Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/K45e82x9WOXI8E3rbiZhpm6Y1c8.roa
File: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (raw, json)
Hash identifier: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=
Subject key identifier: 2B:8E:5E:F3:6C:7D:58:E5:C8:F0:4D:EB:6E:26:61:A6:6E:98:D5:CF
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 01942826004B41F3B1C704D2F316F52EC78A
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/K45e82x9WOXI8E3rbiZhpm6Y1c8.roa
Signing time: Thu 02 Jan 2025 17:52:46 +0000
ROA not before: Thu 02 Jan 2025 17:52:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209551
IP address blocks: 5.154.160.0/21 maxlen: 32
185.74.216.0/22 maxlen: 32
185.146.204.0/22 maxlen: 32
185.192.28.0/22 maxlen: 32
195.181.252.0/23 maxlen: 32
2a11:8040::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:00:4b:41:f3:b1:c7:04:d2:f3:16:f5:2e:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Jan 2 17:52:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8e5ef36c7d58e5c8f04deb6e2661a66e98d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:1b:57:33:48:8f:12:b1:3f:bd:a7:47:3d:
9d:45:0d:d5:ed:4c:0b:87:47:06:c6:9d:45:c6:04:
81:aa:6d:c9:a6:a7:e0:84:c1:14:65:10:4c:fc:22:
0f:ac:8f:b7:d2:6f:ec:a8:b4:83:ab:ee:83:3e:14:
d5:f8:1d:14:f3:13:40:d5:c8:5f:5b:81:58:21:3e:
35:59:84:7d:35:41:c9:39:f3:10:88:bb:eb:c0:87:
15:cd:8c:8c:78:23:5a:6a:ba:8c:e3:fa:26:4e:5f:
9c:64:02:ef:00:bf:de:6b:67:e1:fb:f2:e5:ea:a3:
48:52:47:bb:75:81:8c:a4:1d:e3:b2:2b:08:1a:05:
bc:de:20:a2:64:04:23:ae:59:dc:01:16:d1:9c:1c:
01:59:c6:22:74:46:c7:d5:57:8c:ea:fa:a4:66:f2:
dd:98:f0:2b:5b:bb:5b:5a:1a:b0:67:b6:a0:85:86:
df:e5:9c:23:e8:5c:e6:7e:c9:c5:e9:49:48:14:e4:
7e:2a:81:f4:de:ba:fe:16:ec:c2:0e:00:29:ff:c7:
62:76:cc:ed:aa:a0:8e:f7:57:7e:00:7f:36:de:2b:
fb:b1:97:e2:ff:00:a4:a6:f9:b6:38:e5:a5:bd:35:
75:92:c0:72:3d:59:6f:97:0e:e4:1e:b1:c6:8d:53:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:5E:F3:6C:7D:58:E5:C8:F0:4D:EB:6E:26:61:A6:6E:98:D5:CF
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/K45e82x9WOXI8E3rbiZhpm6Y1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.160.0/21
185.74.216.0/22
185.146.204.0/22
185.192.28.0/22
195.181.252.0/23
IPv6:
2a11:8040::/29
Signature Algorithm: sha256WithRSAEncryption
2d:30:39:60:79:9e:08:e0:c5:b3:f4:99:fa:78:2d:ce:de:db:
de:f9:13:f7:f1:ae:79:5e:44:f8:eb:89:59:d0:16:6e:6e:53:
cc:d4:c4:51:d4:26:59:5f:6c:fd:41:52:99:d1:45:dc:93:37:
12:79:80:43:29:ff:06:af:12:ab:40:a2:c6:ae:3e:d1:b3:49:
9d:d3:21:36:13:03:a9:eb:57:68:20:68:0d:ce:46:65:2b:46:
c6:e0:45:44:ae:b0:85:19:71:e6:a2:23:53:d8:57:76:69:d7:
ae:32:5c:82:40:0e:2e:0e:e9:e9:d4:39:06:ce:93:cc:5d:10:
71:d4:cb:7c:7c:ad:45:01:f9:5a:87:25:86:e9:55:66:e3:38:
99:ec:e3:cc:49:09:0c:c5:f2:cb:17:3b:75:cc:ed:6c:e6:30:
ab:12:f0:66:03:6b:ce:cd:f1:88:c0:7e:9e:71:f3:34:b8:04:
66:97:91:fe:07:e4:e9:80:cc:b3:c3:a0:c3:41:7b:a1:d7:dd:
ca:06:ff:f1:7b:52:c1:f9:61:85:43:9b:6f:94:6a:60:0d:62:
de:42:fe:d7:1a:f0:e1:0f:df:94:b6:b8:67:82:0e:08:2a:44:
f4:b6:ae:57:84:32:23:3a:72:8b:10:6c:00:a7:bd:fe:87:d5:
ef:cd:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:06:38 2025 by rpki-client