Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/HuN4xP77vmRQRTk2kLL4bBeTBzg.roa
File: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (raw, json)
Hash identifier: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=
Subject key identifier: 1E:E3:78:C4:FE:FB:BE:64:50:45:39:36:90:B2:F8:6C:17:93:07:38
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019427483F398CD9B74FF69A1496DD5B41E5
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/HuN4xP77vmRQRTk2kLL4bBeTBzg.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43093
IP address blocks: 78.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3f:39:8c:d9:b7:4f:f6:9a:14:96:dd:5b:41:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee378c4fefbbe645045393690b2f86c17930738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:e5:ac:f6:8e:69:20:73:04:28:75:33:17:
73:ca:fc:ff:ce:81:87:98:76:24:ce:58:61:b1:04:
f1:a6:b8:36:f3:ae:77:5c:21:60:8e:d4:88:3c:15:
91:5c:73:76:32:9b:bd:c5:59:10:fe:2e:e6:1e:5e:
6c:b4:46:fd:f5:26:3b:9f:4e:e2:61:59:07:ea:78:
d8:74:0a:17:39:f1:09:35:c0:52:c6:74:f2:59:8e:
1d:be:c4:97:b4:95:a9:19:e4:8e:37:e4:c8:53:37:
52:c1:6b:e7:8e:4e:96:9b:65:b6:80:92:bc:75:08:
11:65:5b:0f:81:7d:10:c3:d3:a9:3c:61:82:51:8c:
56:0f:b4:65:b4:f0:dd:35:69:b4:85:e0:00:47:74:
65:63:d2:14:0a:2e:45:54:e4:38:f7:49:7a:ff:42:
0f:86:e0:db:68:1f:45:8b:a5:fb:d3:4e:5b:9a:4f:
8a:3e:12:30:d3:ad:d0:76:e7:71:c1:5b:f6:19:a7:
0c:3d:e1:0a:ba:ee:13:cb:95:27:ee:58:16:12:1c:
36:3d:81:e2:44:29:bb:c3:1d:0b:a5:65:89:53:f3:
36:b7:17:8f:c7:e6:a7:4f:98:9e:0c:76:fd:1f:a1:
ae:db:0b:09:25:4b:f9:1a:6d:15:0a:7d:c2:70:27:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:78:C4:FE:FB:BE:64:50:45:39:36:90:B2:F8:6C:17:93:07:38
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/HuN4xP77vmRQRTk2kLL4bBeTBzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c3:0b:fd:60:5c:1b:90:06:51:72:cd:da:ff:4d:d9:a3:08:
8e:f5:cf:41:dc:ab:8e:e5:78:99:69:e8:e5:18:d1:95:3b:91:
20:9b:b0:f2:1b:c7:18:14:fa:a5:4c:30:a9:33:e9:88:7c:a7:
69:7b:40:19:48:23:ec:73:79:17:4f:ef:88:90:63:28:0b:33:
2d:c6:c0:f4:85:1b:8c:99:aa:59:2b:e7:c1:8c:89:db:e9:73:
de:a9:40:b5:3c:97:74:fd:4f:ca:24:84:bd:87:ef:80:b5:7c:
50:16:4c:15:af:96:c4:27:ba:d9:9d:90:c3:f9:85:84:88:67:
82:9f:87:6a:98:81:75:a4:48:4f:eb:c9:3b:cc:41:e5:02:e6:
a1:76:83:9d:66:fe:60:b7:26:d0:28:59:f1:cd:ab:7d:57:74:
37:ff:c3:cf:2f:42:6a:83:18:59:f8:0d:9f:7a:5a:8b:44:54:
4c:e9:f2:ec:52:9b:6c:e8:6e:78:d1:2a:89:66:28:03:e8:17:
fe:40:f0:b2:27:29:84:29:5d:1f:2c:a4:b8:1f:1a:03:13:19:
a0:49:06:3d:d4:74:b7:3a:1a:1f:73:30:3a:71:bd:ae:68:9e:
6b:63:5f:22:02:d3:3d:fc:e7:12:de:47:03:c1:1d:8c:27:00:
ce:b4:ec:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSD85jNm3T/aaFJbdW0HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjUwMTAyMTM1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWUzNzhjNGZlZmJiZTY0NTA0NTM5MzY5MGIyZjg2YzE3OTMwNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrvlrPaOaSBzBCh1Mxdzyvz/zoGH
mHYkzlhhsQTxprg28653XCFgjtSIPBWRXHN2Mpu9xVkQ/i7mHl5stEb99SY7n07i
YVkH6njYdAoXOfEJNcBSxnTyWY4dvsSXtJWpGeSON+TIUzdSwWvnjk6Wm2W2gJK8
dQgRZVsPgX0Qw9OpPGGCUYxWD7RltPDdNWm0heAAR3RlY9IUCi5FVOQ490l6/0IP
huDbaB9Fi6X7005bmk+KPhIw063QdudxwVv2GacMPeEKuu4Ty5Un7lgWEhw2PYHi
RCm7wx0LpWWJU/M2txePx+anT5ieDHb9H6Gu2wsJJUv5Gm0VCn3CcCdR1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB7jeMT++75kUEU5NpCy+GwXkwc4MB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvSHVONHhQNzd2bVJRUlRrMmtMTDRiQmVUQnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9RMA0G
CSqGSIb3DQEBCwUAA4IBAQAwwwv9YFwbkAZRcs3a/03ZowiO9c9B3KuO5XiZaejl
GNGVO5Egm7DyG8cYFPqlTDCpM+mIfKdpe0AZSCPsc3kXT++IkGMoCzMtxsD0hRuM
mapZK+fBjInb6XPeqUC1PJd0/U/KJIS9h++AtXxQFkwVr5bEJ7rZnZDD+YWEiGeC
n4dqmIF1pEhP68k7zEHlAuahdoOdZv5gtybQKFnxzat9V3Q3/8PPL0JqgxhZ+A2f
elqLRFRM6fLsUpts6G540SqJZigD6Bf+QPCyJymEKV0fLKS4HxoDExmgSQY91HS3
OhofczA6cb2uaJ5rY18iAtM9/OcS3kcDwR2MJwDOtOxz
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:25 2025 by rpki-client