Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa
File: hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa (raw, json)
Hash identifier: zbvVnLL4EUKhuAlyrvHCZpnuafPuDIGGmDdwOuvfDX8=
Subject key identifier: 85:B8:4F:37:81:91:58:5D:4A:87:60:BF:64:6B:34:DB:03:03:ED:1C
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 0194244482477E75BF65C3BFC16DB840F8E0
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12731
IP address blocks: 62.201.160.0/19 maxlen: 24
185.34.67.0/24 maxlen: 24
185.53.220.0/22 maxlen: 24
213.128.128.0/19 maxlen: 24
2001:868::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:82:47:7e:75:bf:65:c3:bf:c1:6d:b8:40:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85b84f378191585d4a8760bf646b34db0303ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:12:cc:99:1d:54:fa:a4:6b:71:3c:16:7f:e5:
ef:51:62:eb:64:97:da:3a:87:03:b1:15:8b:d0:f4:
de:4c:e3:4e:47:19:63:26:4b:96:b8:ad:d2:a5:55:
ef:d2:7c:ab:3d:fa:95:a0:56:6a:10:e5:09:5b:83:
f3:5c:ca:3c:6b:93:3f:ef:3d:54:d1:98:4b:58:2b:
65:91:4d:b9:05:33:4d:2a:a5:4d:c3:d3:83:9b:a8:
d3:e0:6e:69:14:54:32:6e:84:8f:41:69:d3:7d:77:
31:10:a0:8b:26:c2:fd:43:91:43:2c:bb:0d:bf:76:
62:c2:71:6e:92:12:4d:5d:21:59:79:26:68:b9:2a:
9e:42:14:b1:47:d3:fa:27:fe:6b:26:8f:92:b8:ae:
e6:8a:cf:d0:24:c8:8c:d7:5a:e8:41:e0:7d:4f:70:
6b:b1:e1:2e:76:9e:96:7d:be:d1:bd:01:7c:03:80:
6c:c9:50:99:2f:61:d9:21:1a:72:76:7d:99:da:c1:
57:52:6e:f7:ad:fc:06:13:ee:c5:1f:c5:25:16:9c:
d0:5e:53:a9:d8:93:06:18:49:5a:0b:31:46:67:b7:
1d:b7:2f:62:45:7f:c7:d5:76:f9:d9:9b:a5:f5:c3:
29:c2:8b:ec:9e:7d:12:f6:c7:71:9f:26:df:e7:75:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:4F:37:81:91:58:5D:4A:87:60:BF:64:6B:34:DB:03:03:ED:1C
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.160.0/19
185.34.67.0/24
185.53.220.0/22
213.128.128.0/19
IPv6:
2001:868::/29
Signature Algorithm: sha256WithRSAEncryption
1b:f3:a1:48:9f:b4:1e:ff:8c:ac:2d:17:e0:6d:30:56:ef:fb:
28:23:1f:04:04:e7:2c:ed:1f:d4:9f:be:77:1c:c1:1a:90:b4:
c7:c7:c4:b1:53:98:da:f4:25:40:92:c6:b8:1c:76:02:e9:60:
15:b3:ef:f8:6c:d3:ef:f1:03:12:38:9e:e0:de:f6:33:48:b9:
7e:25:9a:be:02:22:90:02:64:ac:53:87:01:5a:94:50:70:c0:
0f:e2:f1:5a:19:6b:28:75:82:76:03:54:0f:67:bd:88:65:ab:
ec:fa:02:5b:11:a6:7d:b8:e7:d2:26:75:a0:c2:fd:31:65:99:
8d:cb:a3:0d:33:52:6c:34:d3:74:c1:73:03:ba:eb:90:f7:d9:
26:53:ae:56:eb:63:8d:51:12:e0:85:a1:36:be:0a:d7:d7:a6:
1f:16:6b:83:b7:64:97:8f:f4:75:76:f8:fd:49:b5:7c:3c:55:
3e:76:9b:e2:38:2b:8e:50:e2:fb:6f:e3:d9:f9:b1:60:17:a7:
47:66:c4:79:5c:07:73:9b:c8:b1:80:c4:1f:eb:a1:c2:05:78:
1f:de:b9:af:d4:d6:5c:75:5f:0f:cf:f5:7c:7a:ed:6f:2e:86:
fb:50:c7:38:ca:21:6a:ea:c4:ba:04:99:01:fd:67:6a:b0:88:
9a:0b:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:58 2025 by rpki-client