Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hJUOwaTvP74lE8UHTrGlvy92Ql0.roa
File: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (raw, json)
Hash identifier: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=
Subject key identifier: 84:95:0E:C1:A4:EF:3F:BE:25:13:C5:07:4E:B1:A5:BF:2F:76:42:5D
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 0196676230C8A0E778F13C342E7C5F93CDFA
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hJUOwaTvP74lE8UHTrGlvy92Ql0.roa
Signing time: Thu 24 Apr 2025 10:40:10 +0000
ROA not before: Thu 24 Apr 2025 10:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12365
IP address blocks: 81.95.224.0/20 maxlen: 20
81.95.224.96/27 maxlen: 27
81.95.224.192/26 maxlen: 26
81.95.234.128/28 maxlen: 28
81.95.234.192/26 maxlen: 26
82.215.66.0/23 maxlen: 23
82.215.68.0/23 maxlen: 23
82.215.72.0/22 maxlen: 22
82.215.77.0/24 maxlen: 24
82.215.78.0/23 maxlen: 23
82.215.80.0/22 maxlen: 22
82.215.85.0/24 maxlen: 24
82.215.86.0/23 maxlen: 23
82.215.88.0/21 maxlen: 21
82.215.88.0/22 maxlen: 22
82.215.92.0/22 maxlen: 22
82.215.112.0/22 maxlen: 22
82.215.116.0/22 maxlen: 22
82.215.120.0/22 maxlen: 22
82.215.124.0/22 maxlen: 22
89.146.64.0/18 maxlen: 18
89.146.64.0/22 maxlen: 22
89.146.68.0/22 maxlen: 22
89.146.72.0/22 maxlen: 22
89.146.76.0/22 maxlen: 22
89.146.80.0/22 maxlen: 22
89.146.84.0/22 maxlen: 22
89.146.88.0/22 maxlen: 22
89.146.92.0/22 maxlen: 22
89.146.96.0/22 maxlen: 22
89.146.100.0/22 maxlen: 22
89.146.104.0/22 maxlen: 22
89.146.108.0/22 maxlen: 22
89.146.112.0/22 maxlen: 22
89.146.116.0/22 maxlen: 22
89.146.120.0/22 maxlen: 22
89.146.124.0/22 maxlen: 22
185.78.136.0/22 maxlen: 22
2a00:8840::/32 maxlen: 32
2a00:8840:c000::/36 maxlen: 36
2a00:8840:d000::/36 maxlen: 36
2a00:8840:e000::/36 maxlen: 36
2a00:8840:f000::/36 maxlen: 36
2a00:8841::/32 maxlen: 32
2a00:8842::/32 maxlen: 32
2a00:8843::/32 maxlen: 32
2a00:8844::/32 maxlen: 32
2a00:8845::/32 maxlen: 32
2a00:8846::/32 maxlen: 32
2a00:8847::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:62:30:c8:a0:e7:78:f1:3c:34:2e:7c:5f:93:cd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Apr 24 10:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84950ec1a4ef3fbe2513c5074eb1a5bf2f76425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:23:08:e1:b0:64:af:96:48:78:66:50:cd:
3a:93:cc:40:56:a3:72:c6:ee:20:c4:e5:04:5a:7b:
ee:b2:3f:3b:61:49:ec:bc:8a:bb:0f:4d:d7:de:79:
ae:b5:e2:7a:77:93:a2:e0:49:f5:12:92:d5:c2:ae:
45:c8:10:87:26:8e:17:e7:69:35:46:23:eb:f5:95:
6a:8c:3b:b5:e6:ef:18:2e:94:22:be:f3:38:d8:f8:
36:b3:10:47:e3:d0:8b:9f:6c:ac:78:29:2e:8e:0f:
c9:28:d2:13:95:79:90:63:b2:ef:18:59:96:02:3a:
16:a1:da:64:b0:4e:ab:dd:61:ee:e4:22:81:a4:0f:
bf:01:ba:8c:7b:3f:1c:cb:2f:be:70:2c:0d:15:12:
c0:ef:ef:a1:33:cc:81:09:c0:1e:f8:61:1c:08:41:
3b:22:4b:6b:e5:77:7d:60:bd:e3:b3:b4:9f:b7:8c:
f7:56:48:f3:70:56:f5:1b:7c:db:56:ba:4d:5b:14:
d0:e0:a7:ec:4c:75:74:13:e7:8d:ff:5c:ce:19:ad:
1f:11:b4:74:7b:3f:45:e8:b9:c1:bb:82:f9:b4:c4:
fd:c7:0a:e4:5b:c4:5e:c4:05:6a:bc:6c:1b:1f:9b:
0a:e8:cc:f5:51:ef:f3:ae:7f:b1:b2:34:7d:7c:34:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:0E:C1:A4:EF:3F:BE:25:13:C5:07:4E:B1:A5:BF:2F:76:42:5D
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hJUOwaTvP74lE8UHTrGlvy92Ql0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.224.0/20
82.215.66.0-82.215.69.255
82.215.72.0/22
82.215.77.0-82.215.83.255
82.215.85.0-82.215.95.255
82.215.112.0/20
89.146.64.0/18
185.78.136.0/22
IPv6:
2a00:8840::/29
Signature Algorithm: sha256WithRSAEncryption
2c:9f:06:6c:68:fd:c2:44:10:c9:4d:6d:7a:7e:1b:35:9e:09:
3c:b0:71:80:70:f4:36:7b:f6:7f:3c:e6:f4:ef:ab:81:84:fc:
09:c3:fa:28:5b:16:34:6e:84:da:21:6c:48:d2:06:01:1a:b8:
93:aa:f3:be:ed:16:4b:2a:98:22:66:ed:94:ad:64:f7:7c:cf:
41:c8:ef:9d:e7:30:9e:32:4d:97:6f:ff:34:6b:27:fb:21:14:
17:93:98:94:df:17:49:e3:06:89:2c:5a:5d:31:ad:ee:c0:76:
53:11:3b:c6:e4:ea:bd:65:43:0d:8d:79:e2:5b:8d:7e:18:f8:
07:0d:ff:3e:de:6e:35:52:79:fa:ed:9d:8e:99:66:cc:a3:75:
20:1a:81:cd:4d:1d:2c:41:18:ca:e5:43:7c:e9:44:9c:49:af:
c1:e0:af:80:ff:02:b0:72:b8:73:e3:4a:33:2e:f2:a1:bf:19:
13:c1:4c:16:3e:c2:34:1a:3a:0b:07:b4:be:1b:1b:60:d0:8b:
de:10:7a:ee:29:e5:10:e6:26:ca:23:8f:f0:d2:d3:d6:42:22:
fb:cf:05:32:f8:5e:b7:0f:40:3e:79:0c:dc:88:d5:11:02:4a:
06:0c:86:3d:9b:01:87:70:67:f7:25:37:08:9a:e2:87:bf:c4:
e6:f9:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:12 2025 by rpki-client