Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/NrO5uxpBltZKQFNCZNNHliY-rU8.roa
File: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (raw, json)
Hash identifier: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=
Subject key identifier: 36:B3:B9:BB:1A:41:96:D6:4A:40:53:42:64:D3:47:96:26:3E:AD:4F
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019424459DAA0CB41FD96392328E62219D31
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/NrO5uxpBltZKQFNCZNNHliY-rU8.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201404
IP address blocks: 185.49.49.0/24 maxlen: 24
2a04:b700:ca75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9d:aa:0c:b4:1f:d9:63:92:32:8e:62:21:9d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b3b9bb1a4196d64a40534264d34796263ead4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:25:ff:cb:9c:c2:b3:b8:99:d0:7a:50:c2:
27:e8:ea:b2:76:f6:4e:6d:67:c0:94:bb:b7:86:d1:
34:ba:81:7c:b0:ca:a8:fd:05:6f:5f:21:17:c1:59:
35:6d:b4:1b:5d:00:0c:3e:20:79:f2:c3:05:f5:f9:
86:07:ab:52:17:a1:e4:d6:2d:86:b3:88:fe:a5:2a:
94:e3:57:55:80:c3:ca:97:6e:10:71:a0:db:f3:ed:
bc:d7:f3:17:a3:4c:33:1e:f9:a2:47:1c:3b:df:49:
2f:67:d8:53:a4:bc:d1:13:4b:50:01:9b:10:0c:8d:
87:6d:49:5d:10:76:f3:3a:a7:aa:27:5b:8e:40:67:
2c:bf:85:14:a8:71:73:14:a2:4f:29:bc:40:ac:68:
65:9b:04:75:a0:ee:20:ea:ca:da:59:5e:99:7a:87:
7e:06:e0:be:a3:df:4c:2e:ff:8f:3e:73:6b:e2:4a:
18:ec:00:44:87:36:d5:6f:e0:92:8b:92:37:b5:9c:
b7:2f:59:5e:b7:d7:77:a1:b9:0a:a9:ab:0a:49:4a:
34:9a:45:9a:fc:68:1f:8e:33:91:b2:1a:e6:d3:5d:
c8:ab:10:06:78:91:9b:5c:d2:e6:af:f8:b7:3b:1e:
b4:e8:76:da:f6:7a:b3:3e:6e:63:98:72:7d:f5:8c:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:B9:BB:1A:41:96:D6:4A:40:53:42:64:D3:47:96:26:3E:AD:4F
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/NrO5uxpBltZKQFNCZNNHliY-rU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.49.0/24
IPv6:
2a04:b700:ca75::/48
Signature Algorithm: sha256WithRSAEncryption
53:84:8a:b9:e7:f7:4d:34:25:e4:56:a8:d9:4d:75:c3:9b:8d:
52:9f:6b:3b:10:4e:6e:57:a3:b5:9e:f4:8d:8c:8f:a5:63:b4:
84:a5:af:73:a0:f6:48:ba:62:95:e2:6d:ce:fe:cd:46:3c:81:
1c:66:b3:60:86:e2:f2:32:61:8c:0a:78:df:ac:b7:ff:fd:de:
36:b3:21:3d:91:41:7d:3d:c3:e0:90:00:bc:a6:71:b3:04:9b:
00:2a:a5:e2:ed:10:e1:07:5a:18:8c:6d:99:fc:55:7d:76:07:
9f:60:27:48:c7:94:4f:5c:d9:29:7d:38:a4:02:72:92:f6:bd:
dc:64:97:5c:ba:e6:20:cb:1f:1f:ee:17:15:87:3a:71:dc:b5:
19:f2:15:13:60:b0:ea:53:91:75:0f:9e:61:63:b2:41:d2:ba:
7f:ca:05:02:39:df:0d:54:af:14:68:90:85:6f:c5:f9:88:42:
96:74:98:84:59:b3:14:62:6b:42:49:86:1c:7e:44:16:3c:cb:
85:72:ba:1c:fd:0f:5b:b4:4b:2a:42:02:9e:2e:aa:29:ab:d5:
c4:f9:b3:37:8a:a9:e1:e2:c5:db:86:46:59:94:ed:0b:ff:23:
bb:2d:41:a4:5c:12:4b:a5:6a:b9:91:91:83:ed:57:37:6e:c0:
93:02:91:9c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRZ2qDLQf2WOSMo5iIZ0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjUwMTAxMjM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIzYjliYjFhNDE5NmQ2NGE0MDUzNDI2NGQzNDc5NjI2M2VhZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxsl/8ucwrO4mdB6UMIn6OqydvZO
bWfAlLu3htE0uoF8sMqo/QVvXyEXwVk1bbQbXQAMPiB58sMF9fmGB6tSF6Hk1i2G
s4j+pSqU41dVgMPKl24QcaDb8+281/MXo0wzHvmiRxw730kvZ9hTpLzRE0tQAZsQ
DI2HbUldEHbzOqeqJ1uOQGcsv4UUqHFzFKJPKbxArGhlmwR1oO4g6sraWV6Zeod+
BuC+o99MLv+PPnNr4koY7ABEhzbVb+CSi5I3tZy3L1let9d3obkKqasKSUo0mkWa
/GgfjjORshrm013IqxAGeJGbXNLmr/i3Ox606Hba9nqzPm5jmHJ99YwB3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDazubsaQZbWSkBTQmTTR5YmPq1PMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvTnJPNXV4cEJsdFpLUUZOQ1pOTkhsaVktclU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuTExMA8E
AgACMAkDBwAqBLcAynUwDQYJKoZIhvcNAQELBQADggEBAFOEirnn9000JeRWqNlN
dcObjVKfazsQTm5Xo7We9I2Mj6VjtISlr3Og9ki6YpXibc7+zUY8gRxms2CG4vIy
YYwKeN+st//93jazIT2RQX09w+CQALymcbMEmwAqpeLtEOEHWhiMbZn8VX12B59g
J0jHlE9c2Sl9OKQCcpL2vdxkl1y65iDLHx/uFxWHOnHctRnyFRNgsOpTkXUPnmFj
skHSun/KBQI53w1UrxRokIVvxfmIQpZ0mIRZsxRia0JJhhx+RBY8y4Vyuhz9D1u0
SypCAp4uqimr1cT5szeKqeHixduGRlmU7Qv/I7stQaRcEkularmRkYPtVzduwJMC
kZw=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:31:42 2025 by rpki-client