Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2WXPbuxF3Amg_A4Mw3cLoiE_B7c.roa
File: 2WXPbuxF3Amg_A4Mw3cLoiE_B7c.roa (raw, json)
Hash identifier: oAjZWlrsC0fpi33NnrUqOHEe4G9HYKolTaU4PXmkOa8=
Subject key identifier: D9:65:CF:6E:EC:45:DC:09:A0:FC:0E:0C:C3:77:0B:A2:21:3F:07:B7
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B211F364130F539B02EBA62E1319C3
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2WXPbuxF3Amg_A4Mw3cLoiE_B7c.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33806
IP address blocks: 195.136.180.0/23 maxlen: 23
195.136.182.0/23 maxlen: 23
195.136.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:11:f3:64:13:0f:53:9b:02:eb:a6:2e:13:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d965cf6eec45dc09a0fc0e0cc3770ba2213f07b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:99:9f:80:4c:77:3a:fb:e1:5e:21:78:d1:
dc:3d:71:64:24:0f:40:1f:09:85:c7:f5:4e:99:07:
81:c6:34:2a:23:92:d4:90:87:94:f8:d0:37:9c:28:
31:3f:2d:bb:b9:c0:a6:14:df:bb:95:a8:9d:22:ed:
5b:1d:aa:f6:21:ef:f2:cf:3a:71:ed:72:2f:e5:d0:
60:95:9c:9b:b8:1a:10:be:00:a7:43:eb:21:68:f9:
f9:60:ed:2d:62:ca:6a:e3:82:21:68:56:03:60:8d:
de:cd:ca:c0:19:c7:ec:56:e2:9a:b8:c1:0a:61:4b:
ad:24:6f:f1:de:d6:31:af:3b:ab:31:9c:ea:38:14:
9d:c7:18:8e:41:d7:a8:63:85:7e:8d:ad:96:6e:17:
5f:a1:b1:cd:ce:6c:e8:d8:fb:c9:e0:7d:0c:48:a4:
66:5c:1a:5a:89:c5:ba:06:29:5a:cf:64:3d:96:5a:
39:c7:5c:42:41:d1:20:9f:3e:3c:cd:c2:b8:0d:97:
a4:81:03:b9:6b:aa:73:11:ee:55:e2:32:b1:7b:da:
40:64:5e:f0:4f:96:a1:cc:25:44:59:82:31:55:aa:
88:a8:b2:fd:fb:cc:6c:7a:03:a0:22:6a:52:c7:44:
ab:9f:07:93:38:57:df:fe:88:bd:4b:ff:a0:2e:90:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:CF:6E:EC:45:DC:09:A0:FC:0E:0C:C3:77:0B:A2:21:3F:07:B7
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2WXPbuxF3Amg_A4Mw3cLoiE_B7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:12:3e:cb:ef:99:1c:cb:dc:1a:fa:f2:ac:03:36:fd:43:06:
4f:75:6e:55:8a:38:67:63:5e:5f:df:62:32:43:b2:5f:10:5a:
40:2b:30:50:c0:4b:13:94:eb:5e:ae:87:1b:75:d4:56:b4:e6:
9f:13:5f:58:6f:00:f8:e7:07:0e:37:a5:a0:65:80:81:c8:df:
04:65:79:6d:60:0f:f3:6c:ae:41:1c:44:85:09:de:7c:85:9c:
8c:be:80:25:d5:3b:8f:8a:50:2a:7d:20:c6:f7:64:eb:eb:47:
8f:79:a1:e9:8d:87:3e:56:fe:f0:a6:12:f7:39:64:2f:e7:be:
e1:70:e6:a9:c8:4f:73:3a:6c:58:6d:77:44:92:c6:80:d6:14:
2b:fe:99:1a:71:24:66:10:5a:4a:d0:bb:78:08:6c:ee:cd:0c:
61:2c:75:2e:b0:ed:1b:77:d1:a4:2b:8c:ae:64:ef:7e:2f:bd:
04:94:2a:3e:c4:b7:4e:25:ff:f4:3c:0a:12:a6:64:93:4f:01:
d2:d0:46:b1:d1:a7:aa:22:9d:ad:bb:f6:ac:99:19:2b:08:f7:
2e:37:26:a3:e2:04:12:9c:e6:60:99:57:0b:f0:6e:dc:3a:4c:
10:74:d3:36:14:82:c0:cd:df:04:38:3b:f3:c1:6c:6b:84:e0:
4c:4c:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:49 2025 by rpki-client