Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/H9YsoSVqujSzIl1jC8bNi8oWfWg.roa
File: H9YsoSVqujSzIl1jC8bNi8oWfWg.roa (raw, json)
Hash identifier: 0dy9ycp0QLf3d25OkGOB0YPWnPgDY1tgsWVu7Y1vx58=
Subject key identifier: 1F:D6:2C:A1:25:6A:BA:34:B3:22:5D:63:0B:C6:CD:8B:CA:16:7D:68
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239845EA686BC1DE896D59C4384E1C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/H9YsoSVqujSzIl1jC8bNi8oWfWg.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.248.134.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:98:45:ea:68:6b:c1:de:89:6d:59:c4:38:4e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd62ca1256aba34b3225d630bc6cd8bca167d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:c4:ad:f6:20:a6:44:59:d1:b1:31:0c:c2:
6e:1b:ff:16:21:cb:8a:43:82:ed:a5:6f:32:31:65:
96:6d:31:3d:a4:a4:03:3e:23:14:03:02:98:cb:39:
0b:3a:39:01:7d:9e:4e:6c:5a:9d:5b:e7:76:50:ee:
f7:6d:17:46:c4:b0:12:06:02:61:14:dd:1e:eb:c9:
7f:5f:e6:24:98:b6:80:60:a5:88:66:71:05:36:06:
4d:99:9c:d6:67:bb:9b:f8:1a:07:6e:a3:0c:79:8d:
33:bc:2d:a9:5f:01:55:cb:2e:4c:a1:34:95:cb:09:
62:b0:c0:bc:23:4c:80:a3:65:7e:ed:4c:fd:fd:05:
fc:de:67:0a:61:4d:6b:55:6e:4d:b8:83:b5:a8:32:
9e:3a:a0:95:94:03:92:b5:fe:c2:50:0e:ef:a9:80:
21:78:3b:79:fd:e0:bc:32:6e:ac:6d:05:5f:9f:fa:
d7:c8:23:f4:24:ae:3a:91:d9:c3:a0:00:c3:a9:40:
a1:ad:05:3b:13:b1:19:5a:1d:a9:56:b9:6b:a0:79:
f6:69:cd:92:20:a2:74:81:35:6e:b0:ca:a4:a8:91:
76:ff:f3:39:c8:5f:91:55:9b:89:1b:35:25:77:30:
a7:dc:a2:46:f2:92:68:23:a3:c3:13:87:d6:98:98:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:2C:A1:25:6A:BA:34:B3:22:5D:63:0B:C6:CD:8B:CA:16:7D:68
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/H9YsoSVqujSzIl1jC8bNi8oWfWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f6:34:14:a0:6c:8b:79:42:0b:78:59:8b:a3:e5:97:64:96:
82:f6:de:5e:54:f0:85:26:9f:32:27:f6:5f:f0:04:4d:eb:74:
0d:eb:b0:7b:d2:9a:fa:58:3e:e4:df:3d:59:ab:d8:dd:d7:75:
ae:3d:d7:f7:8a:66:91:63:93:88:14:db:8d:1e:4d:7c:74:a6:
0c:34:d3:f3:6f:0a:f5:31:1d:d5:96:a0:3d:38:7e:95:ff:f0:
15:ad:30:ba:09:7c:26:16:04:ad:03:5a:c7:4c:d4:84:57:eb:
b1:27:ce:be:1d:c9:a5:3e:42:a1:43:84:0e:9b:29:d0:b5:90:
cd:e6:ef:88:96:2c:4e:ec:fd:c1:67:0d:52:a6:0c:3b:86:f5:
9f:6e:1a:6c:41:3f:10:b4:82:73:37:ca:00:74:d2:2a:2f:9b:
ab:2a:c5:06:6f:ea:68:fc:dc:16:6e:f0:03:52:90:b8:44:94:
48:c5:3a:bd:47:6e:b0:0c:0b:68:06:34:af:6b:cb:54:3c:d9:
a1:47:78:f5:90:67:01:a1:4e:d6:d7:b8:6f:eb:27:0b:79:94:
ba:f4:b6:22:8f:a9:49:60:bd:22:60:e3:0d:c5:1c:63:dc:4e:
4a:01:01:a2:6b:e6:21:d7:e3:05:64:75:8f:3c:e0:d0:60:5b:
26:3a:19:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI5hF6mhrwd6JbVnEOE4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjUwMTAyMTc1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQ2MmNhMTI1NmFiYTM0YjMyMjVkNjMwYmM2Y2Q4YmNhMTY3ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQPErfYgpkRZ0bExDMJuG/8WIcuK
Q4LtpW8yMWWWbTE9pKQDPiMUAwKYyzkLOjkBfZ5ObFqdW+d2UO73bRdGxLASBgJh
FN0e68l/X+YkmLaAYKWIZnEFNgZNmZzWZ7ub+BoHbqMMeY0zvC2pXwFVyy5MoTSV
ywlisMC8I0yAo2V+7Uz9/QX83mcKYU1rVW5NuIO1qDKeOqCVlAOStf7CUA7vqYAh
eDt5/eC8Mm6sbQVfn/rXyCP0JK46kdnDoADDqUChrQU7E7EZWh2pVrlroHn2ac2S
IKJ0gTVusMqkqJF2//M5yF+RVZuJGzUldzCn3KJG8pJoI6PDE4fWmJh4BQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB/WLKElaro0syJdYwvGzYvKFn1oMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvSDlZc29TVnF1alN6SWwxakM4Yk5pOG9XZldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iGAwQA
V/iPMA0GCSqGSIb3DQEBCwUAA4IBAQA39jQUoGyLeUILeFmLo+WXZJaC9t5eVPCF
Jp8yJ/Zf8ARN63QN67B70pr6WD7k3z1Zq9jd13WuPdf3imaRY5OIFNuNHk18dKYM
NNPzbwr1MR3VlqA9OH6V//AVrTC6CXwmFgStA1rHTNSEV+uxJ86+HcmlPkKhQ4QO
mynQtZDN5u+IlixO7P3BZw1Spgw7hvWfbhpsQT8QtIJzN8oAdNIqL5urKsUGb+po
/NwWbvADUpC4RJRIxTq9R26wDAtoBjSva8tUPNmhR3j1kGcBoU7W17hv6ycLeZS6
9LYij6lJYL0iYOMNxRxj3E5KAQGia+Yh1+MFZHWPPODQYFsmOhkF
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:36 2025 by rpki-client