Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/HXA-khxqd5TaAqh8eLrHhN2_LU8.roa
File: HXA-khxqd5TaAqh8eLrHhN2_LU8.roa (raw, json)
Hash identifier: zWZYj+sxS+SqeGEcqQJZ7ZzfpiEWQtCnX+c5IlcAdbA=
Subject key identifier: 1D:70:3E:92:1C:6A:77:94:DA:02:A8:7C:78:BA:C7:84:DD:BF:2D:4F
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0194FA2E4051D8B730983C6279B6409D8ACE
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/HXA-khxqd5TaAqh8eLrHhN2_LU8.roa
Signing time: Wed 12 Feb 2025 12:42:02 +0000
ROA not before: Wed 12 Feb 2025 12:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62113
IP address blocks: 185.38.24.0/23 maxlen: 23
2a00:fbe0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:2e:40:51:d8:b7:30:98:3c:62:79:b6:40:9d:8a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Feb 12 12:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d703e921c6a7794da02a87c78bac784ddbf2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:52:0f:b8:c1:86:4a:f6:f6:1f:95:54:46:
cc:e5:f7:c7:2b:ee:fc:9e:bd:d9:cc:81:66:91:e5:
3a:a4:e8:e4:95:55:95:8f:44:e5:04:a7:4a:69:e7:
01:93:fb:2a:3e:76:3b:0d:dd:a3:43:d1:7a:0c:7c:
38:e9:17:70:31:89:b2:89:12:ff:4d:0d:be:63:95:
67:30:ef:4d:8f:b3:2a:72:bc:38:95:05:01:df:7b:
c0:02:be:c5:08:9b:af:49:c0:16:05:7c:b1:75:e0:
0b:fc:d0:dc:65:be:c6:5c:d8:a9:c7:ac:76:8e:20:
d2:23:56:25:69:66:ad:72:7e:52:6c:50:c9:9c:d5:
9f:cc:f3:62:54:6c:a7:e8:a0:13:e7:20:ba:9c:bc:
f9:ae:b1:11:7b:2a:f0:32:f3:00:2e:e8:e7:1b:af:
49:4c:1a:47:c8:b3:c2:43:ec:eb:5d:3f:eb:56:d5:
4c:43:3c:11:4f:6e:04:0b:48:20:ad:19:f2:46:51:
f5:d1:85:b4:27:88:33:a6:3b:f8:6e:cc:9d:18:87:
0f:84:ca:36:f9:0f:0e:7f:12:c2:fd:3e:14:bd:92:
4d:4a:ca:64:2c:12:55:42:10:ef:e2:79:7a:34:06:
fb:9b:9a:8c:62:8b:c0:43:e9:fa:f8:f3:d6:ac:6b:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:3E:92:1C:6A:77:94:DA:02:A8:7C:78:BA:C7:84:DD:BF:2D:4F
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/HXA-khxqd5TaAqh8eLrHhN2_LU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.24.0/23
IPv6:
2a00:fbe0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:02:82:94:90:8a:38:fd:39:14:ec:26:37:97:06:3d:79:97:
a2:f5:90:45:f2:db:e4:2e:93:bd:e7:48:fd:70:21:c1:0a:9f:
c2:06:40:92:ae:22:64:74:ef:3d:23:bd:2a:c5:d4:0f:00:b0:
9d:6f:f3:83:52:7c:26:3c:cd:a7:14:7c:c3:cd:08:e7:5e:da:
2d:72:79:c0:b3:3d:b4:cd:32:c8:f8:09:0a:4b:55:0f:a2:28:
76:07:bf:11:3a:6c:72:c1:22:a8:ea:d9:be:4a:2a:68:01:c3:
4e:3e:ab:89:60:5b:94:30:d2:74:42:5a:8a:4a:73:8a:84:ec:
f3:c7:ae:29:7d:28:b0:86:8e:c4:1d:8c:a9:3d:be:f9:47:58:
e8:70:27:ce:11:8a:81:62:c6:55:3b:e5:1b:59:10:c1:6c:39:
7b:92:3a:8f:27:6d:1b:20:1f:bf:7c:4b:02:10:f4:59:1a:7b:
75:56:8c:d3:b3:3b:2f:b7:55:6f:56:39:cd:0f:35:7b:b6:e1:
1a:3e:c8:39:9b:b4:8a:1c:39:98:9e:2f:1e:3b:17:d0:b1:68:
09:d9:40:45:23:3d:b8:75:eb:61:70:cb:78:00:be:77:fe:89:
64:12:95:53:c5:80:5f:56:0f:e1:c6:67:07:a1:76:bf:0f:0e:
f9:63:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:32:05 2025 by rpki-client