Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/grkiyNrBsZFvA41Z_BZuZwQjbk0.roa
File: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (raw, json)
Hash identifier: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=
Subject key identifier: 82:B9:22:C8:DA:C1:B1:91:6F:03:8D:59:FC:16:6E:67:04:23:6E:4D
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 01941FFAA150FD7CFFB5BCBDE06B116E6382
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/grkiyNrBsZFvA41Z_BZuZwQjbk0.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56450
IP address blocks: 46.229.112.0/20 maxlen: 20
46.229.122.0/23 maxlen: 23
2a04:4880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:50:fd:7c:ff:b5:bc:bd:e0:6b:11:6e:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b922c8dac1b1916f038d59fc166e6704236e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:df:88:cf:f6:2c:2d:ce:9f:b2:d0:61:65:
3f:a0:f0:5a:c0:16:32:de:80:71:b5:45:30:67:5b:
2e:ff:47:70:86:69:ca:5e:02:ec:3a:76:fe:d3:f4:
4b:1e:2c:b6:ec:45:8b:2d:44:2f:2b:b8:14:b9:ff:
bf:39:46:29:03:2b:ac:1c:8d:0d:2c:16:1d:0f:33:
ff:da:98:f0:aa:32:35:ae:e6:6b:52:c5:83:73:47:
31:36:ae:26:0d:4c:5c:f7:fd:31:31:5f:2a:16:f5:
e7:33:16:07:f7:b4:e1:46:fa:83:13:33:1e:80:ff:
5c:6d:2f:a0:f3:53:c2:1a:ec:fa:38:95:99:ec:fd:
b9:d7:17:08:d5:67:74:12:0e:51:dc:73:ab:0d:50:
06:e9:fa:33:b3:0f:1d:b9:bd:ad:e3:5b:3d:3a:5d:
1a:87:7a:33:87:26:c5:8f:9e:60:d0:25:d9:61:fe:
fc:15:f3:f6:c0:03:22:01:fc:a9:26:98:40:3e:cd:
ed:a5:b3:b0:b2:81:28:50:b5:21:be:50:d4:35:35:
45:e3:47:f2:6f:e3:f5:5d:93:21:54:7f:e8:be:75:
c4:7a:ca:60:7d:6d:1c:e8:b3:61:cf:b0:2c:33:91:
2f:45:ac:54:c8:71:55:b5:70:38:9a:84:df:d6:74:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:22:C8:DA:C1:B1:91:6F:03:8D:59:FC:16:6E:67:04:23:6E:4D
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/grkiyNrBsZFvA41Z_BZuZwQjbk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.112.0/20
IPv6:
2a04:4880::/29
Signature Algorithm: sha256WithRSAEncryption
42:05:06:97:f4:27:d7:e5:d0:97:e2:46:55:e4:b7:a7:14:3e:
07:ed:57:44:33:68:e0:13:be:38:7b:0d:3b:09:99:5e:98:ce:
bd:d4:cf:37:8b:69:b5:3c:d4:18:36:d4:78:26:2e:3c:31:54:
39:80:af:f7:c8:23:79:19:34:e2:e0:65:f9:98:27:27:da:0a:
61:ac:13:e3:a9:da:93:40:f0:79:85:ce:b5:82:55:2d:ae:b2:
94:f6:8e:5e:a3:31:13:ec:85:86:c0:6d:a7:6f:b4:af:8e:0b:
1e:37:ea:71:f2:c4:23:69:d2:f6:87:27:52:fa:be:71:a5:84:
ec:07:27:8b:1d:fc:a2:3f:dd:70:bc:e6:6f:c8:fe:fd:53:42:
bd:f9:be:bc:2b:cf:bc:e2:56:86:3c:4a:be:e8:34:36:e2:3e:
c0:3d:07:7a:96:7c:b2:a4:3b:21:63:c7:f0:36:88:81:20:50:
6f:8d:6a:29:b9:e1:3e:4c:db:b1:20:90:98:fd:08:a5:00:9c:
fe:b1:27:eb:a1:ba:bc:67:89:17:ba:8f:50:ad:b4:7d:4f:59:
5f:0a:72:3a:98:cd:92:1a:62:27:57:6d:21:34:88:0e:f3:a8:
b1:3f:15:6c:07:4b:5b:aa:f3:77:b3:ba:21:74:ee:86:ec:b8:
6d:a6:b0:9b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+qFQ/Xz/tby94GsRbmOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDY5OTAxNGE1NTUyNzNlZDNhYmIxNzA4NmFhZTNmMDJm
ZjlhMGYwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmI5MjJjOGRhYzFiMTkxNmYwMzhkNTlmYzE2NmU2NzA0MjM2ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBXfiM/2LC3On7LQYWU/oPBawBYy
3oBxtUUwZ1su/0dwhmnKXgLsOnb+0/RLHiy27EWLLUQvK7gUuf+/OUYpAyusHI0N
LBYdDzP/2pjwqjI1ruZrUsWDc0cxNq4mDUxc9/0xMV8qFvXnMxYH97ThRvqDEzMe
gP9cbS+g81PCGuz6OJWZ7P251xcI1Wd0Eg5R3HOrDVAG6fozsw8dub2t41s9Ol0a
h3ozhybFj55g0CXZYf78FfP2wAMiAfypJphAPs3tpbOwsoEoULUhvlDUNTVF40fy
b+P1XZMhVH/ovnXEespgfW0c6LNhz7AsM5EvRaxUyHFVtXA4moTf1nSS5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIK5IsjawbGRbwONWfwWbmcEI25NMB8GA1UdIwQY
MBaAFLjWmQFKVVJz7Tq7Fwhqrj8C/5oPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUt
YjJkNzlhZTQ5NjQ2LzEvZ3JraXlOckJzWkZ2QTQxWl9CWnVad1FqYmswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUtYjJkNzlhZTQ5NjQ2
LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELuVwMA0E
AgACMAcDBQMqBEiAMA0GCSqGSIb3DQEBCwUAA4IBAQBCBQaX9CfX5dCX4kZV5Len
FD4H7VdEM2jgE744ew07CZlemM691M83i2m1PNQYNtR4Ji48MVQ5gK/3yCN5GTTi
4GX5mCcn2gphrBPjqdqTQPB5hc61glUtrrKU9o5eozET7IWGwG2nb7SvjgseN+px
8sQjadL2hydS+r5xpYTsByeLHfyiP91wvOZvyP79U0K9+b68K8+84laGPEq+6DQ2
4j7APQd6lnyypDshY8fwNoiBIFBvjWopueE+TNuxIJCY/QilAJz+sSfrobq8Z4kX
uo9QrbR9T1lfCnI6mM2SGmInV20hNIgO86ixPxVsB0tbqvN3s7ohdO6G7LhtprCb
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:11:41 2025 by rpki-client