Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/HfQcZUosYB38WUcoYIEz_7k83KM.roa
File: HfQcZUosYB38WUcoYIEz_7k83KM.roa (raw, json)
Hash identifier: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=
Subject key identifier: 1D:F4:1C:65:4A:2C:60:1D:FC:59:47:28:60:81:33:FF:B9:3C:DC:A3
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0194236A05990B8DBDA0FE4DFB6D0B44A98B
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/HfQcZUosYB38WUcoYIEz_7k83KM.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212630
IP address blocks: 82.117.241.0/24 maxlen: 24
91.209.220.0/24 maxlen: 24
2a0b:53c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:99:0b:8d:bd:a0:fe:4d:fb:6d:0b:44:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1df41c654a2c601dfc594728608133ffb93cdca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:98:f2:dd:48:c3:21:05:24:9f:58:a6:99:
52:ac:a2:7b:a7:d2:69:26:ac:78:75:3c:a9:2a:e3:
a6:dd:91:41:34:2c:24:2f:ea:d6:6f:11:f8:9b:d9:
6b:b7:c2:01:29:bb:4f:fb:2c:63:14:78:9d:a7:bd:
1d:2c:83:cc:11:9f:d1:b5:b8:b3:af:a1:3f:14:89:
0a:ab:e0:1b:d7:6a:5a:b0:d1:4f:d1:f5:18:41:c3:
6f:29:75:7f:f5:40:3c:f3:48:b3:e2:17:03:20:8f:
de:ac:a8:32:db:32:80:ec:c1:66:6a:38:70:2e:b4:
de:5a:44:14:5d:1b:a9:34:48:59:1f:9d:2e:05:4d:
24:ec:b6:48:f0:8c:c1:13:7c:7c:1c:e9:80:66:99:
5f:d3:0b:dc:79:d4:67:4d:a3:1a:df:c8:f7:6d:85:
36:4f:69:3a:de:5d:37:ca:f7:92:9f:bf:7a:70:bb:
4d:8e:13:72:42:b8:53:54:84:cd:b2:28:fd:3d:26:
ef:ff:89:95:c9:1e:34:cf:74:66:12:e5:10:ad:1b:
5d:ed:3f:e5:59:ce:88:6c:7e:3c:be:11:08:11:71:
5a:12:c1:14:91:0b:08:16:71:80:c5:bf:af:c0:61:
1a:ee:8f:8e:11:dc:de:de:de:f0:22:3c:50:cc:fa:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:1C:65:4A:2C:60:1D:FC:59:47:28:60:81:33:FF:B9:3C:DC:A3
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/HfQcZUosYB38WUcoYIEz_7k83KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.241.0/24
91.209.220.0/24
IPv6:
2a0b:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
70:37:30:ee:1f:c9:9b:1e:2d:19:df:b1:39:7a:f8:74:b7:64:
09:68:1a:c4:c0:e7:a4:69:f1:77:02:e6:37:a2:bb:53:43:af:
36:b9:2a:0e:3b:34:cd:23:e4:cc:5b:e5:b6:e0:52:53:b5:46:
42:0d:5c:ad:78:85:72:7f:e3:cc:3d:c1:a3:24:80:cb:4f:22:
7a:09:79:df:51:47:05:50:a5:75:7a:fd:18:76:2e:91:7e:69:
8f:79:e1:9e:55:e1:d3:f5:c0:b3:52:7c:38:d2:a7:4f:bd:6b:
d9:56:cf:3f:3d:ad:b6:f0:3b:b9:e4:3c:20:41:56:d1:2f:34:
c1:b9:28:97:3d:70:bc:6d:5c:59:79:06:56:2d:55:98:06:ed:
77:81:2a:bd:14:a8:52:84:ce:cf:9b:94:e6:ed:03:8c:6c:42:
79:aa:4f:02:a0:78:85:39:83:70:37:2f:81:a8:f0:59:50:3b:
49:1e:eb:40:4d:3b:eb:ef:2f:20:7a:7d:e6:be:2f:b5:c2:57:
66:4c:de:d5:e2:52:41:69:3d:8b:3f:41:82:d2:93:6d:db:36:
4f:9f:62:04:8d:b8:28:05:e5:21:32:09:b8:e4:4a:a1:ea:8a:
ee:ad:36:1b:db:9c:1f:35:ea:5e:5f:c3:68:dd:c1:3b:74:90:
8e:5e:e4:2d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQjagWZC429oP5N+20LRKmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj
Zjk2Y2EwHhcNMjUwMTAxMTk0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGY0MWM2NTRhMmM2MDFkZmM1OTQ3Mjg2MDgxMzNmZmI5M2NkY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUiY8t1IwyEFJJ9YpplSrKJ7p9Jp
Jqx4dTypKuOm3ZFBNCwkL+rWbxH4m9lrt8IBKbtP+yxjFHidp70dLIPMEZ/Rtbiz
r6E/FIkKq+Ab12pasNFP0fUYQcNvKXV/9UA880iz4hcDII/erKgy2zKA7MFmajhw
LrTeWkQUXRupNEhZH50uBU0k7LZI8IzBE3x8HOmAZplf0wvcedRnTaMa38j3bYU2
T2k63l03yveSn796cLtNjhNyQrhTVITNsij9PSbv/4mVyR40z3RmEuUQrRtd7T/l
Wc6IbH48vhEIEXFaEsEUkQsIFnGAxb+vwGEa7o+OEdze3t7wIjxQzPqolQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB30HGVKLGAd/FlHKGCBM/+5PNyjMB8GA1UdIwQY
MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt
MzlmNGFiNmVjN2U2LzEvSGZRY1pVb3NZQjM4V1Vjb1lJRXpfN2s4M0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2
LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUnXxAwQA
W9HcMA0EAgACMAcDBQAqC1PAMA0GCSqGSIb3DQEBCwUAA4IBAQBwNzDuH8mbHi0Z
37E5evh0t2QJaBrEwOekafF3AuY3ortTQ682uSoOOzTNI+TMW+W24FJTtUZCDVyt
eIVyf+PMPcGjJIDLTyJ6CXnfUUcFUKV1ev0Ydi6RfmmPeeGeVeHT9cCzUnw40qdP
vWvZVs8/Pa228Du55DwgQVbRLzTBuSiXPXC8bVxZeQZWLVWYBu13gSq9FKhShM7P
m5Tm7QOMbEJ5qk8CoHiFOYNwNy+BqPBZUDtJHutATTvr7y8gen3mvi+1wldmTN7V
4lJBaT2LP0GC0pNt2zZPn2IEjbgoBeUhMgm45Eqh6orurTYb25wfNepeX8No3cE7
dJCOXuQt
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:34 2025 by rpki-client