Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa
File: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (raw, json)
Hash identifier: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=
Subject key identifier: 1D:82:96:AA:EE:DD:57:D4:F4:DC:F8:36:60:4C:E6:57:6A:73:78:B2
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0195A7F0C7FD70F0370BC3FD90629E039EB6
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa
Signing time: Tue 18 Mar 2025 06:28:49 +0000
ROA not before: Tue 18 Mar 2025 06:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 78.41.60.0/24 maxlen: 24
194.117.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:f0:c7:fd:70:f0:37:0b:c3:fd:90:62:9e:03:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Mar 18 06:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d8296aaeedd57d4f4dcf836604ce6576a7378b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:b5:3e:5a:2f:4a:66:bb:7b:f5:ee:e1:ca:
cc:c2:06:60:67:0c:d2:45:2b:0b:31:02:62:b9:b8:
3e:60:87:19:94:95:e5:6b:a8:4b:33:ba:79:25:f1:
5c:a7:b6:31:1f:5d:2e:66:13:02:c1:21:4f:dd:71:
08:4e:29:6b:8b:ca:27:e6:46:f6:1c:38:fd:df:55:
da:f8:8e:f5:f4:63:13:f5:f1:2f:8c:f7:b2:1b:2a:
2d:d5:b9:b4:c4:37:f1:52:8a:29:ad:aa:cb:d3:d5:
28:b4:ba:b1:6f:14:bf:57:24:14:49:cd:8b:3f:2a:
2d:12:a9:7b:b8:f8:7b:c1:65:e4:5b:d1:14:6a:39:
84:8c:43:0a:64:bc:6a:09:41:3e:e2:21:66:2b:50:
02:b6:98:e4:5d:87:f0:93:92:c0:2f:86:55:eb:00:
3c:9d:db:fd:87:53:cb:f0:30:3f:88:17:ff:23:38:
31:e8:f3:4a:00:ce:5a:52:b2:e8:bb:08:8a:86:9a:
a9:c6:cf:2a:87:96:a8:36:12:30:f3:6f:a4:b6:b0:
64:93:11:d1:81:31:26:0b:b3:b8:b4:6f:2a:2c:11:
7b:4a:6b:b2:58:e4:e3:1e:63:71:92:b3:fd:e1:67:
a5:03:96:cc:54:ed:5c:3b:b1:41:45:8b:42:a5:11:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:96:AA:EE:DD:57:D4:F4:DC:F8:36:60:4C:E6:57:6A:73:78:B2
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.60.0/24
194.117.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:68:47:a6:af:eb:e3:d7:1c:5c:15:6f:eb:ce:50:a0:51:cf:
4b:4d:df:24:89:2e:d2:8a:60:07:c9:76:ac:c6:16:d8:5d:fb:
97:e5:67:94:30:5b:9a:e9:d4:1e:34:60:99:49:01:e2:81:fd:
91:c0:60:39:36:9e:ac:55:4a:b8:d9:0d:d9:f5:fc:63:08:5d:
cc:12:f6:35:7c:3a:34:63:30:fb:75:cc:85:78:87:82:e4:de:
68:0d:29:a9:07:28:9f:ef:ee:ee:ac:00:71:09:90:ee:10:f8:
1e:22:c1:94:ae:22:f8:20:32:f4:ad:05:42:3c:06:98:86:49:
b3:4e:8c:bb:91:72:97:37:8a:e7:b1:c7:2c:5e:fd:53:14:2d:
af:07:22:28:95:9d:3b:fc:58:e2:31:8a:b4:ce:b4:75:3a:ed:
46:07:11:60:26:4d:a9:6d:7d:4c:df:89:fe:a7:07:a6:14:28:
80:2a:8a:82:4c:6c:12:97:f4:90:3c:f6:aa:0e:cb:fe:4a:df:
7d:4e:eb:c0:00:ea:93:73:c6:c2:8e:a9:88:37:96:32:3e:ab:
51:a3:04:b7:0a:6a:74:e0:24:e8:70:88:0e:0d:ba:d9:04:9c:
12:26:63:24:82:e1:0e:2b:ee:b2:c5:45:a7:b5:df:87:f1:1b:
0b:bb:60:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWn8Mf9cPA3C8P9kGKeA562MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjUwMzE4MDYyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDgyOTZhYWVlZGQ1N2Q0ZjRkY2Y4MzY2MDRjZTY1NzZhNzM3OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRe1PlovSma7e/Xu4crMwgZgZwzS
RSsLMQJiubg+YIcZlJXla6hLM7p5JfFcp7YxH10uZhMCwSFP3XEITilri8on5kb2
HDj931Xa+I719GMT9fEvjPeyGyot1bm0xDfxUooprarL09UotLqxbxS/VyQUSc2L
PyotEql7uPh7wWXkW9EUajmEjEMKZLxqCUE+4iFmK1ACtpjkXYfwk5LAL4ZV6wA8
ndv9h1PL8DA/iBf/Izgx6PNKAM5aUrLouwiKhpqpxs8qh5aoNhIw82+ktrBkkxHR
gTEmC7O4tG8qLBF7SmuyWOTjHmNxkrP94WelA5bMVO1cO7FBRYtCpRF86QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB2Clqru3VfU9Nz4NmBM5ldqc3iyMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvSFlLV3F1N2RWOVQwM1BnMllFem1WMnB6ZUxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATik8AwQA
wnU/MA0GCSqGSIb3DQEBCwUAA4IBAQDCaEemr+vj1xxcFW/rzlCgUc9LTd8kiS7S
imAHyXasxhbYXfuX5WeUMFua6dQeNGCZSQHigf2RwGA5Np6sVUq42Q3Z9fxjCF3M
EvY1fDo0YzD7dcyFeIeC5N5oDSmpByif7+7urABxCZDuEPgeIsGUriL4IDL0rQVC
PAaYhkmzToy7kXKXN4rnsccsXv1TFC2vByIolZ07/FjiMYq0zrR1Ou1GBxFgJk2p
bX1M34n+pwemFCiAKoqCTGwSl/SQPPaqDsv+St99TuvAAOqTc8bCjqmIN5YyPqtR
owS3Cmp04CTocIgODbrZBJwSJmMkguEOK+6yxUWntd+H8RsLu2B+
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:49:50 2025 by rpki-client