Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/RHNggBb1TucAzNCR_Nr4pg_wiTI.roa
File: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (raw, json)
Hash identifier: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=
Subject key identifier: 44:73:60:80:16:F5:4E:E7:00:CC:D0:91:FC:DA:F8:A6:0F:F0:89:32
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019638424A499D57A408F41EA556C21B9B21
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/RHNggBb1TucAzNCR_Nr4pg_wiTI.roa
Signing time: Tue 15 Apr 2025 07:03:10 +0000
ROA not before: Tue 15 Apr 2025 07:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13045
IP address blocks: 81.14.128.0/17 maxlen: 17
89.182.0.0/15 maxlen: 16
185.93.136.0/22 maxlen: 22
193.254.18.0/24 maxlen: 24
212.59.32.0/19 maxlen: 19
2a02:560::/29 maxlen: 32
2a02:560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:42:4a:49:9d:57:a4:08:f4:1e:a5:56:c2:1b:9b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Apr 15 07:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4473608016f54ee700ccd091fcdaf8a60ff08932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:22:6e:53:e7:5c:3e:bc:2d:18:50:99:af:
af:c3:83:3b:df:c5:b0:19:da:c8:88:c5:d2:8f:89:
df:9e:dd:f9:43:dc:a1:c4:5e:7b:41:15:1e:7a:e7:
ac:82:a7:23:db:50:cb:26:0e:b1:ba:fc:81:d4:eb:
40:4a:1a:59:4d:70:64:2d:a2:20:5c:93:74:d9:32:
8b:0f:a2:e3:9b:6b:50:26:1e:54:89:d9:37:ac:7b:
88:df:6f:0d:ae:95:89:d8:ea:ab:ea:f9:02:aa:10:
70:d7:3f:4d:c7:7d:aa:21:bf:50:fd:4e:33:25:4a:
1d:59:84:03:9d:36:9c:98:14:44:bd:68:9f:7d:40:
b8:4d:80:62:cf:e9:6e:87:3c:71:01:6c:b9:e7:58:
06:c8:08:79:eb:f4:46:9d:ff:22:b8:10:37:57:66:
3e:69:33:07:74:8a:48:ce:6d:6d:6c:e7:f3:e6:d3:
9b:29:17:3b:39:69:fe:65:df:51:ee:6f:9d:1b:9c:
f8:7e:53:af:e5:ef:a0:65:b4:72:a4:f8:12:77:ab:
71:39:2e:05:5b:a5:32:3e:95:ba:d0:04:ca:e0:a9:
83:65:fc:5c:61:f7:fd:a6:76:85:63:36:41:ba:3a:
60:3a:f5:28:9d:84:8a:15:db:2d:d5:d2:25:74:48:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:60:80:16:F5:4E:E7:00:CC:D0:91:FC:DA:F8:A6:0F:F0:89:32
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/RHNggBb1TucAzNCR_Nr4pg_wiTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.128.0/17
89.182.0.0/15
185.93.136.0/22
193.254.18.0/24
212.59.32.0/19
IPv6:
2a02:560::/29
Signature Algorithm: sha256WithRSAEncryption
c4:06:53:e7:20:c2:92:a8:04:b1:dc:79:50:68:6e:15:57:c0:
1f:fa:7a:87:b4:33:10:a7:79:bd:f7:b7:e9:42:be:e1:79:88:
d8:7c:ec:a8:c5:6d:96:42:b1:71:13:db:c4:1b:4d:1a:9d:4b:
1b:78:cc:56:42:a6:41:97:2c:93:8b:bc:07:9a:44:f9:5d:83:
6b:de:c3:37:3b:71:3b:9d:ab:f2:a7:68:e5:1c:ac:5f:12:12:
a4:c3:2d:34:e3:8e:6a:d9:ad:a7:53:da:8e:2b:7d:6d:56:b3:
e6:e9:ce:62:f7:dc:e3:b4:b9:46:5c:ef:bc:b2:c7:2a:4b:c2:
83:43:94:a0:84:7d:89:68:82:98:3f:01:fc:6a:66:d1:c6:e7:
63:82:51:04:46:c9:f3:2d:5c:51:58:43:1d:c3:8b:54:ea:6a:
91:6e:f6:48:15:9b:34:fa:70:b4:d1:eb:6e:cf:ec:43:bf:07:
b2:fe:d8:54:0f:ac:51:e1:e7:61:05:69:82:be:e3:a0:29:43:
f1:1e:c7:88:e8:84:5e:97:4f:4f:1d:cf:04:8f:ff:f8:50:3f:
2d:76:6f:ca:48:ed:da:25:34:2e:a2:2c:16:ea:e8:49:68:d4:
32:c9:d5:b2:83:2d:5d:f8:f8:76:03:1f:e0:4c:df:b8:e8:e7:
1e:12:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:45 2025 by rpki-client