Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa
File: hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa (raw, json)
Hash identifier: C14O+ch76NMbt5OI5YVUKsB04/tzGGuX2CLu1tn4/yw=
Subject key identifier: 86:13:89:53:F4:17:8E:58:16:7C:1C:60:A5:C2:ED:A3:A9:95:F1:67
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D76D6E42DAC8B988E05CC752FB6457
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204063
IP address blocks: 5.1.64.0/21 maxlen: 32
94.247.47.0/24 maxlen: 32
185.90.160.0/24 maxlen: 32
185.90.161.0/24 maxlen: 32
185.90.163.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6d:6e:42:da:c8:b9:88:e0:5c:c7:52:fb:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86138953f4178e58167c1c60a5c2eda3a995f167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:98:6b:59:13:00:57:fc:7f:39:b5:e5:b6:
46:d3:ef:24:7e:4c:d6:bf:fa:12:af:21:81:81:0e:
58:1d:10:a9:cb:e6:f3:8d:87:17:91:f9:60:57:54:
14:18:48:04:31:82:c7:cc:f6:35:8f:aa:79:bf:c5:
0a:f6:62:b8:0f:de:b2:b0:47:89:81:41:cf:d3:88:
5b:20:1b:9c:8b:cb:9a:58:12:91:34:24:6c:34:6f:
f6:69:7a:4c:2b:2c:89:46:15:51:5b:08:27:7b:af:
d9:0a:49:9d:3b:63:84:37:32:75:78:45:85:44:2b:
c3:e0:b8:c5:44:e6:aa:db:e0:2f:4a:d6:6f:04:7a:
e4:5b:f4:fc:3c:8c:25:ce:a7:66:46:9f:ed:b8:e0:
e8:2a:81:99:6b:b2:da:4e:b4:d2:2b:49:ab:bf:ea:
e0:2f:3e:96:4a:95:67:fb:8d:41:12:86:3b:b7:69:
a4:11:ad:a4:89:8a:12:4c:98:28:31:9c:6c:35:4e:
0e:4b:b1:c6:f4:73:76:39:81:9b:07:f4:70:42:07:
f2:98:09:d3:02:94:4f:6e:c2:15:ed:87:a9:ec:69:
ca:35:7b:f4:3c:e0:26:0c:fb:91:2c:2e:f1:78:50:
ae:c8:93:7d:32:77:7b:28:4f:e8:5d:b7:20:77:50:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:89:53:F4:17:8E:58:16:7C:1C:60:A5:C2:ED:A3:A9:95:F1:67
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/21
94.247.47.0/24
185.90.160.0/23
185.90.163.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4a:13:17:b5:c0:f5:c8:4c:f7:2d:b2:1b:46:64:0b:dd:e5:
87:48:1c:93:7f:58:78:dd:1d:df:9b:4c:a7:2a:ac:c3:9b:6b:
24:dc:39:fe:5c:2f:85:dd:74:8b:bd:af:11:b2:7a:0b:a7:4e:
ea:7a:a0:0b:9f:02:6f:31:40:07:5e:0b:f7:3d:72:af:8f:98:
e4:ab:d3:dc:76:7a:75:f9:7f:3d:73:f0:a3:ad:9a:ae:4d:45:
89:29:46:31:93:de:67:92:50:69:fa:5a:01:97:f2:7a:72:de:
88:4b:5f:f5:44:93:03:10:10:6c:df:3d:b3:79:4f:bc:ea:89:
38:42:08:0f:e7:1b:40:d7:48:ba:de:48:00:9f:88:75:a3:a3:
bd:be:dd:8b:fa:5b:ec:32:96:25:e8:93:e5:df:dc:88:0e:91:
82:a9:83:f8:a2:3c:4c:62:a3:e4:72:2e:37:07:31:b1:aa:bb:
74:ed:50:8f:b4:aa:6b:99:bf:0b:00:f0:0e:5c:48:4d:6a:1d:
a8:0b:02:04:af:e9:f3:0d:1d:15:67:25:22:d8:c9:6e:84:4c:
53:d3:73:17:9c:12:d7:3c:74:91:75:3c:fc:63:68:75:f0:e6:
28:52:f5:db:c7:96:9d:5f:2f:70:c3:45:a3:a1:ad:19:0c:46:
fc:51:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:09 2025 by rpki-client