Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/24hlTfO1roFW9GfWzYl268qw1YI.roa
File: 24hlTfO1roFW9GfWzYl268qw1YI.roa (raw, json)
Hash identifier: 27odCz/L13mJvBsh21I/HEUDlBgw8LE2n4heS3tkAc4=
Subject key identifier: DB:88:65:4D:F3:B5:AE:81:56:F4:67:D6:CD:89:76:EB:CA:B0:D5:82
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21AAA8F5AEE2AA841D3C60D703D18
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/24hlTfO1roFW9GfWzYl268qw1YI.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44284
IP address blocks: 82.177.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1a:aa:8f:5a:ee:2a:a8:41:d3:c6:0d:70:3d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db88654df3b5ae8156f467d6cd8976ebcab0d582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:36:d4:88:18:aa:00:f3:5d:da:ac:61:45:
a7:14:53:3a:05:9e:6a:09:06:ed:19:05:68:92:0c:
78:82:32:4a:b3:0e:57:be:51:08:43:cf:ac:32:6a:
08:f7:63:6b:3b:75:5c:80:10:68:08:1f:8d:45:c4:
92:ee:29:b7:b8:13:3c:3f:36:f5:b1:26:d0:a4:e6:
0d:d5:56:c5:3c:0e:0a:c9:5c:18:34:9a:86:d1:a1:
30:c7:bf:68:a3:f2:6f:c9:d1:ee:1d:89:23:b8:16:
81:52:51:03:27:be:89:2b:27:7f:92:52:b4:8d:a2:
43:ac:00:41:44:1a:f7:54:6b:b9:d7:33:64:3e:b4:
e9:d2:38:b3:95:74:a3:45:f9:28:7e:1b:a4:b8:15:
bf:44:55:c9:ca:fa:16:c0:87:d0:df:9e:dd:70:dc:
6b:f5:d2:b0:8c:78:72:2c:00:28:1b:1b:b8:cd:1b:
9e:e4:fe:5a:a9:f8:d3:a1:15:24:ab:bb:1a:e5:34:
94:ed:71:94:0b:f9:b8:5d:59:ae:88:86:1b:72:d3:
77:c2:37:18:60:c0:61:b2:93:7b:08:0b:fb:79:f0:
74:bb:13:68:c5:df:5a:2b:14:c7:16:f8:33:dd:68:
52:fc:b0:79:8c:50:c6:86:ab:ec:3f:e8:7a:11:4e:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:88:65:4D:F3:B5:AE:81:56:F4:67:D6:CD:89:76:EB:CA:B0:D5:82
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/24hlTfO1roFW9GfWzYl268qw1YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:24:5f:0e:aa:d6:0b:5a:6f:b7:ec:50:4e:05:2b:3b:c0:d5:
1d:c8:fd:79:16:f3:d5:cb:fa:d6:5c:b4:1f:df:b8:e1:7a:6e:
f9:c4:be:79:b4:d1:4b:e0:64:c8:74:bf:42:81:29:4a:13:f7:
fa:fe:09:85:59:ae:7d:10:25:84:66:b8:5d:85:3b:2b:e1:54:
28:a0:13:a5:e3:8e:68:39:f0:0a:e5:60:9d:c3:4d:66:d0:80:
f7:77:b5:a6:99:20:fd:43:f6:74:7b:70:0c:98:b6:db:b7:a2:
3f:bb:a0:48:68:70:3e:be:b6:b1:58:c8:29:b4:b7:53:ee:e4:
69:90:92:e7:ae:d1:88:b8:3e:e2:7d:09:62:2e:e3:26:04:b8:
69:47:e3:49:e4:40:24:54:aa:b9:0e:8e:9b:d7:4d:fb:ac:78:
c0:f5:c4:a7:c5:d5:70:b3:68:98:2d:49:9e:69:29:c2:60:aa:
63:fb:93:9e:23:4e:f0:60:d9:b3:9b:b1:30:71:c5:75:8c:8e:
bc:65:c2:99:8d:fd:bf:12:11:bb:42:63:00:af:54:c9:5f:88:
75:2d:4e:8c:0f:d7:3b:90:f1:60:ab:84:f7:76:e3:01:6c:20:
62:1b:88:67:bc:06:e9:29:91:29:d5:1c:ce:a0:48:9b:21:f1:
4c:50:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:48 2025 by rpki-client