Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ughqIsnOTD5Zz44ulopOtupjZ_c.roa
File: ughqIsnOTD5Zz44ulopOtupjZ_c.roa (raw, json)
Hash identifier: AHIJUI+6IAcOUWusuSblIZHiCzN0SMgF1nvey3MUAzU=
Subject key identifier: BA:08:6A:22:C9:CE:4C:3E:59:CF:8E:2E:96:8A:4E:B6:EA:63:67:F7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0196965F4EA54554645AF25B2D405CEFEC7E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ughqIsnOTD5Zz44ulopOtupjZ_c.roa
Signing time: Sat 03 May 2025 13:39:10 +0000
ROA not before: Sat 03 May 2025 13:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39831
IP address blocks: 201.77.57.0/24 maxlen: 24
2a05:4380::/32 maxlen: 32
2a0a:e9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:5f:4e:a5:45:54:64:5a:f2:5b:2d:40:5c:ef:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 3 13:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba086a22c9ce4c3e59cf8e2e968a4eb6ea6367f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:bd:8b:1d:0d:97:a1:b3:e1:91:ae:f6:dd:
09:b2:1d:aa:76:14:50:53:a1:44:28:bd:70:27:7a:
3c:3e:65:e5:fc:a2:0c:88:44:a3:30:5e:25:9c:b7:
ef:d9:1c:09:ae:08:a2:0d:3e:45:9c:24:b3:b4:8d:
7d:0e:a2:96:da:21:35:b0:57:c1:61:e8:6e:1b:80:
20:cc:d8:cb:0e:41:92:0b:24:f3:b8:d0:54:b0:0e:
f7:99:71:18:4b:3b:28:c3:e9:07:92:d4:18:5e:d2:
01:1f:25:eb:2c:c9:db:4e:48:11:39:b6:80:ee:90:
ee:ff:3e:a6:b7:ac:ef:2e:d5:6a:5b:21:77:68:6c:
f2:2c:fa:d4:28:d8:37:bc:5b:39:1c:d9:db:ba:56:
ae:d9:46:79:2a:55:0c:68:79:3d:70:15:ad:8d:97:
ed:08:f6:34:58:56:6a:a2:09:ef:9d:cd:0e:81:11:
d9:6f:19:aa:c6:90:e0:14:36:69:f7:92:4b:49:d1:
29:f9:1a:8a:e4:3b:76:be:63:4b:52:3c:27:3a:0c:
35:d6:53:86:22:25:9a:5f:72:ed:e0:23:ed:81:c1:
9b:02:76:79:c8:34:33:96:b5:7f:fc:b9:35:60:eb:
db:1b:63:0a:dd:c6:95:a4:0e:98:ee:bc:fa:86:2d:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:6A:22:C9:CE:4C:3E:59:CF:8E:2E:96:8A:4E:B6:EA:63:67:F7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ughqIsnOTD5Zz44ulopOtupjZ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.57.0/24
IPv6:
2a05:4380::/32
2a0a:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
25:de:67:ed:25:5c:0c:8d:88:69:df:88:07:2e:5b:3f:ba:df:
c8:82:63:e0:16:2a:b5:cf:7e:8f:47:24:7b:0e:ab:e4:87:46:
16:36:6c:74:3f:b0:d8:95:a1:af:cf:b0:42:cf:29:ac:71:c4:
f2:bc:02:ca:ae:08:12:17:56:53:a9:15:a9:c1:0c:37:17:5a:
3d:32:aa:f7:d8:88:00:81:52:ee:8d:e1:dc:9b:5d:8f:fe:71:
d1:f2:dd:a5:b1:1a:34:0f:95:b3:1d:2e:7b:5c:eb:29:90:73:
17:09:3e:87:7a:dc:c1:f8:06:bd:b2:de:e1:74:c5:a2:5b:ea:
c7:13:f6:c6:e6:bd:f7:a5:bb:e8:27:ba:7a:79:ed:06:e2:3d:
b7:e0:73:a9:92:29:bd:c0:01:18:19:12:d1:80:20:27:21:a7:
e1:d5:bb:b4:83:83:dd:66:2a:7c:12:ba:db:33:5a:4b:b9:d8:
42:15:f6:84:7f:35:07:9f:3f:39:77:66:5d:bb:be:f5:5a:a1:
8a:29:fa:22:fc:7d:f3:28:18:5c:2f:29:76:6e:62:fa:17:87:
fc:c0:e7:02:21:db:a7:91:c4:b3:2b:6c:d1:e1:09:d7:8c:c9:
de:37:03:08:7d:ed:13:16:32:31:7d:96:b3:b6:a4:18:1d:d2:
76:05:4c:7a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZaWX06lRVRkWvJbLUBc7+x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwNTAzMTMzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTA4NmEyMmM5Y2U0YzNlNTljZjhlMmU5NjhhNGViNmVhNjM2N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTG9ix0Nl6Gz4ZGu9t0Jsh2qdhRQ
U6FEKL1wJ3o8PmXl/KIMiESjMF4lnLfv2RwJrgiiDT5FnCSztI19DqKW2iE1sFfB
YehuG4AgzNjLDkGSCyTzuNBUsA73mXEYSzsow+kHktQYXtIBHyXrLMnbTkgRObaA
7pDu/z6mt6zvLtVqWyF3aGzyLPrUKNg3vFs5HNnbulau2UZ5KlUMaHk9cBWtjZft
CPY0WFZqognvnc0OgRHZbxmqxpDgFDZp95JLSdEp+RqK5Dt2vmNLUjwnOgw11lOG
IiWaX3Lt4CPtgcGbAnZ5yDQzlrV//Lk1YOvbG2MK3caVpA6Y7rz6hi0VVwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLoIaiLJzkw+Wc+OLpaKTrbqY2f3MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvdWdocUlzbk9URDVaejQ0dWxvcE90dXBqWl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAyU05MBQE
AgACMA4DBQAqBUOAAwUAKgrpwDANBgkqhkiG9w0BAQsFAAOCAQEAJd5n7SVcDI2I
ad+IBy5bP7rfyIJj4BYqtc9+j0ckew6r5IdGFjZsdD+w2JWhr8+wQs8prHHE8rwC
yq4IEhdWU6kVqcEMNxdaPTKq99iIAIFS7o3h3Jtdj/5x0fLdpbEaNA+Vsx0ue1zr
KZBzFwk+h3rcwfgGvbLe4XTFolvqxxP2xua996W76Ce6enntBuI9t+BzqZIpvcAB
GBkS0YAgJyGn4dW7tIOD3WYqfBK62zNaS7nYQhX2hH81B58/OXdmXbu+9Vqhiin6
Ivx98ygYXC8pdm5i+heH/MDnAiHbp5HEsyts0eEJ14zJ3jcDCH3tExYyMX2Ws7ak
GB3SdgVMeg==
-----END CERTIFICATE-----
Generated at Sat May 10 19:43:14 2025 by rpki-client