Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/hGLXMAJyrLLUknw2I4rIa47GY5A.roa
File: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (raw, json)
Hash identifier: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=
Subject key identifier: 84:62:D7:30:02:72:AC:B2:D4:92:7C:36:23:8A:C8:6B:8E:C6:63:90
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 019425FBFBA6431B43C32D602A00368C6FB9
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/hGLXMAJyrLLUknw2I4rIa47GY5A.roa
Signing time: Thu 02 Jan 2025 07:47:38 +0000
ROA not before: Thu 02 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197579
IP address blocks: 91.223.113.0/24 maxlen: 24
185.92.232.0/22 maxlen: 22
2a13:6b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:fb:a6:43:1b:43:c3:2d:60:2a:00:36:8c:6f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Jan 2 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8462d7300272acb2d4927c36238ac86b8ec66390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:49:3b:54:4b:f5:3f:06:6d:c9:1a:bd:86:
2a:e5:fe:7c:bd:a6:77:87:e8:ab:44:88:22:4d:0d:
df:5d:18:07:ab:9d:54:34:2d:f3:7a:b0:c3:c3:04:
4c:4c:42:93:43:ac:b2:ea:ae:ce:9a:98:cd:aa:6e:
f9:59:61:57:bf:74:95:3e:01:37:b4:34:f1:35:e8:
b5:c4:46:32:bc:70:6c:9a:2a:cd:11:cf:85:00:18:
c9:17:d0:65:68:c0:fc:6b:64:1d:e4:c3:38:e8:be:
39:b6:17:46:7c:ca:66:58:97:fa:3a:51:b4:cf:09:
67:e4:07:83:9e:ac:dd:5b:42:73:68:11:90:6d:87:
b8:b3:70:1f:9a:28:d8:a3:7c:21:00:82:9e:72:4d:
a8:8c:f6:0c:0d:ae:67:d7:74:c1:6e:fa:df:25:8b:
0b:2a:55:d1:a9:53:9b:05:37:0f:b9:a2:ee:81:cc:
ed:00:4f:66:a6:13:b5:f7:d0:90:a8:74:e3:4f:f8:
c3:c5:41:3a:f6:7b:ce:6f:28:5f:b1:66:67:e5:f7:
77:dd:4a:6d:10:10:25:bb:a7:ec:69:61:55:f3:be:
12:db:bf:36:93:25:1f:65:e8:92:2c:b4:10:71:ba:
c2:e7:2f:18:b4:31:fe:d2:65:0b:5b:9f:cf:fa:88:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:D7:30:02:72:AC:B2:D4:92:7C:36:23:8A:C8:6B:8E:C6:63:90
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/hGLXMAJyrLLUknw2I4rIa47GY5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.113.0/24
185.92.232.0/22
IPv6:
2a13:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
29:f8:31:d2:fa:f5:17:07:cc:a7:43:5e:ca:3a:df:34:90:37:
fc:01:b6:9d:42:c6:82:5e:11:9b:75:ee:1b:7c:d2:a9:94:15:
88:8f:11:76:17:85:7a:17:98:f9:84:37:0c:30:20:74:51:0a:
bf:51:23:29:50:47:d7:61:9d:e7:c7:eb:32:04:49:45:b9:9a:
a2:78:20:00:cd:c9:aa:78:d5:7a:2f:e7:95:6d:21:d2:e3:a9:
c8:c2:4e:ca:80:57:12:0f:22:5c:e2:53:bd:9f:97:a0:5b:fa:
61:c0:e0:cf:b5:95:15:7b:48:3c:e4:cb:22:8e:a7:89:a0:6c:
30:af:4a:af:0a:0d:52:cf:f8:1c:33:b1:76:dc:87:e6:4b:90:
5d:57:05:58:c2:db:7e:1b:f7:06:b9:33:25:b7:cb:87:89:74:
bd:e6:80:7d:c3:59:9f:34:80:c7:43:1e:08:14:7e:2d:17:df:
6c:c4:67:e6:44:e4:b9:ff:ac:87:a4:3c:f1:15:25:12:9e:c4:
67:f5:78:9e:a8:41:92:8d:aa:1c:c5:c4:72:4f:f2:93:5e:d0:
cb:81:4a:d2:74:50:02:ed:8e:28:f9:fe:da:dd:b6:4c:82:d8:
e2:1f:0d:47:e6:c3:e9:b9:bf:bb:a3:50:33:17:04:ad:ce:bc:
51:c1:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:49 2025 by rpki-client