JFPIRaT6pGyXZjVrx0nXFOvWIcFoLYK6U6oZZJKGpLQ8EQDLjfFqKQ
vgufkIRUk+nVFVYKTa/0P8o+61RUrk1PclA5xSLwEBaYFTqyhrXQ6uFza62S+4eW
MXGSoyW2bKzLnD7Hig5UjEjVG7QTXgfdY9m1DjJKlmeLQWPRFALIIaOHWWT7GchW
emsr9n/+YpiyZg+LjQQ0hOV15+qqBjtH5FMNr0GftlK2KjcWXtBXxkC83pD1tgsq
9QGioYQhxz42oQ5zXzVntzSccqm3wniBPkLiwek3l3NZ
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:30 2025 by rpki-client