Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa
File: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (raw, json)
Hash identifier: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=
Subject key identifier: 36:E6:98:74:8F:0F:01:47:4F:E6:B6:48:0D:EF:DA:1C:8C:6F:0C:6D
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 0194266B3963B2A14C0E6191F8BCDB98BE64
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa
Signing time: Thu 02 Jan 2025 09:49:08 +0000
ROA not before: Thu 02 Jan 2025 09:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52214
IP address blocks: 46.226.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:39:63:b2:a1:4c:0e:61:91:f8:bc:db:98:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36e698748f0f01474fe6b6480defda1c8c6f0c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:cc:eb:07:94:52:ca:d8:b9:68:33:99:87:
71:bd:b8:bb:ae:13:3e:6d:5d:eb:ad:75:a2:c8:45:
d9:e5:80:af:e1:82:1e:45:4a:f5:bc:32:55:b7:c8:
72:c1:1a:cb:e2:c9:58:be:9a:c3:9b:26:67:ed:5e:
64:10:43:f5:d6:29:56:2e:19:1a:7a:ab:2b:76:dc:
17:4c:bb:ae:08:ea:da:72:60:4f:03:49:36:e6:78:
1e:1f:10:bf:4e:19:c1:9e:4b:07:12:2d:c3:80:a6:
15:f3:b5:f1:74:7e:db:0b:86:17:d7:da:65:02:e4:
63:bb:24:c1:28:ea:bf:11:d9:01:79:ab:b4:5d:57:
6a:61:fc:09:70:fa:ec:a5:cd:b1:10:8a:e9:58:40:
78:86:79:c6:f2:8c:d7:b5:3c:ce:3a:7c:d7:28:ca:
34:8a:fa:56:4f:9e:e8:69:5c:ef:7c:a7:22:76:75:
86:28:8a:3c:07:75:92:f9:75:a1:32:ee:ee:6b:38:
65:48:52:63:87:ff:1d:72:73:f7:72:5a:17:7a:b6:
52:66:d1:dc:f9:f3:99:09:28:fa:76:ef:4d:30:5d:
86:e2:a1:c6:7f:e4:36:96:89:89:d2:56:a5:7d:5e:
96:0a:96:3a:77:3e:0b:69:41:9d:db:f8:70:59:1e:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:98:74:8F:0F:01:47:4F:E6:B6:48:0D:EF:DA:1C:8C:6F:0C:6D
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.210.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7f:c8:b4:d5:a3:17:c4:b6:03:26:3f:91:89:20:f3:de:3d:
39:7b:5c:1e:11:75:f5:7e:24:0f:78:cb:d3:ee:2e:12:77:2e:
bc:dd:38:1d:d0:d5:aa:db:b1:f6:a9:41:bd:3c:51:db:78:7e:
c7:bd:a1:ec:bc:9f:02:a7:a4:c5:e0:c0:0e:d5:16:06:b1:7e:
98:9e:2a:58:07:16:db:38:31:7a:92:08:b6:ea:3d:6c:67:b2:
3f:a8:6c:21:15:ab:cd:ae:56:dc:12:23:a4:4c:89:d7:5e:23:
82:e7:b0:e1:27:e3:d7:a9:cd:4b:ce:f0:4a:79:e9:48:00:7c:
e2:71:12:23:70:bf:b9:96:e1:1f:e8:d6:a0:69:55:e5:e7:d1:
34:06:2a:1b:de:c4:3d:3b:dd:96:31:fb:5b:90:42:76:d1:da:
ef:a4:2a:80:c3:90:c5:4f:1f:1c:85:0b:59:21:bd:97:b2:f2:
e2:49:d7:a5:25:d6:2b:e5:db:d6:2b:c8:48:d4:b9:9f:a7:e9:
1f:70:78:1b:00:02:36:e2:03:cf:76:64:e1:6c:1b:d0:0c:15:
9c:8d:5b:a1:fb:95:9c:60:dd:97:36:01:6e:11:6b:2c:0e:8b:
a6:ed:b6:f8:59:e7:07:17:98:5a:f6:f8:84:20:97:8c:84:30:
09:5b:37:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmazljsqFMDmGR+LzbmL5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1
MTA5NzIwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU2OTg3NDhmMGYwMTQ3NGZlNmI2NDgwZGVmZGExYzhjNmYwYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxADM6weUUsrYuWgzmYdxvbi7rhM+
bV3rrXWiyEXZ5YCv4YIeRUr1vDJVt8hywRrL4slYvprDmyZn7V5kEEP11ilWLhka
eqsrdtwXTLuuCOracmBPA0k25ngeHxC/ThnBnksHEi3DgKYV87XxdH7bC4YX19pl
AuRjuyTBKOq/EdkBeau0XVdqYfwJcPrspc2xEIrpWEB4hnnG8ozXtTzOOnzXKMo0
ivpWT57oaVzvfKcidnWGKIo8B3WS+XWhMu7uazhlSFJjh/8dcnP3cloXerZSZtHc
+fOZCSj6du9NMF2G4qHGf+Q2lomJ0lalfV6WCpY6dz4LaUGd2/hwWR6xtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDbmmHSPDwFHT+a2SA3v2hyMbwxtMB8GA1UdIwQY
MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt
ZDNjNTVkNGZkYTlkLzEvTnVhWWRJOFBBVWRQNXJaSURlX2FISXh2REcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk
LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuLSMA0G
CSqGSIb3DQEBCwUAA4IBAQADf8i01aMXxLYDJj+RiSDz3j05e1weEXX1fiQPeMvT
7i4Sdy683Tgd0NWq27H2qUG9PFHbeH7HvaHsvJ8Cp6TF4MAO1RYGsX6YnipYBxbb
ODF6kgi26j1sZ7I/qGwhFavNrlbcEiOkTInXXiOC57DhJ+PXqc1LzvBKeelIAHzi
cRIjcL+5luEf6NagaVXl59E0Biob3sQ9O92WMftbkEJ20drvpCqAw5DFTx8chQtZ
Ib2XsvLiSdelJdYr5dvWK8hI1Lmfp+kfcHgbAAI24gPPdmThbBvQDBWcjVuh+5Wc
YN2XNgFuEWssDoum7bb4WecHF5ha9viEIJeMhDAJWzdR
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:12 2025 by rpki-client