Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ScvCtB1sJ2pez05-OUAKlG5fXQ0.roa
File: ScvCtB1sJ2pez05-OUAKlG5fXQ0.roa (raw, json)
Hash identifier: gguJYLWyUXU99jY0rsUrxDQukj3l1CsLQK2QMo+jGRQ=
Subject key identifier: 49:CB:C2:B4:1D:6C:27:6A:5E:CF:4E:7E:39:40:0A:94:6E:5F:5D:0D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B236FF4C4265456B0995E86360813B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ScvCtB1sJ2pez05-OUAKlG5fXQ0.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208112
IP address blocks: 82.177.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:36:ff:4c:42:65:45:6b:09:95:e8:63:60:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49cbc2b41d6c276a5ecf4e7e39400a946e5f5d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:dd:fa:cc:5e:4b:67:10:0f:01:c2:60:52:
cc:48:0b:d3:30:0e:66:7d:ce:34:76:ef:b4:b0:8e:
b0:3f:2a:cc:29:1a:2b:4d:c7:cd:ef:7f:1d:e0:67:
20:f9:6b:ff:8a:a3:78:cc:c5:94:55:b5:c9:d4:fa:
26:20:c4:35:ed:27:7f:22:22:2d:fc:3b:ba:e7:b2:
0c:af:14:39:68:1b:b2:0d:7c:11:62:29:81:e9:4f:
ca:c7:ca:5d:38:e9:ee:ae:f6:a5:24:60:56:44:80:
e8:40:2d:77:fc:5d:4b:ee:8c:58:f0:13:7d:29:d9:
50:d5:83:5e:81:b4:c7:0f:e1:64:20:e7:e7:53:4a:
c9:bb:1f:90:da:b4:67:6a:8f:fa:20:94:9d:aa:bf:
b7:29:cb:cc:55:9a:eb:85:8b:bb:e2:e0:dc:7c:18:
b4:f7:09:29:a4:0c:e8:a7:67:fb:35:f0:fb:44:e2:
67:91:f2:64:d2:29:84:4d:c8:24:09:9b:8b:dc:c6:
41:75:0c:6c:4f:2d:59:78:df:14:1e:15:89:ee:df:
73:ab:d9:dc:05:a4:03:85:8b:4e:5e:ad:cb:a0:32:
e5:60:eb:d2:e9:39:19:71:8e:a6:79:9e:03:45:37:
48:a4:e5:e4:18:69:d3:16:91:08:db:30:d7:62:e7:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:C2:B4:1D:6C:27:6A:5E:CF:4E:7E:39:40:0A:94:6E:5F:5D:0D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ScvCtB1sJ2pez05-OUAKlG5fXQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c3:28:eb:7e:a7:1d:bc:4a:5d:8e:49:fe:db:99:73:27:52:
71:86:c3:64:80:8e:86:f0:38:a9:49:f1:74:3e:b5:f3:99:3b:
74:cb:8b:37:fb:b8:46:07:35:92:94:70:77:9c:d0:df:73:a7:
b8:d0:9a:49:a8:bd:6b:59:1f:1f:71:04:9c:f3:94:c8:5b:0c:
e1:ec:b1:d9:d4:90:ba:be:f6:45:7b:a3:4a:c9:6a:cd:be:42:
b9:3a:02:4d:a6:35:5e:cf:85:5b:38:c6:02:ec:fe:36:77:1d:
b2:ed:17:d9:5d:58:1d:3a:23:1d:ff:e1:e6:30:b5:7c:02:8a:
d9:9a:4a:aa:43:f0:96:cf:09:a2:27:be:bc:d3:45:5c:e7:51:
e1:84:5c:35:1e:98:ab:d8:9f:32:42:36:88:00:34:dc:9b:69:
4f:5e:de:8e:ea:3a:b8:78:76:b1:17:24:76:79:8d:30:e6:62:
5e:57:02:a2:5e:ac:95:f8:e2:15:23:ad:d8:96:b6:31:bd:94:
4b:52:86:c3:be:e0:c8:03:1b:3b:89:e5:e3:a3:09:dd:a3:4b:
82:81:60:ec:e5:5f:a6:23:7b:fb:4e:b1:5f:37:50:d0:6e:cf:
6c:39:f6:8f:69:7c:bb:4b:43:cb:18:b3:83:39:be:18:b8:9d:
36:95:bf:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjb/TEJlRWsJlehjYIE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWNiYzJiNDFkNmMyNzZhNWVjZjRlN2UzOTQwMGE5NDZlNWY1ZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvubd+sxeS2cQDwHCYFLMSAvTMA5m
fc40du+0sI6wPyrMKRorTcfN738d4Gcg+Wv/iqN4zMWUVbXJ1PomIMQ17Sd/IiIt
/Du657IMrxQ5aBuyDXwRYimB6U/Kx8pdOOnurvalJGBWRIDoQC13/F1L7oxY8BN9
KdlQ1YNegbTHD+FkIOfnU0rJux+Q2rRnao/6IJSdqr+3KcvMVZrrhYu74uDcfBi0
9wkppAzop2f7NfD7ROJnkfJk0imETcgkCZuL3MZBdQxsTy1ZeN8UHhWJ7t9zq9nc
BaQDhYtOXq3LoDLlYOvS6TkZcY6meZ4DRTdIpOXkGGnTFpEI2zDXYuea7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnLwrQdbCdqXs9OfjlACpRuX10NMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvU2N2Q3RCMXNKMnBlejA1LU9VQUtsRzVmWFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUrECMA0G
CSqGSIb3DQEBCwUAA4IBAQArwyjrfqcdvEpdjkn+25lzJ1JxhsNkgI6G8DipSfF0
PrXzmTt0y4s3+7hGBzWSlHB3nNDfc6e40JpJqL1rWR8fcQSc85TIWwzh7LHZ1JC6
vvZFe6NKyWrNvkK5OgJNpjVez4VbOMYC7P42dx2y7RfZXVgdOiMd/+HmMLV8AorZ
mkqqQ/CWzwmiJ76800Vc51HhhFw1Hpir2J8yQjaIADTcm2lPXt6O6jq4eHaxFyR2
eY0w5mJeVwKiXqyV+OIVI63YlrYxvZRLUobDvuDIAxs7ieXjowndo0uCgWDs5V+m
I3v7TrFfN1DQbs9sOfaPaXy7S0PLGLODOb4YuJ02lb/F
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:54 2025 by rpki-client