Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa
File: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (raw, json)
Hash identifier: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=
Subject key identifier: 86:EF:C7:EE:A3:72:A9:7D:0C:F6:7A:E7:BA:E4:B7:A6:95:78:32:A8
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019423D7CF6FA48822A01F4D427598AF7D65
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215643
IP address blocks: 109.107.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cf:6f:a4:88:22:a0:1f:4d:42:75:98:af:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86efc7eea372a97d0cf67ae7bae4b7a6957832a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:91:7a:50:b0:59:78:02:c3:2d:54:b8:df:
75:e5:1e:a0:87:b5:03:88:2e:60:5a:e2:a7:f9:3f:
d3:9c:4b:f1:95:cb:12:07:e1:17:13:e9:08:7d:08:
e6:c3:6c:28:ac:2d:26:12:e6:fc:90:9f:58:e9:56:
e8:04:6f:8d:65:d2:50:f4:43:32:83:89:06:cd:43:
80:4c:01:59:dc:18:bd:75:ab:ce:de:0d:50:08:f8:
06:03:b1:e6:88:62:2e:4f:ae:75:5e:37:c3:8c:8c:
8f:9a:9c:22:90:27:72:2d:ea:6f:40:96:ca:0b:28:
ce:fe:99:df:24:96:fa:f3:5f:2a:c5:f2:9d:b1:51:
b8:d3:21:38:da:ff:07:ae:8e:06:a2:a0:a2:f3:32:
f6:fa:91:70:1e:fe:3e:2e:74:75:6d:16:4f:e4:74:
4f:4e:5a:c1:26:d2:c5:db:4d:e9:85:d0:1f:0b:58:
46:27:3c:a1:22:62:31:63:f9:b1:8c:92:ca:ce:9f:
8d:db:aa:c9:8c:b2:ea:63:5a:4c:9d:ae:cf:8d:9e:
69:09:8d:67:98:0a:cf:ca:03:fc:c2:67:86:a3:2f:
c5:39:0b:99:84:c6:81:0b:c9:21:9a:c0:1e:a0:1f:
2a:04:68:7e:9a:57:5b:4f:13:83:13:8f:8a:4c:c6:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:C7:EE:A3:72:A9:7D:0C:F6:7A:E7:BA:E4:B7:A6:95:78:32:A8
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.138.0/24
Signature Algorithm: sha256WithRSAEncryption
10:44:53:bc:00:b8:e5:cc:c1:99:d3:fa:d8:d5:3a:20:23:6f:
31:cd:88:13:99:64:0c:be:c3:a5:26:44:a1:29:ba:dd:18:69:
43:8d:b5:d6:9e:7d:ff:48:8c:57:c7:9e:0c:8f:35:ab:c6:78:
56:23:23:9c:f3:f1:63:84:e0:bb:f3:64:0d:06:d8:37:47:96:
b3:c4:ef:6d:30:39:cd:95:2a:f8:48:23:b5:e4:6e:27:92:40:
3f:df:78:5e:3d:82:ae:7e:61:79:14:47:a5:7c:36:64:51:cb:
02:77:10:0e:8d:cd:e3:54:da:17:ab:09:79:84:59:13:9a:bc:
14:cb:c8:1d:57:d7:16:4d:4a:39:f1:15:07:cd:b5:12:b0:be:
08:37:42:ee:5f:e1:31:88:97:e7:16:3c:48:1f:05:fd:1e:08:
b5:7f:63:a8:42:3e:37:38:5f:ee:bb:bd:49:b6:24:6b:45:f4:
96:80:83:c1:8e:a8:c5:9c:cc:80:29:50:c3:be:38:a2:76:42:
88:22:72:3d:a4:67:3f:b2:9e:69:42:dc:70:1b:a4:5e:c8:37:
49:a9:a7:2d:19:32:64:39:01:98:a3:2d:41:99:0d:eb:89:da:
5d:b5:03:67:40:2d:87:2d:39:61:b4:4d:5d:81:8c:a3:bd:7f:
db:4a:a4:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj189vpIgioB9NQnWYr31lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjUwMTAxMjE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmVmYzdlZWEzNzJhOTdkMGNmNjdhZTdiYWU0YjdhNjk1NzgzMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wGRelCwWXgCwy1UuN915R6gh7UD
iC5gWuKn+T/TnEvxlcsSB+EXE+kIfQjmw2worC0mEub8kJ9Y6VboBG+NZdJQ9EMy
g4kGzUOATAFZ3Bi9davO3g1QCPgGA7HmiGIuT651XjfDjIyPmpwikCdyLepvQJbK
CyjO/pnfJJb6818qxfKdsVG40yE42v8Hro4GoqCi8zL2+pFwHv4+LnR1bRZP5HRP
TlrBJtLF203phdAfC1hGJzyhImIxY/mxjJLKzp+N26rJjLLqY1pMna7PjZ5pCY1n
mArPygP8wmeGoy/FOQuZhMaBC8khmsAeoB8qBGh+mldbTxODE4+KTMbfYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbvx+6jcql9DPZ657rkt6aVeDKoMB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvaHVfSDdxTnlxWDBNOW5ybnV1UzNwcFY0TXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuKMA0G
CSqGSIb3DQEBCwUAA4IBAQAQRFO8ALjlzMGZ0/rY1TogI28xzYgTmWQMvsOlJkSh
KbrdGGlDjbXWnn3/SIxXx54MjzWrxnhWIyOc8/FjhOC782QNBtg3R5azxO9tMDnN
lSr4SCO15G4nkkA/33hePYKufmF5FEelfDZkUcsCdxAOjc3jVNoXqwl5hFkTmrwU
y8gdV9cWTUo58RUHzbUSsL4IN0LuX+ExiJfnFjxIHwX9Hgi1f2OoQj43OF/uu71J
tiRrRfSWgIPBjqjFnMyAKVDDvjiidkKIInI9pGc/sp5pQtxwG6ReyDdJqactGTJk
OQGYoy1BmQ3ridpdtQNnQC2HLTlhtE1dgYyjvX/bSqTV
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:44 2025 by rpki-client