Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hrupM7nw3DiDB-gJc9yUulX1LD4.roa
File: hrupM7nw3DiDB-gJc9yUulX1LD4.roa (raw, json)
Hash identifier: A9+Hcg8DkOYfMeHB992+7OmyNpAAWrQf2gy7S9aQDHw=
Subject key identifier: 86:BB:A9:33:B9:F0:DC:38:83:07:E8:09:73:DC:94:BA:55:F5:2C:3E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C820E88BE32C5D2FD06C2EEA83E61
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hrupM7nw3DiDB-gJc9yUulX1LD4.roa
Signing time: Thu 02 Jan 2025 09:50:32 +0000
ROA not before: Thu 02 Jan 2025 09:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61166
IP address blocks: 178.34.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:82:0e:88:be:32:c5:d2:fd:06:c2:ee:a8:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86bba933b9f0dc388307e80973dc94ba55f52c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:fd:6d:2c:1c:c5:43:5c:f7:71:b7:b7:eb:
a1:31:0a:d5:70:7d:cc:1e:f4:fa:c3:c2:f5:be:4a:
d2:89:8a:b8:59:22:c5:e6:c0:8c:b2:53:28:0d:1e:
8c:a0:d8:9a:f2:17:2b:4f:a5:12:68:fc:f3:2c:4a:
e7:6e:82:e8:ac:44:96:60:8f:f6:60:f3:21:7d:8a:
eb:a0:db:20:ea:8a:e8:4c:5e:0a:f6:1b:7b:8d:67:
5d:48:0a:fa:7d:76:57:76:ef:4d:2b:67:77:6d:77:
8c:05:0d:1a:b2:44:b0:32:5f:ee:5a:56:64:60:83:
66:5c:dd:95:ac:3d:8d:62:bb:96:45:a2:63:18:01:
ae:e0:09:4b:02:73:99:23:c8:e2:66:fe:18:fe:96:
cf:08:af:e4:0e:6d:a8:c8:bd:8e:ae:b5:65:ba:b8:
c1:e6:7c:a0:19:80:d6:ee:58:cd:ee:c8:32:c7:ce:
00:a7:fd:81:7f:a7:cb:5b:e0:a4:2e:73:6c:b8:b8:
15:72:99:dc:98:12:c6:e0:d4:de:b0:00:39:8e:16:
d1:e8:c0:08:a5:62:d1:11:08:81:bb:c9:29:f2:c9:
85:c5:c0:0c:23:c1:a3:f6:b2:fa:a1:fe:2e:f4:fc:
64:23:dc:c1:23:e0:ab:af:33:6c:45:30:e3:37:1d:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:A9:33:B9:F0:DC:38:83:07:E8:09:73:DC:94:BA:55:F5:2C:3E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hrupM7nw3DiDB-gJc9yUulX1LD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.34.81.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4a:65:b6:2f:11:dd:a2:71:28:90:38:b6:c4:e2:9d:70:d9:
32:9f:32:97:67:92:a8:12:17:0b:03:c7:cb:08:62:02:28:83:
9e:50:dd:9d:8f:59:d4:3a:c2:ea:42:3b:af:ea:66:86:0a:bc:
6e:1e:bb:06:03:b7:19:d0:97:53:9a:32:25:13:9a:4d:b5:b4:
5f:c2:c5:c8:21:13:9c:f3:15:44:e7:42:b2:92:87:77:ed:12:
5b:d3:4e:34:1c:18:c4:ff:59:e7:7e:67:4b:68:6e:36:df:3a:
f2:ae:36:8e:fd:fd:34:c3:e0:07:8b:c8:67:56:f7:9f:17:0a:
97:b7:f9:56:39:a9:a9:be:e9:ef:d2:8f:a8:1a:08:79:10:98:
99:60:13:18:34:1c:2b:ed:1e:d8:23:95:a7:3f:9b:d9:59:bb:
b9:0e:60:05:04:b0:3e:1b:63:d8:fc:48:72:5b:e6:96:2b:98:
07:26:50:00:14:80:3e:ea:24:64:bc:ba:e1:03:2f:40:ba:b3:
a5:33:f2:cb:cf:39:aa:83:c6:39:7d:2f:96:89:31:87:44:40:
ae:3c:a4:a2:65:b3:cf:e9:c8:93:e6:d8:f0:7b:62:f2:b6:6c:
76:5b:f5:b5:b7:36:01:52:67:bc:3d:f8:f4:fe:ed:dc:9f:20:
8d:57:75:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbIIOiL4yxdL9BsLuqD5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMTAyMDk1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJiYTkzM2I5ZjBkYzM4ODMwN2U4MDk3M2RjOTRiYTU1ZjUyYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8v9bSwcxUNc93G3t+uhMQrVcH3M
HvT6w8L1vkrSiYq4WSLF5sCMslMoDR6MoNia8hcrT6USaPzzLErnboLorESWYI/2
YPMhfYrroNsg6oroTF4K9ht7jWddSAr6fXZXdu9NK2d3bXeMBQ0askSwMl/uWlZk
YINmXN2VrD2NYruWRaJjGAGu4AlLAnOZI8jiZv4Y/pbPCK/kDm2oyL2OrrVlurjB
5nygGYDW7ljN7sgyx84Ap/2Bf6fLW+CkLnNsuLgVcpncmBLG4NTesAA5jhbR6MAI
pWLREQiBu8kp8smFxcAMI8Gj9rL6of4u9PxkI9zBI+CrrzNsRTDjNx3Y8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIa7qTO58Nw4gwfoCXPclLpV9Sw+MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvaHJ1cE03bnczRGlEQi1nSmM5eVV1bFgxTEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsiJRMA0G
CSqGSIb3DQEBCwUAA4IBAQBDSmW2LxHdonEokDi2xOKdcNkynzKXZ5KoEhcLA8fL
CGICKIOeUN2dj1nUOsLqQjuv6maGCrxuHrsGA7cZ0JdTmjIlE5pNtbRfwsXIIROc
8xVE50Kykod37RJb0040HBjE/1nnfmdLaG423zryrjaO/f00w+AHi8hnVvefFwqX
t/lWOampvunv0o+oGgh5EJiZYBMYNBwr7R7YI5WnP5vZWbu5DmAFBLA+G2PY/Ehy
W+aWK5gHJlAAFIA+6iRkvLrhAy9AurOlM/LLzzmqg8Y5fS+WiTGHRECuPKSiZbPP
6ciT5tjwe2Lytmx2W/W1tzYBUme8Pfj0/u3cnyCNV3WE
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:49 2025 by rpki-client