Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/NlUzJkAtJHwSJRtKd7G5lzCdjLk.roa
File: NlUzJkAtJHwSJRtKd7G5lzCdjLk.roa (raw, json)
Hash identifier: pujurOFzHfsne9PDfYbOWPwXEvC6A/yuz1yD3R+KIsU=
Subject key identifier: 36:55:33:26:40:2D:24:7C:12:25:1B:4A:77:B1:B9:97:30:9D:8C:B9
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0194D636DAB26CDC1DE572804188879DD5BD
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/NlUzJkAtJHwSJRtKd7G5lzCdjLk.roa
Signing time: Wed 05 Feb 2025 13:05:06 +0000
ROA not before: Wed 05 Feb 2025 13:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 178.236.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:36:da:b2:6c:dc:1d:e5:72:80:41:88:87:9d:d5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Feb 5 13:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36553326402d247c12251b4a77b1b997309d8cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:db:4e:81:06:7f:1a:50:40:8e:ef:b5:ea:
a8:c4:f4:af:b1:d5:94:2f:ce:bb:d9:8c:cd:b9:53:
46:1b:4c:c8:86:2d:0f:8d:33:5b:8a:81:40:03:88:
fc:64:f3:45:18:59:91:bc:95:ab:eb:25:d0:53:cf:
89:90:ca:5e:ad:14:77:49:37:cd:ce:d3:5e:54:25:
7d:52:02:52:04:19:d2:52:d6:12:59:b8:57:26:e0:
ef:e4:43:3c:65:62:57:c9:76:a6:60:ec:8a:ba:10:
8a:c2:46:b9:84:72:a1:ab:15:5d:63:c8:e1:33:d2:
2a:2a:6c:73:5c:cb:64:89:d9:25:ce:9a:cf:72:ef:
c0:90:d4:be:79:68:03:18:3c:73:f2:89:86:d5:9c:
0f:c7:f8:09:f3:e4:8a:b5:66:85:56:78:e8:7b:10:
ee:e6:d2:6c:f8:86:f3:5d:5f:d8:cd:d5:2e:5a:ad:
c4:ad:b5:58:42:b1:b5:a3:e5:1c:75:f6:d5:8f:f6:
81:db:71:43:31:ac:d2:5e:3d:7c:e9:1c:9d:66:1e:
33:9c:96:5a:97:fb:05:43:b6:b5:5c:83:a7:4c:b3:
c2:c0:79:95:4b:cd:5a:bf:3c:2c:d9:59:36:eb:2d:
d2:df:eb:26:18:6f:11:94:84:9a:8f:a5:fa:04:cf:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:33:26:40:2D:24:7C:12:25:1B:4A:77:B1:B9:97:30:9D:8C:B9
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/NlUzJkAtJHwSJRtKd7G5lzCdjLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c7:5b:56:6e:26:96:a7:4f:38:e3:68:b8:dd:38:ed:47:17:
13:ba:1e:86:ff:94:87:e3:82:a1:74:24:b7:cb:bd:ea:90:02:
b5:f5:ad:e4:09:e6:a2:00:1a:b9:4a:74:3a:be:b7:52:82:6c:
5e:cc:78:56:30:62:b7:8d:4b:85:86:88:9e:82:fc:00:34:83:
9b:f4:9b:a7:6a:37:69:52:9d:14:98:1e:ce:6e:92:46:da:87:
40:36:ca:02:b2:9d:a7:9b:4b:8c:d6:d4:cb:d8:1d:95:17:28:
9a:67:9b:17:d7:3a:5f:79:0f:1b:c9:44:11:8d:24:9a:ca:5a:
71:ab:26:28:34:be:4b:6d:91:56:22:f3:d0:fe:69:f8:7c:1c:
1f:91:70:c1:fd:b5:15:27:0e:2c:4e:44:70:78:59:29:ec:21:
4f:b6:f4:39:01:37:c3:59:32:05:50:76:00:25:c4:91:6c:23:
02:ae:08:0f:4d:78:37:33:ac:02:4f:fb:f2:5c:11:21:f4:67:
89:60:06:b2:13:9c:91:1e:3c:f6:74:65:25:d9:75:49:68:c8:
38:b6:53:f0:84:78:de:30:e8:82:c4:e5:85:d7:f7:a4:43:83:
e8:f2:2e:31:ac:e6:32:20:c6:bb:eb:e1:61:f2:25:f2:a0:4e:
b9:4a:77:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTWNtqybNwd5XKAQYiHndW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjUwMjA1MTMwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjU1MzMyNjQwMmQyNDdjMTIyNTFiNGE3N2IxYjk5NzMwOWQ4Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPbToEGfxpQQI7vteqoxPSvsdWU
L8672YzNuVNGG0zIhi0PjTNbioFAA4j8ZPNFGFmRvJWr6yXQU8+JkMperRR3STfN
ztNeVCV9UgJSBBnSUtYSWbhXJuDv5EM8ZWJXyXamYOyKuhCKwka5hHKhqxVdY8jh
M9IqKmxzXMtkidklzprPcu/AkNS+eWgDGDxz8omG1ZwPx/gJ8+SKtWaFVnjoexDu
5tJs+IbzXV/YzdUuWq3ErbVYQrG1o+UcdfbVj/aB23FDMazSXj186RydZh4znJZa
l/sFQ7a1XIOnTLPCwHmVS81avzws2Vk26y3S3+smGG8RlISaj6X6BM9PQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZVMyZALSR8EiUbSnexuZcwnYy5MB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvTmxVekprQXRKSHdTSlJ0S2Q3RzVsekNkakxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuz8MA0G
CSqGSIb3DQEBCwUAA4IBAQCgx1tWbiaWp08442i43TjtRxcTuh6G/5SH44KhdCS3
y73qkAK19a3kCeaiABq5SnQ6vrdSgmxezHhWMGK3jUuFhoiegvwANIOb9Junajdp
Up0UmB7ObpJG2odANsoCsp2nm0uM1tTL2B2VFyiaZ5sX1zpfeQ8byUQRjSSaylpx
qyYoNL5LbZFWIvPQ/mn4fBwfkXDB/bUVJw4sTkRweFkp7CFPtvQ5ATfDWTIFUHYA
JcSRbCMCrggPTXg3M6wCT/vyXBEh9GeJYAayE5yRHjz2dGUl2XVJaMg4tlPwhHje
MOiCxOWF1/ekQ4Po8i4xrOYyIMa76+Fh8iXyoE65SnfR
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:32 2025 by rpki-client