Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/FRIT84zuMI3Pcu8hMyngHgBBcKk.roa
File: FRIT84zuMI3Pcu8hMyngHgBBcKk.roa (raw, json)
Hash identifier: lTS1x7aNhroWdaEJAwNvrti1V23qb9qnbb5MVoJHpYk=
Subject key identifier: 15:12:13:F3:8C:EE:30:8D:CF:72:EF:21:33:29:E0:1E:00:41:70:A9
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B237B96ED03ABD42E1D5F808E1BA43
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/FRIT84zuMI3Pcu8hMyngHgBBcKk.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209200
IP address blocks: 81.15.203.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:b9:6e:d0:3a:bd:42:e1:d5:f8:08:e1:ba:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151213f38cee308dcf72ef213329e01e004170a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:25:55:10:ef:19:b5:50:25:90:21:36:30:
61:00:b1:0b:cc:aa:58:58:d3:1d:b0:e2:c6:b3:94:
8a:db:83:9b:c7:fd:2d:e0:0f:73:e1:47:97:1f:ef:
d2:48:3e:a9:6f:b7:40:60:95:3a:ff:f9:87:50:6b:
1a:43:8e:b4:10:2b:88:47:96:b0:bc:d6:bf:11:95:
62:e4:34:63:34:74:73:f1:36:e4:bc:28:4c:3d:ff:
30:4d:72:7f:d9:12:e1:fc:bd:37:cc:c6:94:2e:c7:
33:ee:26:b4:7f:54:72:40:81:a6:37:cc:ae:d9:8f:
da:79:ef:88:18:ce:d2:0c:ae:f2:01:f4:55:13:84:
9c:ae:88:99:68:e7:43:ae:5a:8a:80:a9:c3:75:68:
64:c8:1e:b7:96:d6:03:02:6e:74:41:98:c4:5c:62:
86:c0:7e:8f:07:0a:87:5d:1b:e9:f2:a4:a6:cd:f2:
59:fe:06:5e:ea:69:1f:6f:bc:76:d0:2a:df:e2:10:
fd:ab:08:b1:28:69:61:99:bf:9a:b1:2b:a3:fb:5c:
33:c3:1f:94:a6:e0:fd:f7:ce:60:da:73:d2:a5:fb:
69:c5:80:23:7e:87:53:f9:b5:f1:79:70:8c:ac:b8:
8e:b0:7b:5c:cf:80:8c:7d:cd:91:73:d9:90:29:c1:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:13:F3:8C:EE:30:8D:CF:72:EF:21:33:29:E0:1E:00:41:70:A9
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/FRIT84zuMI3Pcu8hMyngHgBBcKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.203.0/24
81.15.237.0/24
Signature Algorithm: sha256WithRSAEncryption
02:80:ae:17:bc:55:41:5a:65:d2:10:65:e6:a6:b8:ef:cf:76:
80:87:e9:2e:ac:67:59:34:e0:35:0c:c5:4f:2a:f1:2f:44:20:
57:2a:5d:03:38:dd:bf:3d:ee:35:6f:48:8b:21:79:de:91:6d:
98:ee:dc:a7:ef:e1:3c:c4:85:c2:35:35:43:7f:cc:97:ec:47:
f6:0b:bc:23:45:e1:c7:4f:b1:86:70:27:5c:4c:b3:5e:cf:64:
e4:13:da:b8:9d:f3:fa:fd:15:86:9e:e6:66:27:5a:36:a8:7d:
70:52:ad:73:53:65:5e:51:71:f1:e5:cd:db:32:a7:0c:5b:89:
57:57:6b:65:4d:00:7a:70:fb:49:f0:3c:16:96:07:8e:bc:34:
6f:17:34:8a:bc:c6:12:4d:4d:9e:5b:f9:95:15:e1:2a:11:bc:
da:b8:1c:c6:8f:45:ab:2e:d9:22:81:50:c3:04:09:4b:2f:64:
da:e5:c5:90:d8:3c:dc:b2:51:01:f2:24:f2:fb:b0:94:68:4f:
df:1a:c6:59:ba:c0:2d:dc:09:65:85:40:43:fc:66:9a:0a:36:
4e:0d:b4:26:65:28:6f:21:a1:ed:51:ae:24:07:63:d0:57:38:
7e:3e:e3:7b:be:5f:42:3e:7d:9b:bc:40:8b:94:51:fa:03:07:
ae:6a:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:18 2025 by rpki-client