Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CvE0M4OjqkOgeM7cwxq6oOIJdCo.roa
File: CvE0M4OjqkOgeM7cwxq6oOIJdCo.roa (raw, json)
Hash identifier: io4Cmo4jG/QM5zaS9ySkdADVlF+VkgN4ktlrH/3PZus=
Subject key identifier: 0A:F1:34:33:83:A3:AA:43:A0:78:CE:DC:C3:1A:BA:A0:E2:09:74:2A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22BDA0D608AA46F6AB365172ACF3D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CvE0M4OjqkOgeM7cwxq6oOIJdCo.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201044
IP address blocks: 82.177.162.0/24 maxlen: 24
2a00:4120:8000:6::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:da:0d:60:8a:a4:6f:6a:b3:65:17:2a:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af1343383a3aa43a078cedcc31abaa0e209742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:0a:3a:0c:08:c7:f2:92:ae:2c:72:73:50:
e6:69:74:60:0a:79:10:25:91:0d:c0:1c:cb:b2:9a:
b3:ec:70:cb:0f:9c:17:81:09:88:a4:92:8c:5b:8a:
48:d6:3e:46:32:bd:5e:ff:3d:29:40:ac:5e:1e:78:
75:1c:39:cf:0e:8f:1d:bc:f5:97:17:d8:db:84:9f:
3b:91:18:94:fb:55:3f:12:c7:48:b3:d8:70:3b:47:
0a:57:9b:5e:eb:e4:49:8c:51:c8:99:be:4f:28:89:
ed:b0:7d:53:85:34:6d:d4:3a:5b:4f:9c:c3:d9:03:
eb:1c:dd:ab:86:5d:c6:53:f3:8f:a2:80:43:e0:17:
bf:59:89:a7:7d:f2:91:d1:59:1f:e2:0b:a4:f5:f8:
c8:f4:d2:ba:06:b6:83:2d:8d:eb:92:bf:3f:92:3c:
dc:55:50:92:c5:c0:8a:11:72:f0:59:98:c8:4b:06:
d0:11:19:1b:31:9a:39:4a:f2:11:50:65:13:83:3b:
9a:10:58:65:4b:90:90:43:44:cc:30:7d:00:10:fa:
d6:b5:58:d7:d6:c5:d4:47:0b:22:e2:e1:af:37:23:
ee:30:23:bd:59:c4:ec:34:89:91:d4:0d:d5:fc:e8:
7b:df:88:e0:67:cb:0a:7a:6b:4b:2c:cb:80:5b:9f:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:34:33:83:A3:AA:43:A0:78:CE:DC:C3:1A:BA:A0:E2:09:74:2A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CvE0M4OjqkOgeM7cwxq6oOIJdCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.162.0/24
IPv6:
2a00:4120:8000:6::/64
Signature Algorithm: sha256WithRSAEncryption
b4:c5:4a:3d:d5:f2:d7:8e:44:4a:8b:4d:f4:69:2c:69:54:0a:
05:42:9f:a7:7c:34:46:a5:c4:61:81:23:00:fd:b8:e3:21:2d:
cc:ee:f8:a3:98:10:5f:3a:be:d7:e7:c3:73:72:b2:69:10:a3:
d2:12:b9:23:52:5c:ec:49:a6:07:51:a2:39:fe:df:e7:84:25:
d4:fb:0b:54:bb:23:20:00:74:0f:88:6b:54:23:cd:f0:36:d4:
62:22:5e:0d:cc:7d:6d:d9:58:f0:4a:27:fa:d9:be:84:0d:02:
cc:e5:ec:82:1c:5c:88:b5:bc:cb:aa:e9:d5:6d:b8:ae:98:8a:
6b:8e:d9:7f:fc:b2:67:87:19:e1:b2:68:8f:b0:d4:e6:3a:c7:
82:56:b3:9f:d5:fe:42:ab:b6:fb:f4:eb:8b:ba:94:3c:1d:86:
e2:82:ec:82:7c:0f:2f:bf:a5:0d:50:38:64:38:c4:e2:44:92:
42:c1:88:b8:6d:85:07:19:fe:d0:86:d5:1c:e4:0b:e9:19:e7:
ab:da:79:9a:33:63:1b:0b:a9:e2:f8:16:87:f8:a4:b4:58:5b:
f0:5f:76:90:00:5b:77:7c:d5:ea:1d:da:a9:66:9d:49:d3:4c:
0c:1d:79:dd:27:1b:40:ec:5f:e7:3a:34:03:50:4d:88:21:18:
9d:b1:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:17 2025 by rpki-client