Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H0PxTknWzRS1wZePnG6xA3MrIuc.roa
File: H0PxTknWzRS1wZePnG6xA3MrIuc.roa (raw, json)
Hash identifier: FKxVY9aam1Tg4DGDeh5YBIbXu1S5dUvzF1ryfO/BTVc=
Subject key identifier: 1F:43:F1:4E:49:D6:CD:14:B5:C1:97:8F:9C:6E:B1:03:73:2B:22:E7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01968C91D8E96E77B8F845C43E87B90CE366
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H0PxTknWzRS1wZePnG6xA3MrIuc.roa
Signing time: Thu 01 May 2025 15:58:10 +0000
ROA not before: Thu 01 May 2025 15:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215314
IP address blocks: 176.53.172.0/24 maxlen: 24
176.53.173.0/24 maxlen: 24
176.53.174.0/24 maxlen: 24
176.53.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:91:d8:e9:6e:77:b8:f8:45:c4:3e:87:b9:0c:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 1 15:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f43f14e49d6cd14b5c1978f9c6eb103732b22e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:3c:9d:bd:e0:40:c7:05:9b:ab:12:85:49:
01:fa:03:af:f5:fa:24:f6:71:13:7c:ed:2e:ed:71:
60:8f:f9:9b:0a:b1:99:01:d6:a4:f9:62:7a:0f:93:
66:9a:45:7c:ed:20:cd:0d:bc:4f:34:9a:8e:e8:36:
04:4b:5e:ee:10:5d:b7:6c:b2:20:14:23:0b:b9:f3:
68:86:df:ab:36:ef:b8:ec:b5:49:1c:a3:10:01:9c:
66:fb:c6:05:b5:51:ba:fb:1f:84:ac:a3:d8:9d:f1:
63:2a:96:0a:9b:ad:f4:78:58:85:0b:44:7a:6b:f6:
f1:25:5e:e8:09:08:20:c9:e3:80:8a:b6:e4:01:f2:
85:c2:a7:7b:f2:ed:0b:ae:d5:02:23:b8:80:8c:51:
db:6b:e8:5c:71:0b:53:87:88:3e:53:16:e9:1b:97:
e7:85:63:5a:e6:23:7c:c4:40:d8:4e:23:38:3b:6d:
dc:44:e4:eb:49:33:ef:29:5c:d6:d0:2f:a7:3c:9c:
7f:a1:84:ff:17:69:bb:ec:63:9e:4e:04:7d:1f:da:
3f:a9:bd:c4:76:f1:da:f5:e4:42:ff:51:d9:39:da:
5c:8d:82:7c:9b:6e:7f:5f:80:4a:a4:75:0f:a8:a1:
ca:08:0d:76:f2:f4:06:27:8e:d6:b9:cd:43:3a:9f:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:F1:4E:49:D6:CD:14:B5:C1:97:8F:9C:6E:B1:03:73:2B:22:E7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H0PxTknWzRS1wZePnG6xA3MrIuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
10:9b:4d:28:44:fe:61:31:8e:51:5c:d5:12:78:d6:82:ff:62:
11:cf:dc:02:64:62:8b:a1:58:7e:89:25:8b:a5:81:e9:b8:4f:
ea:01:72:66:4b:74:92:8a:b2:9a:91:77:e6:a9:59:e4:49:d2:
de:64:b1:79:24:8e:bc:6a:0a:a0:7a:91:17:e3:44:45:30:57:
f4:5d:22:36:d1:f9:b7:5d:90:c9:89:0d:31:6f:ff:6d:35:7a:
b2:a6:53:f6:8b:6a:50:d6:ef:df:b1:11:f4:3e:e6:9f:d6:07:
3f:4d:4a:cd:15:13:cd:9f:fd:9e:bc:72:ca:a5:9e:9e:7f:dc:
03:58:e7:5d:d9:11:bb:39:5a:76:28:13:e4:43:4a:37:04:4a:
cb:53:24:2b:a1:1f:08:fa:33:83:45:9c:f3:9a:d9:5d:4e:bc:
a7:72:12:b4:77:77:1e:d7:a0:07:7c:9b:02:41:ac:64:8f:ea:
67:de:66:51:92:92:2a:c0:d7:e9:9b:b4:ef:7a:25:f7:bf:3d:
78:a1:23:f9:c7:9a:34:e3:d3:ff:18:2b:1e:f6:78:9d:06:f3:
51:e0:75:6a:e6:ce:1f:26:04:2e:0d:de:3c:63:ca:61:d9:84:
4a:6e:d4:fc:8e:9d:96:42:7e:90:d4:48:db:fc:33:78:e9:48:
00:c3:4b:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaMkdjpbne4+EXEPoe5DONmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNTAxMTU1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQzZjE0ZTQ5ZDZjZDE0YjVjMTk3OGY5YzZlYjEwMzczMmIyMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZk8nb3gQMcFm6sShUkB+gOv9fok
9nETfO0u7XFgj/mbCrGZAdak+WJ6D5NmmkV87SDNDbxPNJqO6DYES17uEF23bLIg
FCMLufNoht+rNu+47LVJHKMQAZxm+8YFtVG6+x+ErKPYnfFjKpYKm630eFiFC0R6
a/bxJV7oCQggyeOAirbkAfKFwqd78u0LrtUCI7iAjFHba+hccQtTh4g+UxbpG5fn
hWNa5iN8xEDYTiM4O23cROTrSTPvKVzW0C+nPJx/oYT/F2m77GOeTgR9H9o/qb3E
dvHa9eRC/1HZOdpcjYJ8m25/X4BKpHUPqKHKCA128vQGJ47Wuc1DOp/AzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9D8U5J1s0UtcGXj5xusQNzKyLnMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvSDBQeFRrbld6UlMxd1plUG5HNnhBM01ySXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsDWsMA0G
CSqGSIb3DQEBCwUAA4IBAQAQm00oRP5hMY5RXNUSeNaC/2IRz9wCZGKLoVh+iSWL
pYHpuE/qAXJmS3SSirKakXfmqVnkSdLeZLF5JI68agqgepEX40RFMFf0XSI20fm3
XZDJiQ0xb/9tNXqyplP2i2pQ1u/fsRH0Puaf1gc/TUrNFRPNn/2evHLKpZ6ef9wD
WOdd2RG7OVp2KBPkQ0o3BErLUyQroR8I+jODRZzzmtldTrynchK0d3ce16AHfJsC
Qaxkj+pn3mZRkpIqwNfpm7TveiX3vz14oSP5x5o049P/GCse9nidBvNR4HVq5s4f
JgQuDd48Y8ph2YRKbtT8jp2WQn6Q1Ejb/DN46UgAw0u7
-----END CERTIFICATE-----
Generated at Sun May 11 15:32:40 2025 by rpki-client