Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/H9HhLY73Vk4PBLowFwmqq8qnEvs.roa
File: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (raw, json)
Hash identifier: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=
Subject key identifier: 1F:D1:E1:2D:8E:F7:56:4E:0F:04:BA:30:17:09:AA:AB:CA:A7:12:FB
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D63A2E0743382DABE5D978955061EB
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/H9HhLY73Vk4PBLowFwmqq8qnEvs.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201838
IP address blocks: 45.95.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:2e:07:43:38:2d:ab:e5:d9:78:95:50:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd1e12d8ef7564e0f04ba301709aaabcaa712fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:6b:ae:17:4c:7e:4f:1c:d2:be:26:46:31:
22:f6:41:3b:51:a6:1f:42:86:8f:50:94:34:03:7b:
8f:12:92:66:0d:22:cc:7c:80:42:ae:c3:cd:73:b3:
35:cb:ae:87:25:66:4f:8d:61:fb:ad:e0:cf:ac:bb:
48:86:d1:27:ab:a5:5d:f5:e4:a8:ea:ad:68:63:ad:
61:f6:cc:1f:e5:5d:b8:c6:eb:40:9d:10:05:b6:93:
64:fd:b7:7f:5c:8d:fa:20:6a:65:95:b4:8d:10:e4:
46:e6:a2:86:78:6c:28:15:c3:f5:d2:3b:d4:53:32:
0b:61:f2:81:16:eb:f1:76:af:49:1c:47:b9:a5:22:
a8:a7:e3:d0:19:d1:ff:89:0a:ec:80:6d:8f:54:d1:
51:e3:02:59:fa:df:cb:2c:f9:84:8d:52:bf:c3:6e:
86:2b:a9:dd:1a:e6:86:76:06:d2:76:f9:92:cf:41:
fd:c2:0a:e1:f7:02:d2:73:20:fd:5a:ea:c0:16:72:
8b:0a:ab:cc:39:6e:35:9e:a0:a4:c0:ff:fe:8d:65:
bc:1b:e1:72:68:dd:82:f6:c2:2e:02:4e:8a:81:a5:
17:de:09:8b:df:c4:b2:ea:c1:e8:4d:24:26:84:f4:
4c:a4:45:8e:f2:aa:b0:d9:f2:f0:04:56:1f:ce:41:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:E1:2D:8E:F7:56:4E:0F:04:BA:30:17:09:AA:AB:CA:A7:12:FB
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/H9HhLY73Vk4PBLowFwmqq8qnEvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:be:9d:f0:c6:29:3a:46:f7:74:fb:78:43:aa:e6:c4:9e:b1:
c5:9e:1d:10:04:69:bf:f9:a0:ad:8e:14:cb:61:73:d7:9e:6a:
8b:9f:ad:d4:2f:a3:e4:bd:84:f6:eb:d1:1c:fe:cb:cc:7b:7f:
4d:25:3a:c0:67:6c:5d:e1:7d:26:5d:3a:30:d6:85:41:9a:7f:
7c:54:9b:0a:91:e0:c2:3f:5f:6f:af:10:f1:b5:86:c9:59:e2:
a1:44:17:79:85:6e:a9:30:89:9d:fb:6b:1e:57:37:d1:01:7f:
d5:80:65:0e:9c:a6:69:55:e0:41:8b:bb:43:67:52:d9:6b:79:
ac:78:d7:76:39:07:91:8c:10:e3:61:08:71:23:8a:3a:2e:51:
c7:e5:bb:db:f0:f4:ca:2d:79:ca:36:47:2e:7f:23:b4:45:a6:
72:02:70:28:f4:4d:d4:c1:a1:7c:39:72:d8:00:ee:0e:a2:81:
02:1a:64:44:e7:94:a0:47:af:0a:a5:93:ba:63:c5:82:08:3b:
da:8b:4b:71:d2:a7:16:06:45:23:18:c5:67:71:66:ed:f3:bf:
28:00:fc:8c:24:ca:fa:a1:bf:60:c9:3b:83:9c:93:f3:3a:cc:
29:ec:fd:31:6b:ec:db:16:c0:94:c8:1a:a3:61:f8:c0:34:8c:
cf:95:c0:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jouB0M4Lavl2XiVUGHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjUwMTAxMDc0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQxZTEyZDhlZjc1NjRlMGYwNGJhMzAxNzA5YWFhYmNhYTcxMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddrrhdMfk8c0r4mRjEi9kE7UaYf
QoaPUJQ0A3uPEpJmDSLMfIBCrsPNc7M1y66HJWZPjWH7reDPrLtIhtEnq6Vd9eSo
6q1oY61h9swf5V24xutAnRAFtpNk/bd/XI36IGpllbSNEORG5qKGeGwoFcP10jvU
UzILYfKBFuvxdq9JHEe5pSKop+PQGdH/iQrsgG2PVNFR4wJZ+t/LLPmEjVK/w26G
K6ndGuaGdgbSdvmSz0H9wgrh9wLScyD9WurAFnKLCqvMOW41nqCkwP/+jWW8G+Fy
aN2C9sIuAk6KgaUX3gmL38Sy6sHoTSQmhPRMpEWO8qqw2fLwBFYfzkFXSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/R4S2O91ZODwS6MBcJqqvKpxL7MB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvSDlIaExZNzNWazRQQkxvd0Z3bXFxOHFuRXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV/sMA0G
CSqGSIb3DQEBCwUAA4IBAQBbvp3wxik6Rvd0+3hDqubEnrHFnh0QBGm/+aCtjhTL
YXPXnmqLn63UL6PkvYT269Ec/svMe39NJTrAZ2xd4X0mXTow1oVBmn98VJsKkeDC
P19vrxDxtYbJWeKhRBd5hW6pMImd+2seVzfRAX/VgGUOnKZpVeBBi7tDZ1LZa3ms
eNd2OQeRjBDjYQhxI4o6LlHH5bvb8PTKLXnKNkcufyO0RaZyAnAo9E3UwaF8OXLY
AO4OooECGmRE55SgR68KpZO6Y8WCCDvai0tx0qcWBkUjGMVncWbt878oAPyMJMr6
ob9gyTuDnJPzOswp7P0xa+zbFsCUyBqjYfjANIzPlcDY
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:57:31 2025 by rpki-client