Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BEVIit31MMsoGq-7tRjADEAKv18.roa
File: BEVIit31MMsoGq-7tRjADEAKv18.roa (raw, json)
Hash identifier: AffDpWTAqj/WFet/YGoQsNQSmWkop63Bmm0Jpd4j750=
Subject key identifier: 04:45:48:8A:DD:F5:30:CB:28:1A:AF:BB:B5:18:C0:0C:40:0A:BF:5F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22B7FF1F7EE6A83E46E1360EAE5B1
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BEVIit31MMsoGq-7tRjADEAKv18.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200670
IP address blocks: 194.183.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:7f:f1:f7:ee:6a:83:e4:6e:13:60:ea:e5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0445488addf530cb281aafbbb518c00c400abf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:29:86:89:fc:e1:6e:ee:71:97:bf:97:e5:
3e:05:2d:a0:09:24:ab:01:a4:85:f9:d5:34:ed:d8:
6e:6e:c8:82:bd:4c:7b:f1:43:f7:fa:66:50:8f:ef:
be:4e:5b:db:14:c8:69:28:ca:ae:a8:e2:23:0f:d6:
9c:48:90:c1:36:fe:d4:8b:25:72:01:94:79:8d:1c:
cf:3b:ea:22:11:c9:c8:63:07:98:53:4f:f9:3b:8a:
8c:a5:b3:13:2a:87:4a:44:8f:09:ab:b5:97:2c:48:
e5:76:81:d9:44:9c:71:35:2d:86:ad:4e:c7:7b:ca:
22:98:42:36:c6:ce:f6:39:4d:8c:a5:01:9b:39:f5:
0a:af:c4:69:46:6f:39:bf:94:0f:38:e4:98:d2:bc:
85:20:0e:b1:94:04:50:e1:d3:55:4c:b1:ba:22:42:
47:25:05:03:dc:33:89:bb:d0:7b:b3:57:aa:9b:06:
bf:2d:a2:43:83:d6:b7:19:7b:a5:1c:5a:49:03:2d:
3f:44:71:8b:58:2d:db:82:c1:ea:0a:93:6e:99:61:
3d:f5:7c:66:c2:44:d0:f8:22:8e:34:13:a9:ed:31:
6e:43:91:08:c5:68:c6:03:00:0c:22:04:6c:5b:28:
2d:48:f5:a7:78:88:0c:94:0e:9c:d3:bd:59:6a:bf:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:48:8A:DD:F5:30:CB:28:1A:AF:BB:B5:18:C0:0C:40:0A:BF:5F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BEVIit31MMsoGq-7tRjADEAKv18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:18:25:3e:5c:e8:dc:ae:fc:db:82:b3:47:1d:9c:34:f8:a2:
6a:63:11:91:90:22:c3:d6:5e:c4:7e:df:3f:23:2a:67:8c:f3:
57:43:6e:f1:2f:25:7a:6c:36:f3:98:12:90:77:4f:c9:41:1f:
8c:d3:7f:e0:e4:0a:2d:c8:7b:c9:c7:ab:71:75:a6:4f:7c:31:
c4:d5:cb:40:f4:5c:10:0b:da:b8:78:55:01:02:0c:65:53:46:
03:3f:88:c7:a8:bd:fc:d5:b3:d7:f6:25:13:ef:e7:70:cd:b1:
cc:c4:79:31:5a:6c:ce:c1:5a:72:cc:df:f2:5f:fe:7f:06:f4:
34:cb:86:e8:25:91:7e:f3:d5:47:43:65:fa:a7:96:0a:ab:e1:
3a:f0:49:c9:9f:63:40:38:8b:64:1b:dc:97:88:e6:b7:e4:7e:
9c:79:41:2b:cd:e8:93:97:27:f0:7e:cc:b1:5b:9a:d7:a5:66:
2f:8b:6d:a1:d7:6d:42:0f:20:f5:a1:19:bb:f9:3e:62:10:21:
50:65:3d:e7:6a:5b:d5:d3:b4:a0:2a:ab:af:e6:67:c8:47:e9:
8a:60:10:78:37:b9:4d:44:82:fb:e9:bd:9c:c6:1d:65:2d:6f:
ca:b1:58:4a:56:cc:25:57:da:83:d2:ee:9b:8c:8c:f6:6f:73:
ea:2d:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:48 2025 by rpki-client