Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/hzoYOWaigOBhVgvLojtyU6Dx7N4.roa
File: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (raw, json)
Hash identifier: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=
Subject key identifier: 87:3A:18:39:66:A2:80:E0:61:56:0B:CB:A2:3B:72:53:A0:F1:EC:DE
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 0194274874963C38EDEAC2D2B0CE4ACF2823
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/hzoYOWaigOBhVgvLojtyU6Dx7N4.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61423
IP address blocks: 193.109.52.0/24 maxlen: 24
193.109.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:74:96:3c:38:ed:ea:c2:d2:b0:ce:4a:cf:28:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873a183966a280e061560bcba23b7253a0f1ecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:33:bc:0c:4f:35:33:08:4d:5e:1a:69:6f:
4b:d6:9c:0f:56:38:49:48:b0:44:01:a6:8f:bc:5c:
a3:51:b8:77:72:9d:04:78:02:47:e3:82:db:17:1f:
0b:73:3d:fd:48:ea:d2:27:cc:75:d8:f1:96:06:9b:
df:01:46:84:30:59:cd:4b:f8:6e:24:c7:34:c9:93:
6c:ba:44:07:4d:01:58:49:02:38:4b:b8:e1:32:5f:
af:57:c1:f5:4e:62:3e:d3:89:c0:a9:25:19:0f:40:
16:29:b2:73:e0:34:39:b5:04:62:21:cb:70:2d:84:
48:e4:77:75:ae:50:86:7c:ae:ed:8e:be:29:ce:d7:
75:19:d7:da:c7:4d:63:b3:44:1b:f0:f4:ac:d0:cb:
81:b2:b7:75:32:dc:54:3e:40:bf:53:cc:ef:25:ee:
da:df:d3:bc:ab:10:76:37:e2:e7:7c:36:10:01:6a:
58:43:3a:05:10:d4:82:84:aa:09:fe:2c:70:da:dd:
ed:ed:05:0d:42:43:71:04:4a:8f:a4:49:e9:b2:7e:
40:90:4a:33:96:c0:f3:08:6a:ae:f7:8e:38:52:1c:
67:a9:e2:a1:69:5a:8d:5f:8b:3b:f8:9a:a5:4f:3e:
a1:8a:f6:8f:e5:dd:fb:66:96:dd:41:26:ac:f3:2f:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:18:39:66:A2:80:E0:61:56:0B:CB:A2:3B:72:53:A0:F1:EC:DE
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/hzoYOWaigOBhVgvLojtyU6Dx7N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.52.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c7:52:34:9e:a6:12:28:4d:62:30:66:4b:db:a9:6d:ba:ca:
f7:77:dc:f5:55:1b:eb:72:7f:c5:97:cd:06:c9:05:66:63:ca:
bb:59:b0:77:4c:56:3b:87:e7:6a:f8:d8:94:74:aa:70:a7:f2:
c3:7d:fb:a4:22:58:8e:4f:c0:dd:6b:f4:24:9b:28:c7:4c:14:
8c:02:3a:40:96:65:c3:cd:b3:69:80:84:67:ce:21:7b:21:92:
a7:d1:b4:b1:18:ac:6f:7e:e6:40:83:94:b2:24:14:b6:c3:a3:
49:a8:d4:63:0a:f0:25:24:07:a6:0b:8b:80:da:e7:8e:42:1f:
e0:51:07:26:16:8e:ba:c8:5e:f3:84:bf:e2:81:3c:fc:fe:18:
7f:2d:e3:58:ce:d1:6d:b6:be:f6:d2:0e:46:70:23:85:a2:ff:
e9:37:0e:af:5f:57:57:29:7a:fc:da:7d:b1:be:2a:47:5c:f9:
06:0e:e3:da:84:ff:87:94:86:46:01:65:9f:b3:d1:d7:0d:39:
5f:62:f3:5d:68:a9:5b:9c:56:4c:f6:44:72:fe:05:7b:de:7c:
1e:a4:66:34:57:9d:23:cd:80:aa:22:14:57:d9:fd:3c:5e:04:
5a:11:67:ee:c9:76:5c:a7:87:3b:3b:60:cc:b4:40:f6:8f:e0:
9f:59:aa:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSHSWPDjt6sLSsM5KzygjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4
YzFkMjIwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzNhMTgzOTY2YTI4MGUwNjE1NjBiY2JhMjNiNzI1M2EwZjFlY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWczvAxPNTMITV4aaW9L1pwPVjhJ
SLBEAaaPvFyjUbh3cp0EeAJH44LbFx8Lcz39SOrSJ8x12PGWBpvfAUaEMFnNS/hu
JMc0yZNsukQHTQFYSQI4S7jhMl+vV8H1TmI+04nAqSUZD0AWKbJz4DQ5tQRiIctw
LYRI5Hd1rlCGfK7tjr4pztd1Gdfax01js0Qb8PSs0MuBsrd1MtxUPkC/U8zvJe7a
39O8qxB2N+LnfDYQAWpYQzoFENSChKoJ/ixw2t3t7QUNQkNxBEqPpEnpsn5AkEoz
lsDzCGqu9444UhxnqeKhaVqNX4s7+JqlTz6hivaP5d37ZpbdQSas8y9aLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIc6GDlmooDgYVYLy6I7clOg8ezeMB8GA1UdIwQY
MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt
MjA3MTU0NmI3MGY5LzEvaHpvWU9XYWlnT0JoVmd2TG9qdHlVNkR4N040LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5
LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW00MA0G
CSqGSIb3DQEBCwUAA4IBAQAix1I0nqYSKE1iMGZL26ltusr3d9z1VRvrcn/Fl80G
yQVmY8q7WbB3TFY7h+dq+NiUdKpwp/LDffukIliOT8Dda/QkmyjHTBSMAjpAlmXD
zbNpgIRnziF7IZKn0bSxGKxvfuZAg5SyJBS2w6NJqNRjCvAlJAemC4uA2ueOQh/g
UQcmFo66yF7zhL/igTz8/hh/LeNYztFttr720g5GcCOFov/pNw6vX1dXKXr82n2x
vipHXPkGDuPahP+HlIZGAWWfs9HXDTlfYvNdaKlbnFZM9kRy/gV73nwepGY0V50j
zYCqIhRX2f08XgRaEWfuyXZcp4c7O2DMtED2j+CfWarJ
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:42 2025 by rpki-client