Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa
File: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (raw, json)
Hash identifier: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=
Subject key identifier: 54:45:36:5F:1F:D6:EE:85:EE:AC:CD:C1:3F:DB:C8:29:90:8C:1B:8A
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01942521F182BD02ECF8EC06C071F42EE0E4
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58024
IP address blocks: 77.105.145.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
84.54.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f1:82:bd:02:ec:f8:ec:06:c0:71:f4:2e:e0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5445365f1fd6ee85eeaccdc13fdbc829908c1b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:e6:f4:f1:28:e2:a4:2d:f7:05:0a:e4:a8:
54:de:39:a0:bc:45:1e:09:91:21:e3:03:42:42:aa:
8d:1b:10:35:cb:d7:1e:c7:3c:04:d9:1d:e0:98:ff:
c9:00:f9:62:8f:8b:b2:9f:36:77:f7:b2:cf:ea:9c:
96:e0:d4:97:8a:11:77:44:d2:de:f5:96:4f:3f:9c:
a1:8b:4e:d2:24:11:d3:aa:6a:5c:ca:c8:32:7e:f4:
3b:2d:e5:17:79:73:23:fe:2e:99:9a:38:8a:56:60:
39:f3:39:42:da:35:d2:1e:ff:53:f5:ca:30:6b:50:
24:a6:a7:0d:92:4d:fc:b5:aa:af:7b:f2:6c:33:4e:
77:04:eb:92:71:86:46:f9:1c:76:17:22:37:a8:3e:
df:86:e3:39:3c:8e:51:b2:39:f7:72:90:47:7c:46:
f1:a8:3d:88:6d:2a:c2:9a:63:a1:12:22:95:2e:73:
09:bd:62:79:2e:46:b9:10:3d:5e:f4:14:c3:54:a7:
48:3e:ab:be:43:cd:9f:40:9a:ec:4a:30:d0:34:03:
c2:a8:47:95:7b:2f:38:49:b6:7a:bd:1f:e6:5d:d6:
bb:68:ac:e1:e7:db:17:db:9e:ea:09:61:db:23:e3:
1e:63:6d:a3:1b:a0:c3:56:99:e9:98:c6:43:62:6e:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:36:5F:1F:D6:EE:85:EE:AC:CD:C1:3F:DB:C8:29:90:8C:1B:8A
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.145.0/24
77.105.165.0/24
84.54.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b8:d8:43:1c:cc:1b:6f:4c:b5:d2:1c:7a:d0:3a:70:9e:25:
38:4a:8e:1d:2c:d8:39:7b:91:55:fe:42:05:6d:d4:aa:48:8f:
34:f9:77:96:cd:53:0b:a6:63:64:f7:95:b6:a0:90:7d:7b:56:
68:86:0b:58:39:fb:29:3a:86:38:7f:df:3d:2a:d7:a2:9f:21:
b4:c3:b8:37:83:57:de:cc:6f:59:77:0d:5c:71:e6:f4:db:64:
c7:25:c8:25:db:0f:52:c7:67:44:d4:5a:61:86:fd:df:52:01:
98:78:1a:32:11:fd:d1:21:85:ca:da:a5:ae:a5:8d:71:e4:16:
70:63:a7:53:b1:94:78:b9:24:9a:2e:9a:b0:24:48:ec:1f:ea:
cb:ed:cb:c5:44:56:d3:aa:b3:32:f8:70:73:e1:30:1c:f1:5a:
66:62:66:03:86:bd:7e:70:0d:b7:2c:3b:09:f9:b0:a9:23:48:
dc:39:52:3f:cb:ae:06:9b:7d:85:73:dd:75:09:30:f4:86:81:
36:8e:3e:bc:51:ba:27:fa:89:11:95:35:72:6a:d8:19:e5:01:
39:0b:7a:eb:a5:24:0c:58:ba:9a:d7:a8:db:2a:ee:01:51:78:
7d:f2:ef:7a:c0:f8:66:07:d8:c4:44:1b:9b:e1:cf:a4:7f:ac:
7b:75:7a:b3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIfGCvQLs+OwGwHH0LuDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjUwMTAyMDM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ1MzY1ZjFmZDZlZTg1ZWVhY2NkYzEzZmRiYzgyOTkwOGMxYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil7m9PEo4qQt9wUK5KhU3jmgvEUe
CZEh4wNCQqqNGxA1y9cexzwE2R3gmP/JAPlij4uynzZ397LP6pyW4NSXihF3RNLe
9ZZPP5yhi07SJBHTqmpcysgyfvQ7LeUXeXMj/i6ZmjiKVmA58zlC2jXSHv9T9cow
a1AkpqcNkk38taqve/JsM053BOuScYZG+Rx2FyI3qD7fhuM5PI5Rsjn3cpBHfEbx
qD2IbSrCmmOhEiKVLnMJvWJ5Lka5ED1e9BTDVKdIPqu+Q82fQJrsSjDQNAPCqEeV
ey84SbZ6vR/mXda7aKzh59sX257qCWHbI+MeY22jG6DDVpnpmMZDYm7RfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFRFNl8f1u6F7qzNwT/byCmQjBuKMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvVkVVMlh4X1c3b1h1ck0zQlA5dklLWkNNRzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATWmRAwQA
TWmlAwQAVDYuMA0GCSqGSIb3DQEBCwUAA4IBAQBeuNhDHMwbb0y10hx60DpwniU4
So4dLNg5e5FV/kIFbdSqSI80+XeWzVMLpmNk95W2oJB9e1ZohgtYOfspOoY4f989
KteinyG0w7g3g1fezG9Zdw1cceb022THJcgl2w9Sx2dE1Fphhv3fUgGYeBoyEf3R
IYXK2qWupY1x5BZwY6dTsZR4uSSaLpqwJEjsH+rL7cvFRFbTqrMy+HBz4TAc8Vpm
YmYDhr1+cA23LDsJ+bCpI0jcOVI/y64Gm32Fc911CTD0hoE2jj68Ubon+okRlTVy
atgZ5QE5C3rrpSQMWLqa16jbKu4BUXh98u96wPhmB9jERBub4c+kf6x7dXqz
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:20 2025 by rpki-client