Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/HAjyOzGCAwLUy5RivV8kbOy5Vu4.roa
File: HAjyOzGCAwLUy5RivV8kbOy5Vu4.roa (raw, json)
Hash identifier: PsK5K2sZtAdplKvTizBojj+ePHRa8hE1Sr8s/0IgHpY=
Subject key identifier: 1C:08:F2:3B:31:82:03:02:D4:CB:94:62:BD:5F:24:6C:EC:B9:56:EE
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 019425FBFDBA91E9934979A23DE3916117E2
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/HAjyOzGCAwLUy5RivV8kbOy5Vu4.roa
Signing time: Thu 02 Jan 2025 07:47:38 +0000
ROA not before: Thu 02 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 45.129.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:fd:ba:91:e9:93:49:79:a2:3d:e3:91:61:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Jan 2 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c08f23b31820302d4cb9462bd5f246cecb956ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:4d:26:5b:67:e3:86:10:e6:66:24:e8:00:
e4:3d:6f:9c:85:21:42:a5:69:56:70:63:bd:cb:bd:
05:77:f4:94:a4:57:46:2d:d6:e5:8a:4c:06:5f:ba:
e6:9f:23:07:3c:1a:b9:bd:6b:72:be:9b:77:2f:9b:
ef:e1:32:8a:3c:67:5c:8b:b8:76:00:fe:b0:68:12:
ba:f6:41:b5:41:8b:7d:ae:60:86:d6:03:b6:45:1e:
46:a2:ea:62:fb:ab:f7:bf:ac:c9:f3:db:b4:de:b9:
e3:97:7b:0c:04:c5:46:70:8f:12:2f:ff:07:fb:86:
b0:e9:02:28:80:04:cb:64:52:39:3a:49:a0:6c:6f:
07:93:f6:a8:b1:18:19:b9:3b:b6:0c:e3:e6:4f:40:
e4:0a:84:11:ad:f2:2e:df:b6:09:a6:87:cb:c8:e5:
1f:59:35:d8:88:da:67:74:9b:e7:91:17:8d:83:5b:
ff:db:1c:06:5e:a8:b3:58:74:df:cd:e3:da:76:8d:
bf:54:9b:7b:82:d0:cd:1d:c0:5c:51:99:e6:f1:34:
2f:22:7e:5e:82:80:e6:60:6d:6c:1d:00:0c:83:b8:
b5:5f:30:59:8c:1f:39:e1:8d:68:97:32:ce:3c:5a:
ef:ee:34:eb:46:d5:36:0b:47:c4:3d:7c:bc:a1:11:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:F2:3B:31:82:03:02:D4:CB:94:62:BD:5F:24:6C:EC:B9:56:EE
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/HAjyOzGCAwLUy5RivV8kbOy5Vu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2f:f2:5f:2c:5f:20:8c:ae:c5:16:06:ff:e8:dc:4b:1e:4a:
2b:58:25:fe:1c:ac:ab:01:ef:a1:02:38:5b:6e:f4:73:60:86:
d3:a3:fc:b5:f5:1d:bd:9b:37:01:59:3d:78:87:ac:33:70:a9:
b4:01:df:cd:5c:2e:0d:b2:47:9e:3c:ad:2c:79:0f:8d:7e:4f:
d4:7e:82:6e:fb:29:a9:5b:00:39:04:0b:f4:50:69:73:98:3e:
e8:6d:96:7e:86:8b:32:f9:c1:25:60:16:ae:a9:df:1a:7e:46:
77:ef:10:1e:76:56:4f:70:33:3a:81:19:e1:a3:f5:d5:2c:f0:
e2:6c:61:40:57:67:1d:d6:dd:47:c0:ad:16:ad:c7:a1:2d:d8:
5b:15:1b:09:30:47:cd:95:ab:9d:ad:d4:65:8d:39:92:58:04:
4c:85:b5:de:15:8f:dc:96:b8:b5:a7:3b:a8:5b:9e:60:86:8d:
6d:60:86:16:9e:cb:c2:44:02:fb:04:24:70:67:1b:b4:e1:ce:
55:75:e2:32:ac:01:c9:59:1d:12:a3:14:82:f2:1d:94:e4:7e:
70:21:59:9b:03:3a:fd:67:d7:0c:ab:7d:4e:8d:cb:07:5e:0e:
06:c8:cb:55:ee:89:fe:20:32:f0:10:7a:fb:80:f0:cc:9c:8d:
29:3e:d7:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl+/26kemTSXmiPeORYRfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTE3ODlhMjMxMzVhYzIyNjhjMjJhMjg1NjAwYTVmOWIw
NTM3NzAwHhcNMjUwMTAyMDc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA4ZjIzYjMxODIwMzAyZDRjYjk0NjJiZDVmMjQ2Y2VjYjk1NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleJNJltn44YQ5mYk6ADkPW+chSFC
pWlWcGO9y70Fd/SUpFdGLdblikwGX7rmnyMHPBq5vWtyvpt3L5vv4TKKPGdci7h2
AP6waBK69kG1QYt9rmCG1gO2RR5Goupi+6v3v6zJ89u03rnjl3sMBMVGcI8SL/8H
+4aw6QIogATLZFI5OkmgbG8Hk/aosRgZuTu2DOPmT0DkCoQRrfIu37YJpofLyOUf
WTXYiNpndJvnkReNg1v/2xwGXqizWHTfzePado2/VJt7gtDNHcBcUZnm8TQvIn5e
goDmYG1sHQAMg7i1XzBZjB854Y1olzLOPFrv7jTrRtU2C0fEPXy8oRF6TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwI8jsxggMC1MuUYr1fJGzsuVbuMB8GA1UdIwQY
MBaAFMpReJojE1rCJowiooVgCl+bBTdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxGNG1pTVRXc0ltakNLaWhXQUtYNXNGTjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNGJmNjAtZDU5My00MGQyLTk3ODMt
MWUxOTE2OGY1ZDczLzEvSEFqeU96R0NBd0xVeTVSaXZWOGtiT3k1VnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iNGJmNjAtZDU5My00MGQyLTk3ODMtMWUxOTE2OGY1ZDcz
LzEveWxGNG1pTVRXc0ltakNLaWhXQUtYNXNGTjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFFMA0G
CSqGSIb3DQEBCwUAA4IBAQBPL/JfLF8gjK7FFgb/6NxLHkorWCX+HKyrAe+hAjhb
bvRzYIbTo/y19R29mzcBWT14h6wzcKm0Ad/NXC4NskeePK0seQ+Nfk/UfoJu+ymp
WwA5BAv0UGlzmD7obZZ+hosy+cElYBauqd8afkZ37xAedlZPcDM6gRnho/XVLPDi
bGFAV2cd1t1HwK0WrcehLdhbFRsJMEfNlaudrdRljTmSWARMhbXeFY/clri1pzuo
W55gho1tYIYWnsvCRAL7BCRwZxu04c5VdeIyrAHJWR0SoxSC8h2U5H5wIVmbAzr9
Z9cMq31OjcsHXg4GyMtV7on+IDLwEHr7gPDMnI0pPtdW
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:00:15 2025 by rpki-client