Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/nEwu5TmmWrj9UATGJds44UGD1Ts.roa
File: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (raw, json)
Hash identifier: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=
Subject key identifier: 9C:4C:2E:E5:39:A6:5A:B8:FD:50:04:C6:25:DB:38:E1:41:83:D5:3B
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019427476406CF1AA510CF115D812BC1E372
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/nEwu5TmmWrj9UATGJds44UGD1Ts.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 185.162.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:64:06:cf:1a:a5:10:cf:11:5d:81:2b:c1:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4c2ee539a65ab8fd5004c625db38e14183d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:4a:4d:04:ad:1e:3a:93:4b:00:8c:92:75:
a3:68:5d:13:c7:b7:74:63:aa:f7:d9:68:65:90:27:
5d:0b:8d:f9:3c:41:c7:56:24:30:b3:b4:ac:23:73:
60:8d:f4:93:a5:4f:b0:73:83:6e:63:1a:9b:6f:c9:
fb:d8:4e:2d:9e:96:aa:e0:72:ab:0a:e4:eb:13:74:
ec:0e:34:35:53:63:62:80:36:13:3c:92:47:55:46:
4b:fc:b3:cc:a7:d4:3d:f1:27:0e:ed:3c:7e:26:7c:
87:0f:4d:e6:92:f4:e6:e2:f8:5e:13:23:fd:be:ba:
8e:80:95:64:c8:7c:41:a2:a9:94:7c:68:f7:64:55:
05:01:53:36:39:54:dc:f4:68:f9:19:44:69:6e:2e:
f6:60:15:d7:e9:e4:18:01:74:03:77:c0:da:f3:b3:
79:d5:02:40:18:4f:d9:fd:b0:f5:a8:0f:3d:fe:15:
e2:a4:bd:70:e7:9d:fe:ee:3f:7f:44:a0:8d:75:4a:
cc:15:bd:7d:56:d6:6a:b2:db:49:e8:2b:4a:a7:50:
f2:07:78:34:79:41:2c:51:dd:81:a3:d5:cc:ac:52:
cb:af:a7:3a:e9:aa:f6:e4:69:c1:bc:28:b0:d6:1a:
e4:33:01:47:14:2f:42:fb:97:84:05:12:4e:ad:fa:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:2E:E5:39:A6:5A:B8:FD:50:04:C6:25:DB:38:E1:41:83:D5:3B
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/nEwu5TmmWrj9UATGJds44UGD1Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.104.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fe:b2:59:78:b2:80:73:b2:97:35:e5:54:1d:4a:f7:d3:38:
ce:85:0b:19:fa:61:9a:7b:cf:5f:4e:86:10:97:91:71:7c:5f:
87:ac:34:fa:ff:68:c8:ec:78:d0:5a:82:40:ea:5c:17:c7:24:
57:b0:04:72:1a:85:05:63:73:70:3a:46:85:e1:a4:f7:b1:4d:
60:3b:b0:2f:dd:02:60:0a:26:fc:e9:e0:bc:47:17:e3:f9:14:
12:ee:73:ab:7d:f1:0e:e3:6c:f5:ac:10:7c:ee:5f:f0:bd:f9:
f8:17:77:bc:95:e2:d3:29:d0:e3:92:a2:dc:cb:da:7f:52:5d:
d5:51:54:7b:a2:8f:cf:00:9c:f7:99:1f:29:bc:f6:f5:55:f9:
6e:ae:7b:ad:65:24:0d:c7:09:58:ce:d3:89:d5:54:a5:2c:43:
7b:74:fb:11:18:4f:24:f5:b4:fd:19:83:5b:1c:a6:52:9b:23:
af:20:1a:ea:11:6b:c7:2a:71:dc:5b:50:3c:40:9a:67:7d:1a:
15:ef:66:a7:86:39:e3:a8:95:10:b9:58:d2:09:03:9e:79:01:
8d:11:31:71:a2:11:aa:30:2b:a3:7e:26:2e:f3:6e:9d:84:bb:
e7:48:80:64:54:b7:7a:fe:ad:93:02:12:20:44:94:71:29:88:
f6:19:95:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR2QGzxqlEM8RXYErweNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njc1OGJlYTY4ZjA4MjVjZjE2ZTY2ZmIwMmVlN2JjYTQ1
NGJhZTIwHhcNMjUwMTAyMTM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzRjMmVlNTM5YTY1YWI4ZmQ1MDA0YzYyNWRiMzhlMTQxODNkNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoulKTQStHjqTSwCMknWjaF0Tx7d0
Y6r32WhlkCddC435PEHHViQws7SsI3NgjfSTpU+wc4NuYxqbb8n72E4tnpaq4HKr
CuTrE3TsDjQ1U2NigDYTPJJHVUZL/LPMp9Q98ScO7Tx+JnyHD03mkvTm4vheEyP9
vrqOgJVkyHxBoqmUfGj3ZFUFAVM2OVTc9Gj5GURpbi72YBXX6eQYAXQDd8Da87N5
1QJAGE/Z/bD1qA89/hXipL1w553+7j9/RKCNdUrMFb19VtZqsttJ6CtKp1DyB3g0
eUEsUd2Bo9XMrFLLr6c66ar25GnBvCiw1hrkMwFHFC9C+5eEBRJOrfo6nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxMLuU5plq4/VAExiXbOOFBg9U7MB8GA1UdIwQY
MBaAFHhnWL6mjwglzxbmb7Au57ykVLriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEt
ZWVkNDVjOTM3NzVlLzEvbkV3dTVUbW1Xcmo5VUFUR0pkczQ0VUdEMVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ODNmNTItMDM0ZC00NmQzLWIwMzEtZWVkNDVjOTM3NzVl
LzEvZUdkWXZxYVBDQ1hQRnVadnNDN252S1JVdXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaJoMA0G
CSqGSIb3DQEBCwUAA4IBAQCH/rJZeLKAc7KXNeVUHUr30zjOhQsZ+mGae89fToYQ
l5FxfF+HrDT6/2jI7HjQWoJA6lwXxyRXsARyGoUFY3NwOkaF4aT3sU1gO7Av3QJg
Cib86eC8Rxfj+RQS7nOrffEO42z1rBB87l/wvfn4F3e8leLTKdDjkqLcy9p/Ul3V
UVR7oo/PAJz3mR8pvPb1VflurnutZSQNxwlYztOJ1VSlLEN7dPsRGE8k9bT9GYNb
HKZSmyOvIBrqEWvHKnHcW1A8QJpnfRoV72anhjnjqJUQuVjSCQOeeQGNETFxohGq
MCujfiYu826dhLvnSIBkVLd6/q2TAhIgRJRxKYj2GZWA
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:30 2025 by rpki-client