Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/UrZiKbhMQKFAPWba3ngxbitw29o.roa
File: UrZiKbhMQKFAPWba3ngxbitw29o.roa (raw, json)
Hash identifier: ufKGAGF9ggNlRO05HKJuF9wjEocW5862/8UZ/KZGPTg=
Subject key identifier: 52:B6:62:29:B8:4C:40:A1:40:3D:66:DA:DE:78:31:6E:2B:70:DB:DA
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0194BC2DD1663CD87E83B19983DE4408EC6E
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/UrZiKbhMQKFAPWba3ngxbitw29o.roa
Signing time: Fri 31 Jan 2025 11:45:06 +0000
ROA not before: Fri 31 Jan 2025 11:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48448
IP address blocks: 45.85.73.0/24 maxlen: 24
202.14.113.0/24 maxlen: 24
203.33.38.0/24 maxlen: 24
2a0e:bb81::/48 maxlen: 48
2a0e:bb81:a1::/48 maxlen: 48
2a0e:bb81:b1::/48 maxlen: 48
2a0e:bb81:b2::/48 maxlen: 48
2a0e:bb81:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:2d:d1:66:3c:d8:7e:83:b1:99:83:de:44:08:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Jan 31 11:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b66229b84c40a1403d66dade78316e2b70dbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:2c:fd:55:a4:1d:75:69:59:0a:75:e9:76:
40:11:cb:c6:12:37:0a:d5:c6:5f:9f:b7:15:a0:5f:
5c:61:6f:97:be:54:f1:42:8c:a6:48:cb:66:d8:51:
bc:4a:ac:01:81:be:22:db:8a:fe:be:33:46:f1:83:
1f:84:3d:99:ea:5b:63:02:46:d3:ae:9a:c8:8b:0c:
e4:c4:55:2c:c4:49:d3:86:66:7f:83:9a:37:e4:67:
ea:62:e3:45:a5:f1:66:05:c9:f5:b8:c0:97:41:2f:
c8:3a:37:2a:d2:e2:2c:e8:eb:77:4e:6f:f5:14:28:
cb:71:fa:d5:4a:0c:fb:32:0f:81:6c:e7:b9:2b:ba:
e0:a4:c8:49:4d:44:03:e0:91:ea:e0:fc:af:b9:09:
cd:e2:0c:18:7e:f3:cb:fa:7a:76:3f:7d:b8:1f:59:
dc:e7:8a:f5:15:dd:3b:21:db:a2:e0:fe:27:29:35:
49:83:84:83:27:dd:af:b4:95:9d:dd:75:c4:dd:f2:
4c:f2:7d:59:8b:07:6a:38:c9:fd:85:dc:0e:1c:26:
33:11:f3:cb:1d:0f:5f:8e:3f:a7:cc:ee:b8:1e:fe:
72:61:32:b8:de:61:77:a5:ee:2c:d7:5d:14:5a:4d:
04:98:92:74:35:6e:c6:17:a8:bc:89:c7:c8:55:f2:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:62:29:B8:4C:40:A1:40:3D:66:DA:DE:78:31:6E:2B:70:DB:DA
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/UrZiKbhMQKFAPWba3ngxbitw29o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.73.0/24
202.14.113.0/24
203.33.38.0/24
IPv6:
2a0e:bb81::/48
2a0e:bb81:a1::/48
2a0e:bb81:b1::-2a0e:bb81:b2:ffff:ffff:ffff:ffff:ffff
2a0e:bb81:1000::/48
Signature Algorithm: sha256WithRSAEncryption
21:2b:e7:87:ee:b9:ad:f9:d9:78:39:a5:94:fe:c6:a9:1c:44:
27:c1:f5:50:e9:d9:39:b3:17:af:ea:7d:55:00:4a:ae:86:d9:
eb:31:3a:dc:3c:00:89:98:c6:56:cb:89:8d:d8:be:94:f7:3a:
6a:7d:25:04:c1:87:d1:9f:ae:90:14:13:bd:7f:74:37:52:c3:
d7:7b:76:c6:17:b4:fa:fe:df:20:b1:f3:ee:d1:5a:07:1b:07:
e1:10:af:d1:92:a0:22:1c:ca:b2:07:3d:3c:d7:ae:92:65:3f:
12:d5:60:09:86:31:8c:f9:c5:22:fb:5a:90:e5:8c:33:84:12:
81:26:30:6e:69:69:b8:ed:7a:82:65:e8:87:1f:09:e2:32:8a:
4e:b2:8c:ae:ed:60:bb:30:19:23:81:47:62:ec:6d:06:32:58:
6f:a2:be:d7:b3:5c:7c:ad:72:13:4e:4d:e4:79:ee:ba:5c:1b:
eb:ff:de:bb:6f:d0:0e:63:8b:b9:b9:8d:5f:24:5a:08:30:82:
2d:e6:25:bc:69:7d:9a:68:a5:bb:7e:8f:86:80:5c:c4:e4:c7:
06:92:44:b5:1a:28:18:54:e4:ba:23:5f:dd:67:e9:0c:7f:b9:
84:8f:e6:bd:f5:5d:fc:4a:10:24:76:26:be:44:9b:da:8d:86:
6d:65:7a:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAZS8LdFmPNh+g7GZg95ECOxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjUwMTMxMTE0NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmI2NjIyOWI4NGM0MGExNDAzZDY2ZGFkZTc4MzE2ZTJiNzBkYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x8s/VWkHXVpWQp16XZAEcvGEjcK
1cZfn7cVoF9cYW+XvlTxQoymSMtm2FG8SqwBgb4i24r+vjNG8YMfhD2Z6ltjAkbT
rprIiwzkxFUsxEnThmZ/g5o35GfqYuNFpfFmBcn1uMCXQS/IOjcq0uIs6Ot3Tm/1
FCjLcfrVSgz7Mg+BbOe5K7rgpMhJTUQD4JHq4PyvuQnN4gwYfvPL+np2P324H1nc
54r1Fd07Idui4P4nKTVJg4SDJ92vtJWd3XXE3fJM8n1ZiwdqOMn9hdwOHCYzEfPL
HQ9fjj+nzO64Hv5yYTK43mF3pe4s110UWk0EmJJ0NW7GF6i8icfIVfIlgQIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFFK2Yim4TEChQD1m2t54MW4rcNvaMB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvVXJaaUtiaE1RS0ZBUFdiYTNuZ3hiaXR3MjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAYBAIAATASAwQALVVJAwQA
yg5xAwQAyyEmMDUEAgACMC8DBwAqDruBAAADBwAqDruBAKEwEgMHACoOu4EAsQMH
ACoOu4EAsgMHACoOu4EQADANBgkqhkiG9w0BAQsFAAOCAQEAISvnh+65rfnZeDml
lP7GqRxEJ8H1UOnZObMXr+p9VQBKrobZ6zE63DwAiZjGVsuJjdi+lPc6an0lBMGH
0Z+ukBQTvX90N1LD13t2xhe0+v7fILHz7tFaBxsH4RCv0ZKgIhzKsgc9PNeukmU/
EtVgCYYxjPnFIvtakOWMM4QSgSYwbmlpuO16gmXohx8J4jKKTrKMru1guzAZI4FH
YuxtBjJYb6K+17NcfK1yE05N5Hnuulwb6//eu2/QDmOLubmNXyRaCDCCLeYlvGl9
mmilu36PhoBcxOTHBpJEtRooGFTkuiNf3WfpDH+5hI/mvfVd/EoQJHYmvkSb2o2G
bWV6gA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:42:49 2025 by rpki-client