Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa
File: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (raw, json)
Hash identifier: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=
Subject key identifier: 84:13:F5:74:53:8B:54:1B:ED:E7:14:6A:9F:E5:0F:91:4B:CE:C1:7D
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA9743C783C79C90E36AC626DCA01
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59930
IP address blocks: 91.108.12.0/22 maxlen: 22
149.154.172.0/22 maxlen: 22
2001:b28:f23d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a9:74:3c:78:3c:79:c9:0e:36:ac:62:6d:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8413f574538b541bede7146a9fe50f914bcec17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:cb:21:f4:3a:84:a7:f0:c3:59:34:82:54:
f7:18:49:59:df:5a:ba:3f:04:cc:ea:c6:9c:ba:03:
19:a5:83:06:f1:62:46:5a:27:c8:f8:6a:cc:48:9a:
fc:98:e7:c6:7b:87:e7:51:44:10:9b:21:5b:74:c4:
d7:6e:8f:c1:ab:ca:d1:66:d6:69:bc:d6:d6:8f:27:
1f:3a:3a:bf:e7:0c:72:8c:53:0f:42:0c:5d:95:c6:
7c:82:5e:be:ce:26:dc:04:1c:76:d0:4c:35:06:02:
08:0b:a3:6e:54:c2:ec:a1:81:b9:66:da:36:d2:cd:
a7:ad:0a:12:5d:f6:f5:71:7d:93:3e:b6:c1:87:12:
c0:c3:7c:59:36:9f:9e:6d:39:de:bb:7d:67:3f:da:
ad:b8:1f:ca:90:f3:5c:17:76:ba:ef:8c:a4:03:9c:
76:a2:ba:2e:e2:51:8f:db:0d:98:92:0d:e4:70:89:
0b:44:ee:bf:11:54:6b:42:e3:82:bb:38:48:f4:3c:
f8:0c:d7:bd:38:b0:cd:95:4c:31:fc:76:ad:01:a4:
54:bc:a3:2d:dc:41:f2:5a:ad:ab:28:4e:30:69:a1:
15:a5:aa:78:6b:5f:fa:dc:e8:df:92:ec:59:ef:ab:
e7:1d:c5:09:2a:cb:ec:b2:3e:23:45:d1:2a:c6:f7:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:F5:74:53:8B:54:1B:ED:E7:14:6A:9F:E5:0F:91:4B:CE:C1:7D
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.12.0/22
149.154.172.0/22
IPv6:
2001:b28:f23d::/48
Signature Algorithm: sha256WithRSAEncryption
04:b0:ff:9c:43:2e:d9:65:7c:af:93:05:a7:2c:55:62:d1:d8:
a2:71:1c:c5:02:f3:86:1a:35:8e:eb:dd:90:1a:7e:07:40:3f:
81:29:be:ed:96:dc:2e:a1:13:36:48:0e:6c:2b:a1:e1:a3:10:
6e:be:a3:41:86:ad:c8:75:8f:c6:04:4c:40:d9:bd:6a:54:02:
5f:bf:50:f8:90:4b:92:c8:ed:87:74:62:4b:b6:6f:7e:34:f9:
55:ca:5d:d2:3f:52:f0:d4:20:96:17:e0:b2:b8:67:ca:5a:29:
49:49:59:4d:53:28:fb:4b:90:91:7b:14:13:21:61:d4:76:67:
b9:1b:5b:30:4a:78:eb:97:70:4d:3a:9d:73:18:86:67:15:7d:
11:b6:63:af:f2:63:a5:a4:3f:23:63:82:06:eb:09:2c:77:8b:
ec:3f:5e:8c:64:c9:f5:ae:f7:2d:19:53:95:6a:24:fe:34:4b:
72:cb:8d:06:d7:8d:7a:b5:dd:e9:d4:02:52:e1:5d:ed:b0:e5:
6e:7f:f1:d5:6c:37:1b:d7:3d:4a:e6:6a:a4:83:9a:5c:6e:f5:
9b:c9:ec:d4:35:1a:c7:a0:ee:e5:df:16:94:5e:aa:93:8d:36:
8d:29:a8:ea:a8:77:2f:3c:51:fd:b7:79:86:14:dc:cc:5e:ce:
63:72:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:14:05 2025 by rpki-client