Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/8VKbbYixNDCpMWrK8Sk18PBt9UI.roa
File: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (raw, json)
Hash identifier: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=
Subject key identifier: F1:52:9B:6D:88:B1:34:30:A9:31:6A:CA:F1:29:35:F0:F0:6D:F5:42
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019427B5AE8B2F3207B10881E15602E3AAC7
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/8VKbbYixNDCpMWrK8Sk18PBt9UI.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50618
IP address blocks: 178.20.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ae:8b:2f:32:07:b1:08:81:e1:56:02:e3:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1529b6d88b13430a9316acaf12935f0f06df542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:dd:8f:84:55:9e:98:51:97:1e:1f:b8:8f:
15:aa:e3:63:07:8a:8d:73:e5:37:a0:ab:f7:ec:7e:
c0:f4:1b:97:db:b5:35:8d:a7:bb:34:13:d5:81:50:
eb:ae:ef:8a:05:59:5e:5c:9e:11:6d:f2:7b:d5:fc:
6d:06:c1:2c:81:a6:42:c1:3b:bc:28:cd:24:1f:7c:
40:6c:75:c7:7f:b2:2b:0a:ad:7a:6d:a3:08:a3:3a:
1a:f5:af:bd:e1:c4:71:64:da:e2:f4:6f:63:1b:ea:
9a:03:8e:69:40:56:e1:cb:53:54:9f:8e:bd:5a:4e:
a3:18:6a:cb:f8:34:f0:55:cd:d4:4c:b7:54:50:36:
06:11:6b:10:9e:23:80:f8:b8:95:be:ff:d7:4f:2b:
64:5c:c0:c9:c5:01:c1:28:9e:de:6f:c5:c1:34:34:
68:8d:b4:8d:61:0b:b7:83:26:4f:9c:44:86:dd:98:
a1:9f:5e:60:0f:e4:bb:aa:61:15:59:29:16:ff:b3:
2d:c7:c6:c5:f4:c1:a9:e4:fd:42:48:31:0b:77:f4:
0a:16:a1:3c:9e:9e:46:30:09:70:73:fa:c0:21:79:
49:7f:05:69:10:48:06:64:e5:e0:8d:69:74:57:0a:
fe:63:99:0e:9f:ca:82:f4:9d:8e:5b:cc:8c:02:45:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:9B:6D:88:B1:34:30:A9:31:6A:CA:F1:29:35:F0:F0:6D:F5:42
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/8VKbbYixNDCpMWrK8Sk18PBt9UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cf:53:18:62:99:9f:c2:fd:a6:bf:20:35:25:8f:68:93:5a:
3e:df:e7:38:18:4a:4e:7b:bf:51:f5:80:b3:11:d8:63:75:a9:
b4:b4:a0:d1:ab:34:32:f0:98:f4:29:01:a1:3a:e9:8f:c1:73:
4f:6d:bd:77:1a:9c:16:95:61:59:d4:dd:fe:59:b4:af:16:5f:
f4:a1:45:d3:9e:42:22:1c:de:86:e5:b3:69:66:b3:2b:60:49:
4d:21:ff:20:63:26:96:da:83:ea:69:97:fc:51:46:a5:08:62:
1e:ee:f0:96:02:24:2e:36:5c:ef:2b:e1:ad:b3:98:14:34:86:
85:4c:45:a6:67:be:bc:79:97:6b:ec:24:7e:f5:70:77:80:9d:
3d:3e:f2:9f:9a:7a:22:1b:82:2b:5c:fa:b8:0b:0b:7f:56:eb:
0c:97:80:95:a0:4d:be:c7:e2:05:ba:5f:74:b0:ac:46:13:cb:
41:fe:51:2f:29:fd:ae:0a:0c:43:49:cc:c8:d3:22:55:53:9f:
b8:86:1f:91:14:52:e6:8f:9f:28:3b:36:0a:37:90:19:5a:b9:
18:7e:d3:bd:58:04:98:8b:35:e7:60:a7:2a:64:cf:8c:61:51:
ed:07:65:50:f7:80:7d:58:28:a7:3f:b6:64:dd:5f:b0:d4:75:
c4:45:1e:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnta6LLzIHsQiB4VYC46rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjUwMTAyMTU1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTUyOWI2ZDg4YjEzNDMwYTkzMTZhY2FmMTI5MzVmMGYwNmRmNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Ddj4RVnphRlx4fuI8VquNjB4qN
c+U3oKv37H7A9BuX27U1jae7NBPVgVDrru+KBVleXJ4RbfJ71fxtBsEsgaZCwTu8
KM0kH3xAbHXHf7IrCq16baMIozoa9a+94cRxZNri9G9jG+qaA45pQFbhy1NUn469
Wk6jGGrL+DTwVc3UTLdUUDYGEWsQniOA+LiVvv/XTytkXMDJxQHBKJ7eb8XBNDRo
jbSNYQu3gyZPnESG3Zihn15gD+S7qmEVWSkW/7Mtx8bF9MGp5P1CSDELd/QKFqE8
np5GMAlwc/rAIXlJfwVpEEgGZOXgjWl0Vwr+Y5kOn8qC9J2OW8yMAkXDkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFSm22IsTQwqTFqyvEpNfDwbfVCMB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvOFZLYmJZaXhORENwTVdySzhTazE4UEJ0OVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshQ2MA0G
CSqGSIb3DQEBCwUAA4IBAQAOz1MYYpmfwv2mvyA1JY9ok1o+3+c4GEpOe79R9YCz
Edhjdam0tKDRqzQy8Jj0KQGhOumPwXNPbb13GpwWlWFZ1N3+WbSvFl/0oUXTnkIi
HN6G5bNpZrMrYElNIf8gYyaW2oPqaZf8UUalCGIe7vCWAiQuNlzvK+Gts5gUNIaF
TEWmZ768eZdr7CR+9XB3gJ09PvKfmnoiG4IrXPq4Cwt/VusMl4CVoE2+x+IFul90
sKxGE8tB/lEvKf2uCgxDSczI0yJVU5+4hh+RFFLmj58oOzYKN5AZWrkYftO9WASY
izXnYKcqZM+MYVHtB2VQ94B9WCinP7Zk3V+w1HXERR44
-----END CERTIFICATE-----
Generated at Sun Apr 13 08:04:00 2025 by rpki-client