Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ppCk9Vty6iMCcMW-ol544MdX-nM.roa
File: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (raw, json)
Hash identifier: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=
Subject key identifier: A6:90:A4:F5:5B:72:EA:23:02:70:C5:BE:A2:5E:78:E0:C7:57:FA:73
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA52026155D26EC6E610029F5C585B
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ppCk9Vty6iMCcMW-ol544MdX-nM.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56466
IP address blocks: 87.107.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:52:02:61:55:d2:6e:c6:e6:10:02:9f:5c:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a690a4f55b72ea230270c5bea25e78e0c757fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:77:b6:ad:11:88:cc:99:95:e5:02:9b:59:
8c:d2:e5:33:1c:8b:a4:37:b0:8d:b7:28:4f:05:d6:
34:8e:75:f3:ca:b5:98:ac:d4:fb:23:a5:2a:08:96:
45:a8:c5:3b:75:f2:4d:b0:54:81:c6:a6:b7:b0:d3:
55:ff:25:74:f7:ed:fb:83:cc:bf:97:d1:6c:59:8b:
59:92:16:5c:56:28:75:09:41:a3:7f:3d:f3:40:f7:
b4:a7:be:f7:84:0d:ce:e5:e0:63:9a:5c:77:de:66:
ad:7e:32:2c:e9:ff:85:34:f7:2c:fd:6f:6b:01:d7:
86:46:1c:37:07:a8:30:60:75:20:64:fa:e3:51:14:
ab:bd:00:1d:11:2e:b5:66:94:0b:79:07:5b:73:13:
a8:67:3d:c9:92:6c:8f:a3:f0:7d:c0:76:d1:d2:d3:
9c:be:45:44:32:b7:8a:53:ec:0d:d1:79:1a:39:5e:
04:e1:e0:42:e9:b5:ee:b8:09:7a:f4:42:69:f2:ef:
10:3a:6d:6b:a8:ba:44:cd:55:e9:2d:34:74:5b:59:
1a:58:b2:3e:32:31:ce:77:e4:af:c0:3d:6b:cf:c7:
93:f3:fd:bb:f0:bf:f9:2e:e7:07:a4:ae:8c:bc:33:
d0:4e:77:05:01:55:00:76:8b:41:33:bd:98:ad:92:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:A4:F5:5B:72:EA:23:02:70:C5:BE:A2:5E:78:E0:C7:57:FA:73
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ppCk9Vty6iMCcMW-ol544MdX-nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.141.0/24
Signature Algorithm: sha256WithRSAEncryption
02:63:71:57:7d:99:e6:2c:e8:44:3e:19:76:7f:ba:4a:78:79:
87:98:d9:bf:de:b5:c6:e7:8a:a5:2f:e5:26:61:78:c3:bb:cc:
12:5d:2e:35:86:86:29:9d:8d:5f:5e:03:85:2a:2f:d9:97:88:
a1:a8:5f:ef:b8:46:1b:1a:55:d7:42:60:b0:f8:6d:dc:96:99:
91:98:84:fb:9c:cb:99:56:47:7f:8c:04:ed:03:87:7b:a8:74:
be:cc:2a:b7:fc:6a:f4:a8:a4:25:ec:fd:57:ac:66:cd:4d:b6:
07:fc:12:bf:d9:49:32:40:e8:b3:61:17:b0:5e:ba:90:94:9b:
ac:be:ad:76:90:f0:0d:1b:a6:75:e4:66:59:54:fc:14:89:35:
49:ab:44:00:6b:30:02:01:37:6f:9f:7d:1c:f0:62:4d:f3:ad:
db:fc:0b:d3:80:35:8c:48:16:4d:62:a1:50:21:d9:83:af:4a:
7d:3c:31:4d:a7:5c:54:fe:9c:58:c8:1b:e3:df:9e:9b:78:aa:
c0:f7:98:16:6b:87:65:71:ed:4e:ed:2b:c0:da:a3:39:9c:8b:
69:4e:2e:e1:3b:2a:23:a2:ea:76:aa:8b:07:9c:02:27:f6:db:
6d:0e:51:bf:66:a2:aa:fb:f2:d0:54:60:55:1d:1a:6f:45:07:
5d:e9:6f:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lICYVXSbsbmEAKfXFhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwMTAxMDM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjkwYTRmNTViNzJlYTIzMDI3MGM1YmVhMjVlNzhlMGM3NTdmYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+53tq0RiMyZleUCm1mM0uUzHIuk
N7CNtyhPBdY0jnXzyrWYrNT7I6UqCJZFqMU7dfJNsFSBxqa3sNNV/yV09+37g8y/
l9FsWYtZkhZcVih1CUGjfz3zQPe0p773hA3O5eBjmlx33matfjIs6f+FNPcs/W9r
AdeGRhw3B6gwYHUgZPrjURSrvQAdES61ZpQLeQdbcxOoZz3JkmyPo/B9wHbR0tOc
vkVEMreKU+wN0XkaOV4E4eBC6bXuuAl69EJp8u8QOm1rqLpEzVXpLTR0W1kaWLI+
MjHOd+SvwD1rz8eT8/278L/5LucHpK6MvDPQTncFAVUAdotBM72YrZJdOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaQpPVbcuojAnDFvqJeeODHV/pzMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvcHBDazlWdHk2aU1DY01XLW9sNTQ0TWRYLW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2uNMA0G
CSqGSIb3DQEBCwUAA4IBAQACY3FXfZnmLOhEPhl2f7pKeHmHmNm/3rXG54qlL+Um
YXjDu8wSXS41hoYpnY1fXgOFKi/Zl4ihqF/vuEYbGlXXQmCw+G3clpmRmIT7nMuZ
Vkd/jATtA4d7qHS+zCq3/Gr0qKQl7P1XrGbNTbYH/BK/2UkyQOizYRewXrqQlJus
vq12kPANG6Z15GZZVPwUiTVJq0QAazACATdvn30c8GJN863b/AvTgDWMSBZNYqFQ
IdmDr0p9PDFNp1xU/pxYyBvj356beKrA95gWa4dlce1O7SvA2qM5nItpTi7hOyoj
oup2qosHnAIn9tttDlG/ZqKq+/LQVGBVHRpvRQdd6W8C
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:57 2025 by rpki-client