Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H2uyH3jP5uE-wlhjGJwqQXxKq2M.roa
File: H2uyH3jP5uE-wlhjGJwqQXxKq2M.roa (raw, json)
Hash identifier: ky4KtITxLwSqCcS3gb8vU+mI23SWNRAXvKzlssMSgJo=
Subject key identifier: 1F:6B:B2:1F:78:CF:E6:E1:3E:C2:58:63:18:9C:2A:41:7C:4A:AB:63
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236986D24F3091A4F34BFD65CAEADD53
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H2uyH3jP5uE-wlhjGJwqQXxKq2M.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12442
IP address blocks: 85.204.233.0/24 maxlen: 24
188.240.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:86:d2:4f:30:91:a4:f3:4b:fd:65:ca:ea:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6bb21f78cfe6e13ec25863189c2a417c4aab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:f9:27:dd:54:a9:80:c8:41:5a:1d:27:98:
6c:ef:84:5c:bb:a3:dd:38:c0:ca:a1:bc:f8:c9:8f:
6d:78:45:d5:c4:07:91:c4:f6:8b:b0:70:3d:c8:09:
f3:e2:68:fb:e4:a4:52:fe:9d:27:36:0b:f0:74:aa:
50:e4:ef:3d:30:20:07:05:e8:08:3f:9c:4f:4b:54:
c0:1c:bd:bd:ae:14:b1:ea:c9:da:0b:4e:17:93:31:
50:c4:c5:86:e9:d5:5d:55:56:9a:38:27:1a:06:67:
6c:1a:1f:36:0e:72:22:35:51:52:f0:b5:cc:59:11:
33:f6:6c:bd:65:06:6d:78:54:2e:19:4b:f2:99:1e:
30:17:4c:35:69:f4:5e:d3:b4:14:76:d3:45:ad:60:
72:e8:53:d0:d9:01:82:2c:88:6d:67:b2:a2:44:f3:
88:e3:02:7b:cf:51:6d:d1:6e:a9:ae:b0:94:bd:78:
e3:07:b3:23:27:f8:78:dc:64:6a:3b:ac:7f:64:e4:
27:c5:2c:ca:86:04:6f:f3:1d:ab:f0:d4:ab:e6:59:
0d:98:2f:40:50:b3:6b:f3:ee:3b:64:fc:7a:d1:09:
9b:92:f7:c8:b0:fe:1a:8e:87:5e:6a:59:46:ec:c3:
f1:bb:51:6a:b2:49:27:8f:08:81:2b:04:b0:b8:13:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:B2:1F:78:CF:E6:E1:3E:C2:58:63:18:9C:2A:41:7C:4A:AB:63
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H2uyH3jP5uE-wlhjGJwqQXxKq2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.233.0/24
188.240.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:1e:77:34:c5:4b:19:d5:e7:8b:97:41:51:c3:06:a6:32:a0:
fd:02:a2:a9:15:fe:62:ff:91:80:84:c7:1d:16:ca:99:21:5e:
1f:1e:bb:16:b1:a6:ed:49:a9:bd:95:89:5e:8b:4d:c0:54:c7:
07:ad:2b:18:0c:55:a4:98:4a:84:71:bd:17:b5:66:c0:95:3d:
58:1f:8f:2e:cd:34:bc:8c:92:b4:b4:0b:c6:54:43:77:70:1d:
49:b4:57:55:02:01:32:3e:c5:e4:1a:1d:34:f8:11:3d:92:60:
84:6c:b1:99:99:ca:51:09:02:30:69:bb:a8:fc:f8:24:6a:77:
5a:58:fc:19:e9:ea:6f:ee:bb:76:1e:7a:4e:10:50:14:84:3f:
ba:e1:dc:1a:8d:a9:c1:eb:b5:12:e5:92:37:ed:7f:ad:e5:06:
e2:fa:2c:d6:60:71:5c:41:35:b3:60:05:c2:ad:ba:9d:a5:75:
9f:8b:16:a9:10:34:4b:0c:3c:8d:be:e6:4a:7f:d4:6a:68:f0:
62:66:71:98:1c:32:34:2f:f7:94:e5:83:45:fa:90:26:25:4a:
37:52:67:3a:46:b0:03:fe:65:87:64:16:25:54:39:6f:5e:7d:
19:48:c2:19:00:98:9a:71:49:99:22:a6:70:36:8e:25:3a:a7:
d2:6b:cd:83
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQjaYbSTzCRpPNL/WXK6t1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjZiYjIxZjc4Y2ZlNmUxM2VjMjU4NjMxODljMmE0MTdjNGFhYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzX5J91UqYDIQVodJ5hs74Rcu6Pd
OMDKobz4yY9teEXVxAeRxPaLsHA9yAnz4mj75KRS/p0nNgvwdKpQ5O89MCAHBegI
P5xPS1TAHL29rhSx6snaC04XkzFQxMWG6dVdVVaaOCcaBmdsGh82DnIiNVFS8LXM
WREz9my9ZQZteFQuGUvymR4wF0w1afRe07QUdtNFrWBy6FPQ2QGCLIhtZ7KiRPOI
4wJ7z1Ft0W6prrCUvXjjB7MjJ/h43GRqO6x/ZOQnxSzKhgRv8x2r8NSr5lkNmC9A
ULNr8+47ZPx60QmbkvfIsP4ajodeallG7MPxu1FqskknjwiBKwSwuBPVywIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB9rsh94z+bhPsJYYxicKkF8SqtjMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0gydXlIM2pQNXVFLXdsaGpHSndxUVh4S3EyTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABVzOkD
BAO88PAwDQYJKoZIhvcNAQELBQADggEBAEsedzTFSxnV54uXQVHDBqYyoP0CoqkV
/mL/kYCExx0WypkhXh8euxaxpu1Jqb2ViV6LTcBUxwetKxgMVaSYSoRxvRe1ZsCV
PVgfjy7NNLyMkrS0C8ZUQ3dwHUm0V1UCATI+xeQaHTT4ET2SYIRssZmZylEJAjBp
u6j8+CRqd1pY/Bnp6m/uu3Yeek4QUBSEP7rh3BqNqcHrtRLlkjftf63lBuL6LNZg
cVxBNbNgBcKtup2ldZ+LFqkQNEsMPI2+5kp/1Gpo8GJmcZgcMjQv95Tlg0X6kCYl
SjdSZzpGsAP+ZYdkFiVUOW9efRlIwhkAmJpxSZkipnA2jiU6p9JrzYM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:15 2025 by rpki-client