Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1rmUXb3P44wpBeo2eOo5BiMb0PU.roa
File: 1rmUXb3P44wpBeo2eOo5BiMb0PU.roa (raw, json)
Hash identifier: qgK1G3mbDWmqsVC0QrlgZBeXTjaBpW7zsgs+H3xzdFY=
Subject key identifier: D6:B9:94:5D:BD:CF:E3:8C:29:05:EA:36:78:EA:39:06:23:1B:D0:F5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE6F91269DD6474AE6C7C31D8BED9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1rmUXb3P44wpBeo2eOo5BiMb0PU.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208112
IP address blocks: 82.177.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:f9:12:69:dd:64:74:ae:6c:7c:31:d8:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6b9945dbdcfe38c2905ea3678ea3906231bd0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:67:89:dd:d1:fd:3d:72:ad:61:bb:2f:a2:
ff:b5:7a:21:aa:51:33:8d:7e:51:da:dd:83:e9:99:
9e:c7:35:67:d3:cf:a8:10:3e:06:14:cd:a3:47:6e:
f9:b9:85:71:dc:d4:45:f0:f3:f2:06:97:8b:83:08:
b0:7d:6e:b7:bc:2a:22:f3:f4:6e:41:71:cf:94:33:
ee:2e:14:20:72:c9:dd:9c:8f:e2:c5:2d:ee:fb:8c:
15:a1:04:e1:a8:99:67:7a:af:80:77:8a:36:8d:86:
9e:ad:3a:7c:88:c4:08:cf:50:67:f2:e3:4f:51:a9:
6d:b3:41:cc:5e:1f:5d:bf:30:fd:c9:7f:37:47:de:
b1:16:76:ab:3d:69:dd:2b:8a:52:d8:01:f8:08:51:
94:7c:11:ef:88:58:54:de:9d:17:55:54:00:0c:76:
79:f4:af:f8:f1:c9:8f:ce:1a:36:e6:a1:dd:b9:28:
c2:b9:85:64:f9:5a:a9:35:a2:d6:be:97:fa:14:ba:
7c:e7:23:7a:e8:d3:7d:90:46:d8:c8:b9:2d:10:35:
f0:84:ee:a3:db:8a:ec:c2:ab:df:da:6c:e4:20:b1:
9c:e9:f2:30:7c:45:b2:9f:4e:30:cb:3c:c0:bc:45:
09:33:62:8a:9a:e5:69:11:4f:ea:ac:34:fa:89:ff:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:94:5D:BD:CF:E3:8C:29:05:EA:36:78:EA:39:06:23:1B:D0:F5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1rmUXb3P44wpBeo2eOo5BiMb0PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d3:25:5e:8d:48:77:50:dd:4c:9b:a9:6d:92:52:28:66:81:
f8:ea:bd:ab:75:db:32:82:ec:61:f0:45:bd:9f:e1:43:29:fb:
d2:55:51:42:a6:10:3c:ff:be:00:1e:93:7c:fa:d3:26:60:be:
64:d3:38:b5:55:53:27:f5:4a:97:85:1c:b2:c1:76:df:40:6a:
e5:b7:29:48:0a:38:dc:a4:ff:cc:13:c9:61:90:ba:e2:8c:e1:
9d:96:37:54:d1:40:87:49:24:5e:a7:13:57:26:38:4c:40:79:
b3:30:04:dc:48:7f:38:14:b8:7c:55:ed:13:b1:3a:a5:40:ad:
42:dc:bc:51:7f:fb:b8:72:70:5a:86:63:f4:74:8e:22:77:d1:
88:97:0c:c6:35:df:bb:49:64:eb:5c:4c:f3:46:71:f7:f9:13:
03:36:fc:bd:14:f5:69:90:35:f4:b3:2a:f5:7a:52:9b:3f:51:
a0:75:e2:78:03:05:bd:8a:37:6b:f9:81:d8:0c:6c:ce:99:a9:
28:d2:76:87:03:fc:ab:d5:45:78:84:64:30:82:24:50:7e:2f:
28:96:c1:d4:f2:e6:2e:57:07:5d:69:48:12:31:cf:89:88:d4:
c1:33:ee:a6:75:54:33:b0:21:f2:7c:7f:7c:0c:2b:b7:1f:59:
bc:95:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:44:17 2024 by rpki-client on console-ams.rpki-client.org