Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MaeH5i3yI2qb_cpfc9u8UPq2d0I.roa
File: MaeH5i3yI2qb_cpfc9u8UPq2d0I.roa (raw, json)
Hash identifier: Y8pssv0XXQePmNl8z+ZnST1CHLppJytZ+O/EoZZpck0=
Subject key identifier: 31:A7:87:E6:2D:F2:23:6A:9B:FD:CA:5F:73:DB:BC:50:FA:B6:77:42
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2148504C3E694D740ED641C2432F4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MaeH5i3yI2qb_cpfc9u8UPq2d0I.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35463
IP address blocks: 82.177.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:85:04:c3:e6:94:d7:40:ed:64:1c:24:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31a787e62df2236a9bfdca5f73dbbc50fab67742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:79:a9:63:26:7f:3d:5b:3a:1d:74:f2:39:
25:a9:98:51:5f:e8:59:d1:5f:97:e2:12:2e:16:16:
0e:5e:95:30:e1:dd:99:3b:83:f3:7f:af:7d:05:32:
26:e3:29:99:55:e7:a4:d5:bd:89:b1:d7:85:27:84:
83:3b:52:7e:9b:c4:e1:ac:e2:00:1f:a0:a5:9b:5f:
0a:d0:3c:79:91:e0:69:6c:db:71:ae:23:df:6e:6d:
e3:26:3e:60:0c:f1:13:ee:d6:99:a1:86:a3:98:ac:
f8:3e:b2:94:c1:2c:da:f7:02:5c:be:ec:a2:02:bf:
d1:96:82:44:6a:d0:85:21:ea:8c:b2:37:de:15:5d:
d8:27:54:d7:65:68:66:7a:0f:78:63:c6:e7:c8:00:
cd:83:12:9e:fe:45:d6:fb:86:6c:61:3d:bb:32:4b:
42:7d:b9:ca:7a:e9:19:cb:ef:73:68:52:b9:c4:74:
e1:74:f8:71:a3:a2:22:a6:1a:47:82:b9:2c:3a:89:
98:80:61:93:27:a0:4a:54:64:de:c5:79:6d:a6:c5:
95:15:34:d0:a5:f8:1e:a3:3e:27:05:6f:59:00:42:
c9:6c:b2:48:90:da:af:6a:db:9d:75:0b:10:a0:85:
0a:1f:dc:cd:0e:38:bc:18:b2:be:e5:c2:32:0b:f2:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:87:E6:2D:F2:23:6A:9B:FD:CA:5F:73:DB:BC:50:FA:B6:77:42
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MaeH5i3yI2qb_cpfc9u8UPq2d0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.224.0/20
Signature Algorithm: sha256WithRSAEncryption
90:76:5b:75:6c:56:ed:4f:3d:d3:19:90:f0:ae:fb:ba:45:7b:
0c:a2:6e:85:5e:06:8f:bc:9e:c7:01:7a:61:cf:39:06:44:cc:
15:84:ef:f0:fe:a5:6e:1b:0a:00:2e:ad:7c:fd:f6:a1:c9:9e:
10:71:83:d9:1c:b0:c7:56:3e:7b:99:94:9d:3c:5e:2e:16:0f:
9e:9d:a2:00:93:46:20:ab:2c:6b:2d:e3:d4:67:26:a0:46:f9:
f6:0a:f1:e5:9b:0b:01:df:b4:77:47:a6:47:97:85:9a:2b:c6:
7f:da:cc:a9:d4:78:f6:f2:1a:7f:36:a4:9a:b6:b7:26:e6:8a:
00:15:f1:52:83:e7:50:68:b0:23:72:b5:0e:d6:8d:c6:8b:d5:
57:ff:e5:75:31:59:c9:f9:7c:b5:7a:b2:dd:92:1e:a4:8e:12:
63:aa:ec:15:6f:91:4e:dd:66:b0:16:fe:f4:2b:c8:c7:b3:77:
d4:06:ae:2b:b1:f6:48:f8:9e:7b:fa:f4:19:cb:0d:1d:57:d8:
bd:de:20:39:f0:2b:2f:f6:9c:df:78:a2:07:31:2a:02:44:6f:
b3:48:ed:f6:c4:32:0b:55:71:33:b8:ad:cd:f0:8b:50:2f:17:
4e:f6:6b:aa:b1:50:1a:e5:48:93:17:97:cb:f9:ef:96:44:8e:
2a:83:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:41 2025 by rpki-client