Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HzB5_mrhdxqK3tHemRYqJUrCWoc.roa
File: HzB5_mrhdxqK3tHemRYqJUrCWoc.roa (raw, json)
Hash identifier: c97N2Ld9NhkRwBwjJDypJuWc2rnmxKN1z4mc5oDIaFc=
Subject key identifier: 1F:30:79:FE:6A:E1:77:1A:8A:DE:D1:DE:99:16:2A:25:4A:C2:5A:87
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01979211190295A1474B61F21BE20FA33D54
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HzB5_mrhdxqK3tHemRYqJUrCWoc.roa
Signing time: Sat 21 Jun 2025 10:38:03 +0000
ROA not before: Sat 21 Jun 2025 10:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 45.88.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:11:19:02:95:a1:47:4b:61:f2:1b:e2:0f:a3:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 21 10:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f3079fe6ae1771a8aded1de99162a254ac25a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:3c:9f:10:32:4f:57:54:56:9e:52:43:6a:
dd:89:31:0b:d9:d4:b0:48:2e:f2:f1:07:12:1c:f1:
ba:cf:28:99:01:9b:07:37:f3:fc:0d:af:7a:51:fa:
86:1b:1b:7d:5b:d7:52:20:0d:4b:c1:8f:ff:1a:4f:
96:15:74:b9:68:34:bf:71:a0:f3:7c:7c:1c:0c:a1:
ba:03:9b:72:ba:82:63:85:61:fb:f7:96:3b:31:53:
8f:f9:ec:df:80:7a:fe:c4:a5:d8:47:42:a1:0e:f3:
16:8d:7e:7c:46:0c:70:99:b2:1e:6e:fa:0f:a0:d3:
98:4a:6f:99:9c:df:19:9f:af:8b:19:c2:c1:7e:55:
47:a2:dc:68:0e:0d:40:d3:f1:23:9e:3b:de:db:15:
8a:3d:2c:49:85:f9:ac:77:34:18:4a:17:5a:a0:33:
55:41:3a:f4:14:03:1f:47:aa:26:43:71:bd:d2:f3:
73:64:f8:62:98:af:b0:95:f2:4a:9d:50:81:8f:42:
b1:52:84:bf:9e:21:98:70:96:7c:98:7e:32:85:1b:
38:f3:b6:e0:c1:8d:02:bc:dd:2b:6b:51:fe:33:c2:
89:b0:e4:b1:1b:b5:44:35:1a:53:98:e0:a5:96:5e:
fe:c0:77:3b:7c:4b:4f:64:e6:45:2f:59:92:80:ac:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:30:79:FE:6A:E1:77:1A:8A:DE:D1:DE:99:16:2A:25:4A:C2:5A:87
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HzB5_mrhdxqK3tHemRYqJUrCWoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
Signature Algorithm: sha256WithRSAEncryption
79:4e:a6:5c:ad:83:69:5c:2d:d4:11:e5:72:6e:9f:1a:41:6a:
22:7e:a7:05:a8:d6:28:51:1f:4d:5a:de:91:2d:17:9e:ea:a8:
1d:db:dc:93:d2:ea:87:16:94:df:88:49:5c:e6:7b:84:fd:69:
9d:05:70:0c:3d:be:7f:5a:c4:ac:7f:5f:89:b1:9f:ef:e9:0f:
bb:4e:d2:2c:e3:dc:e7:52:db:80:7e:bf:1e:2f:50:7e:19:4b:
0c:19:fe:28:be:4e:3a:af:63:ee:c8:53:40:f1:fd:04:98:3e:
ec:51:2b:5e:c4:fa:5c:51:6b:0e:65:c3:5f:ba:5b:c9:ac:ea:
84:30:b0:bb:a8:ba:27:62:8c:94:33:09:e9:c5:cb:6b:5b:6e:
16:59:28:15:94:7d:05:f9:b0:0b:ce:62:34:20:bd:5f:7a:73:
d6:94:99:97:e2:a7:1c:7d:75:f0:93:6c:e4:63:eb:e2:4a:2a:
b9:21:8f:23:07:48:66:ae:e0:98:e7:e7:3f:28:9a:4a:cf:b2:
d1:0f:e5:3c:76:2c:e8:37:32:a9:af:72:92:5d:7c:cf:1e:95:
63:94:d5:4d:84:35:30:98:0e:bd:21:1b:ad:7b:57:73:92:b7:
63:a1:03:15:99:64:b8:1e:5a:59:a0:4a:58:09:a8:82:87:46:
de:c4:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:03:51 2025 by rpki-client