Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/HCoi5HM2CS9n54Michmh4KOI3ek.roa
File: HCoi5HM2CS9n54Michmh4KOI3ek.roa (raw, json)
Hash identifier: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=
Subject key identifier: 1C:2A:22:E4:73:36:09:2F:67:E7:83:22:72:19:A1:E0:A3:88:DD:E9
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019427B6657F51A2F312EB202C73699D5ABE
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/HCoi5HM2CS9n54Michmh4KOI3ek.roa
Signing time: Thu 02 Jan 2025 15:50:52 +0000
ROA not before: Thu 02 Jan 2025 15:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58324
IP address blocks: 5.100.144.0/21 maxlen: 21
185.150.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:65:7f:51:a2:f3:12:eb:20:2c:73:69:9d:5a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c2a22e47336092f67e783227219a1e0a388dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:69:2f:b8:79:d9:01:ad:7f:69:27:6c:4c:
85:ba:9d:5c:b6:ff:67:10:dd:45:db:0d:64:a5:3b:
80:4e:87:6e:e3:f0:1f:ab:86:59:b5:97:1e:e8:02:
2a:41:be:a7:34:a9:5e:96:5a:11:f1:9b:af:2c:37:
5c:fc:fe:7a:5c:23:7b:bc:01:c0:2d:ee:e4:67:83:
59:4c:61:dd:09:f8:6d:2b:b0:af:49:17:e0:0d:5f:
1e:92:06:84:f8:71:77:38:67:ff:bf:c1:56:28:fd:
80:44:e8:33:a8:23:bf:2c:44:d9:02:c0:0f:63:8c:
bc:61:dd:1b:cf:58:c6:95:37:77:49:fd:48:19:08:
de:30:e9:09:37:93:b7:ef:2e:46:ab:6a:d5:80:f9:
14:a5:b2:16:0c:c5:70:4f:53:89:69:e4:da:83:32:
64:df:5e:9f:80:65:a8:b7:96:b6:68:0d:75:50:19:
51:13:ac:9f:c5:c5:c9:0a:2c:2a:2f:42:37:c4:5c:
48:b7:b7:3f:55:23:6a:f6:e6:f8:1c:cb:41:67:2e:
b7:2c:7d:66:28:f3:6a:c4:a3:70:5d:b4:2f:21:5a:
b9:0b:86:64:42:e2:dc:44:9d:97:dc:60:2b:1a:27:
30:ac:54:ad:3a:e5:b5:75:a4:e7:19:30:09:e2:d2:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:22:E4:73:36:09:2F:67:E7:83:22:72:19:A1:E0:A3:88:DD:E9
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/HCoi5HM2CS9n54Michmh4KOI3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.144.0/21
185.150.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c4:13:6f:1e:64:dd:ed:a0:16:7c:97:9b:22:ab:4d:a9:fd:
54:53:0c:a7:99:ab:17:8d:5f:cb:eb:03:82:09:20:9e:17:e3:
e9:6e:4a:a0:eb:06:68:94:59:17:49:1e:f6:09:dd:2f:bf:10:
66:a5:12:f3:73:9f:47:ac:02:76:12:1a:fc:ab:57:8b:75:fa:
5e:c1:a2:8c:7a:fa:e3:b6:df:8d:31:46:b1:52:dc:5e:93:00:
34:26:4f:9e:e6:e4:3d:90:04:81:da:e3:ae:0b:12:3b:ad:cd:
01:d2:71:e9:fb:60:94:a9:d2:8e:e9:31:3a:68:66:8b:42:d7:
3c:5e:20:32:30:70:0d:70:a8:b0:8c:ec:80:2e:9d:1f:27:d5:
c7:b1:b6:89:20:14:f2:01:5b:4f:bb:20:44:b4:8c:82:06:b6:
98:50:6c:3a:36:8d:c1:35:ff:19:06:87:d6:e2:d9:c4:45:be:
67:a6:d3:24:30:9c:06:18:34:96:43:4f:ae:0e:54:d6:e1:6f:
65:03:60:99:ad:e2:68:56:56:ef:f0:08:15:d2:ff:1e:19:ca:
f9:55:59:4e:ee:84:5a:bf:08:c7:d4:ee:4b:5e:e8:0e:3f:2c:
14:d8:05:7c:3c:fd:54:ff:16:0b:73:00:56:23:b3:aa:22:f1:
88:bd:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:34 2025 by rpki-client