Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/NXUzMIfktJlUta1muNKTOw8yUJM.roa
File: NXUzMIfktJlUta1muNKTOw8yUJM.roa (raw, json)
Hash identifier: au10gckVqONb8nYLodKX/5nLmpWjt3lijGEJ9K4rXgs=
Subject key identifier: 35:75:33:30:87:E4:B4:99:54:B5:AD:66:B8:D2:93:3B:0F:32:50:93
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 018CC8DF518FBD19CAADB0D4CA71B0DD3650
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/NXUzMIfktJlUta1muNKTOw8yUJM.roa
Signing time: Tue 02 Jan 2024 06:32:07 +0000
ROA not before: Tue 02 Jan 2024 06:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51679
IP address blocks: 212.46.50.0/24 maxlen: 24
2a12:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:51:8f:bd:19:ca:ad:b0:d4:ca:71:b0:dd:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Jan 2 06:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3575333087e4b49954b5ad66b8d2933b0f325093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:ff:0c:42:65:f2:fa:bc:30:84:1f:ef:6d:
aa:02:23:ec:50:39:a5:90:0b:49:fc:c6:6e:ba:a9:
18:a6:b3:a2:9a:53:d7:c6:58:d2:5a:41:cc:58:ea:
ce:27:06:a3:60:2b:72:4b:d9:1c:b8:9c:b3:00:a6:
49:54:b3:17:c4:90:05:cf:14:49:fe:fc:4a:7a:21:
e8:e7:2a:fa:2b:3f:7d:29:c2:d5:2c:bf:bc:33:1e:
b7:39:13:53:4a:04:77:9c:73:22:3e:1d:c7:54:d4:
61:34:f0:84:72:8d:c0:8b:59:5e:4c:84:d5:83:2b:
d5:3f:40:86:5b:07:23:f6:42:8f:dd:96:12:d9:dd:
29:b1:48:c9:f6:ba:5e:ac:32:41:ed:5a:5b:87:31:
a8:ae:97:63:79:eb:5e:8c:15:18:95:79:42:55:0f:
23:c9:06:d6:d8:7e:e5:78:b5:16:d0:6d:7d:5d:1a:
c3:ef:dd:a3:89:df:8a:15:8d:62:4e:57:6f:0a:53:
22:b2:57:e1:c8:41:a4:86:36:fc:be:05:4b:02:7b:
5c:a8:31:e4:f4:4a:a2:b2:98:63:82:69:c5:1c:73:
ee:7a:c9:49:58:ae:f3:a7:ff:56:b5:2b:20:8d:69:
2a:d4:92:d9:f1:3f:31:93:bb:d6:b2:80:dc:e0:7b:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:33:30:87:E4:B4:99:54:B5:AD:66:B8:D2:93:3B:0F:32:50:93
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/NXUzMIfktJlUta1muNKTOw8yUJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.50.0/24
IPv6:
2a12:c40::/29
Signature Algorithm: sha256WithRSAEncryption
69:b4:88:79:46:0d:0b:cc:1a:44:e2:e3:46:05:e0:42:af:9c:
1e:2a:dc:55:f9:b9:a8:4b:18:d8:9b:ec:ef:73:13:1c:2e:e7:
22:9a:21:7c:7e:be:94:76:71:06:48:9e:ca:1d:b3:a5:3e:bd:
a6:e3:c7:11:d0:e5:96:03:2a:19:cd:93:28:a9:7b:f5:05:4e:
03:7b:01:1e:58:8a:d6:7b:26:1c:b3:70:51:51:00:3f:ab:97:
9e:bc:32:5d:9c:39:aa:72:94:32:23:df:97:49:b0:a2:d7:5f:
51:43:2f:fa:cc:60:83:6c:9f:d8:86:36:e6:48:d0:7d:28:3d:
0e:34:89:cf:b8:52:db:17:15:a0:f3:a9:04:46:00:87:d8:a5:
be:1e:50:24:82:05:a1:01:78:0c:b4:b5:14:98:c2:c6:e9:78:
9a:0a:1f:05:37:88:0d:0b:48:33:e5:ea:60:97:c4:b9:23:e1:
64:92:72:7f:26:b5:91:f4:ab:6d:0a:fc:5f:e5:4e:04:41:39:
c8:1e:6a:6d:e3:45:57:be:37:af:49:91:79:c7:ef:d9:c6:3e:
ec:b3:53:5c:20:f0:e4:bb:95:a2:96:89:3d:c1:48:86:5c:18:
b9:4e:f7:cb:43:7c:73:46:99:0b:89:84:82:d5:43:9c:8f:46:
da:c7:9e:30
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI31GPvRnKrbDUynGw3TZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5
OGExY2IwHhcNMjQwMTAyMDYzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTc1MzMzMDg3ZTRiNDk5NTRiNWFkNjZiOGQyOTMzYjBmMzI1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEn/DEJl8vq8MIQf722qAiPsUDml
kAtJ/MZuuqkYprOimlPXxljSWkHMWOrOJwajYCtyS9kcuJyzAKZJVLMXxJAFzxRJ
/vxKeiHo5yr6Kz99KcLVLL+8Mx63ORNTSgR3nHMiPh3HVNRhNPCEco3Ai1leTITV
gyvVP0CGWwcj9kKP3ZYS2d0psUjJ9rperDJB7VpbhzGorpdjeetejBUYlXlCVQ8j
yQbW2H7leLUW0G19XRrD792jid+KFY1iTldvClMislfhyEGkhjb8vgVLAntcqDHk
9EqisphjgmnFHHPueslJWK7zp/9WtSsgjWkq1JLZ8T8xk7vWsoDc4Htp1wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDV1MzCH5LSZVLWtZrjSkzsPMlCTMB8GA1UdIwQY
MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt
M2ZhMTVhMzNmNDI5LzEvTlhVek1JZmt0SmxVdGExbXVOS1RPdzh5VUpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5
LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1C4yMA0E
AgACMAcDBQMqEgxAMA0GCSqGSIb3DQEBCwUAA4IBAQBptIh5Rg0LzBpE4uNGBeBC
r5weKtxV+bmoSxjYm+zvcxMcLucimiF8fr6UdnEGSJ7KHbOlPr2m48cR0OWWAyoZ
zZMoqXv1BU4DewEeWIrWeyYcs3BRUQA/q5eevDJdnDmqcpQyI9+XSbCi119RQy/6
zGCDbJ/YhjbmSNB9KD0ONInPuFLbFxWg86kERgCH2KW+HlAkggWhAXgMtLUUmMLG
6XiaCh8FN4gNC0gz5epgl8S5I+FkknJ/JrWR9KttCvxf5U4EQTnIHmpt40VXvjev
SZF5x+/Zxj7ss1NcIPDku5Wilok9wUiGXBi5TvfLQ3xzRpkLiYSC1UOcj0bax54w
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:43 2024 by rpki-client on console-ams.rpki-client.org