Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa
File: HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa (raw, json)
Hash identifier: 1rwGaSaF+TCLDzH6gzPE1D/ug+G6OIuBh6+9zI6sNQk=
Subject key identifier: 1F:10:94:94:E4:B0:AC:4B:04:CC:5B:7D:AA:98:F6:66:79:6F:11:89
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 0194274763FF76F8B0ED73853019F06535A8
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 85.217.170.0/24 maxlen: 24
85.217.171.0/24 maxlen: 24
88.80.145.0/24 maxlen: 24
88.80.146.0/24 maxlen: 24
88.80.147.0/24 maxlen: 24
88.80.148.0/24 maxlen: 24
88.80.149.0/24 maxlen: 24
88.80.150.0/24 maxlen: 24
88.80.151.0/24 maxlen: 24
91.92.108.0/24 maxlen: 24
91.92.111.0/24 maxlen: 24
91.92.120.0/24 maxlen: 24
91.92.128.0/24 maxlen: 24
91.92.136.0/24 maxlen: 24
91.92.137.0/24 maxlen: 24
91.92.144.0/24 maxlen: 24
94.156.35.0/24 maxlen: 24
94.156.144.0/24 maxlen: 24
94.156.189.0/24 maxlen: 24
185.141.61.0/24 maxlen: 24
185.141.62.0/24 maxlen: 24
185.141.63.0/24 maxlen: 24
185.203.116.0/24 maxlen: 24
185.203.117.0/24 maxlen: 24
185.203.118.0/24 maxlen: 24
185.203.119.0/24 maxlen: 24
185.205.209.0/24 maxlen: 24
185.205.210.0/24 maxlen: 24
185.206.144.0/24 maxlen: 24
185.206.145.0/24 maxlen: 24
185.206.146.0/24 maxlen: 24
185.206.147.0/24 maxlen: 24
193.37.212.0/24 maxlen: 24
193.37.213.0/24 maxlen: 24
193.37.214.0/24 maxlen: 24
193.37.215.0/24 maxlen: 24
212.73.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:63:ff:76:f8:b0:ed:73:85:30:19:f0:65:35:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f109494e4b0ac4b04cc5b7daa98f666796f1189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:25:47:d8:ce:75:0b:8c:40:b5:0b:cd:c5:
a3:4f:69:6b:91:71:19:28:5b:1c:c2:5b:c5:e6:1c:
7c:96:59:90:c2:78:77:c8:a7:14:94:73:c2:aa:74:
fe:ee:ce:78:1b:5c:9a:c7:bf:fc:d9:7e:f9:2b:b1:
11:05:3b:a0:67:19:23:c8:bc:c8:d4:dd:f9:6d:02:
44:b9:ae:c8:43:a8:a0:4f:d0:3d:27:d8:98:b3:3b:
a5:86:2a:dd:f1:9c:95:dd:63:56:84:53:7e:8f:7e:
6e:29:e2:50:3e:35:e4:2e:7f:e4:93:ae:5f:cc:bc:
5c:f3:d3:8a:33:8f:8e:4a:fb:31:16:81:ab:7a:3e:
0d:cb:1e:7b:bc:6a:29:1b:1e:b4:2c:5e:1d:24:ba:
ea:bf:a3:9a:8a:6e:fa:87:65:93:84:4f:fc:ef:ae:
74:71:a9:41:7e:76:f3:fa:51:47:2d:76:d3:86:c4:
26:3e:40:e9:fe:e8:b7:65:da:61:56:99:57:24:74:
b1:00:69:46:76:f5:d5:f6:45:8f:ee:44:5f:82:23:
8a:80:1c:d7:89:55:02:74:91:28:3d:4f:aa:b6:01:
d8:f5:77:ab:2c:bc:bb:58:13:f1:94:ca:4d:af:f1:
3a:d9:a5:e6:02:c9:e7:a8:b5:53:7d:38:89:2e:05:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:94:94:E4:B0:AC:4B:04:CC:5B:7D:AA:98:F6:66:79:6F:11:89
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.170.0/23
88.80.145.0-88.80.151.255
91.92.108.0/24
91.92.111.0/24
91.92.120.0/24
91.92.128.0/24
91.92.136.0/23
91.92.144.0/24
94.156.35.0/24
94.156.144.0/24
94.156.189.0/24
185.141.61.0-185.141.63.255
185.203.116.0/22
185.205.209.0-185.205.210.255
185.206.144.0/22
193.37.212.0/22
212.73.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:99:8d:20:58:12:69:63:2c:1b:aa:6c:fb:61:f9:7f:25:93:
c5:10:20:97:0e:d2:8a:c6:1d:fa:4e:b3:35:cf:16:76:2c:98:
f0:e0:05:f1:16:dc:2e:08:fd:40:e1:6c:07:ce:0b:c1:f9:6a:
49:2a:11:55:23:86:ad:b8:d6:b1:77:db:6a:bf:fe:48:37:c3:
8f:8a:5b:b9:96:ca:ee:fb:5b:4c:7e:6b:7d:17:b0:32:35:87:
14:66:91:4b:d8:15:b4:1a:9c:a2:f2:11:aa:dc:e8:ce:ee:ea:
0b:6b:4b:1d:84:6a:c6:c0:71:10:5a:d3:b1:b2:a7:a8:72:66:
52:d2:ee:23:fb:1e:6a:25:09:67:62:6a:55:aa:08:8f:f2:9b:
9a:ce:cf:99:c2:29:ea:28:f7:d8:34:78:2a:fe:d5:51:2e:1b:
41:e3:e3:98:04:a6:3e:89:6b:9e:60:95:75:23:23:f3:8c:15:
37:13:fb:43:02:a1:a4:a0:ed:54:7d:15:58:26:bf:91:7c:0f:
3a:55:fd:13:06:a6:dd:7b:4c:83:ae:a5:63:1f:42:8c:52:d6:
94:66:a9:2d:24:c4:7b:9a:85:7d:03:0b:b7:9a:dd:ed:aa:33:
2f:99:7b:eb:5e:47:f5:2e:e4:cb:6d:c0:47:b1:65:1c:3a:3b:
ec:e4:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:56 2025 by rpki-client