Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YdxlKNJHU9TDE4f4rdusrmfFF8U.roa
File: YdxlKNJHU9TDE4f4rdusrmfFF8U.roa (raw, json)
Hash identifier: lw/02h2FEc1BsSdsb4J5gIKdfAJ5z0wCPXYOZ76n4Tc=
Subject key identifier: 61:DC:65:28:D2:47:53:D4:C3:13:87:F8:AD:DB:AC:AE:67:C5:17:C5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21BF177F997BE0834701A64F1F92E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YdxlKNJHU9TDE4f4rdusrmfFF8U.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50116
IP address blocks: 195.136.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:f1:77:f9:97:be:08:34:70:1a:64:f1:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61dc6528d24753d4c31387f8addbacae67c517c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:dd:cf:4c:99:b1:95:6d:2e:1c:82:05:ce:
56:fd:04:58:43:bc:b4:3d:94:32:43:7d:1b:87:70:
49:e0:e8:df:93:83:69:06:61:a4:ae:62:4e:6e:90:
ef:1d:5f:75:ab:f8:0c:b1:40:3c:b5:f3:25:6f:bf:
d9:ee:14:c9:4e:c1:e5:b2:9b:a9:0a:c7:37:25:1b:
7a:db:7f:a0:fa:9c:a4:6b:bc:09:58:e4:d1:a1:24:
6d:e4:a9:7f:8a:3d:98:9f:51:8e:03:e0:37:c7:69:
be:9d:63:61:66:b1:7e:bc:66:22:3a:da:70:b0:82:
63:27:1a:2e:77:ee:83:e9:b6:6a:e7:db:e6:9f:96:
22:a5:d4:b1:e9:d8:15:ee:eb:d7:58:8d:66:c7:69:
72:c9:12:21:78:19:fc:7b:65:6f:d4:aa:50:6e:a9:
86:69:7b:c2:f1:0d:19:c1:a0:3c:4a:19:6c:ae:42:
51:e6:05:99:12:8f:3a:47:b1:08:fd:9d:83:0b:0d:
89:01:0f:2c:fb:09:b8:fc:d2:ab:8a:61:db:11:f6:
63:ca:21:c4:c7:1b:86:21:e0:f5:11:87:df:b3:56:
a2:f4:da:90:3c:cb:2e:ef:c1:59:07:87:7b:7a:ce:
26:bf:94:a4:b7:61:ef:10:16:42:a7:c6:38:75:fa:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DC:65:28:D2:47:53:D4:C3:13:87:F8:AD:DB:AC:AE:67:C5:17:C5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YdxlKNJHU9TDE4f4rdusrmfFF8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.34.0/23
Signature Algorithm: sha256WithRSAEncryption
91:45:82:00:9a:ed:e7:8f:5f:59:63:19:43:61:f1:d6:08:d6:
8d:a2:6e:16:39:03:57:0c:4b:a6:09:28:fc:09:00:c7:a8:b8:
40:1a:28:8c:d7:37:b2:02:23:27:73:22:5c:5a:aa:40:9a:10:
24:8d:c0:06:72:a3:91:4c:08:d9:9b:83:4e:79:be:1d:ae:7b:
16:57:44:8a:aa:00:e1:77:1d:4e:0a:0b:fd:af:8e:b5:5c:6c:
d2:dd:d2:b8:9d:75:9c:b0:0a:80:4a:9d:f3:bd:b7:38:68:b4:
02:ce:fc:39:b7:04:83:2b:d8:62:ee:b3:83:72:ca:88:e3:e9:
b3:b7:cd:32:c2:5d:2e:a5:9d:9b:8f:61:b9:ae:01:10:e8:44:
4b:c0:f6:3c:ec:5d:c5:60:29:b2:9d:1f:73:be:48:02:47:8d:
38:ae:ee:c1:ba:88:85:26:69:c5:a6:b7:be:f1:aa:60:2c:e5:
bc:22:5f:53:dc:46:9d:50:30:1f:fe:bf:72:72:5d:52:e6:63:
fc:eb:7b:ff:53:37:f2:3e:a1:ca:27:b2:08:bb:55:31:e1:c4:
e9:4d:e9:fa:30:ac:95:ff:24:12:9d:fe:4c:3d:dc:ea:42:ac:
bb:6d:21:36:48:c5:32:f6:28:72:04:4c:c1:e5:38:19:83:05:
db:da:3b:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshvxd/mXvgg0cBpk8fkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWRjNjUyOGQyNDc1M2Q0YzMxMzg3ZjhhZGRiYWNhZTY3YzUxN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcPdz0yZsZVtLhyCBc5W/QRYQ7y0
PZQyQ30bh3BJ4Ojfk4NpBmGkrmJObpDvHV91q/gMsUA8tfMlb7/Z7hTJTsHlspup
Csc3JRt623+g+pyka7wJWOTRoSRt5Kl/ij2Yn1GOA+A3x2m+nWNhZrF+vGYiOtpw
sIJjJxoud+6D6bZq59vmn5YipdSx6dgV7uvXWI1mx2lyyRIheBn8e2Vv1KpQbqmG
aXvC8Q0ZwaA8ShlsrkJR5gWZEo86R7EI/Z2DCw2JAQ8s+wm4/NKrimHbEfZjyiHE
xxuGIeD1EYffs1ai9NqQPMsu78FZB4d7es4mv5Skt2HvEBZCp8Y4dfqgyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGHcZSjSR1PUwxOH+K3brK5nxRfFMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvWWR4bEtOSkhVOVRERTRmNHJkdXNybWZGRjhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4giMA0G
CSqGSIb3DQEBCwUAA4IBAQCRRYIAmu3nj19ZYxlDYfHWCNaNom4WOQNXDEumCSj8
CQDHqLhAGiiM1zeyAiMncyJcWqpAmhAkjcAGcqORTAjZm4NOeb4drnsWV0SKqgDh
dx1OCgv9r461XGzS3dK4nXWcsAqASp3zvbc4aLQCzvw5twSDK9hi7rODcsqI4+mz
t80ywl0upZ2bj2G5rgEQ6ERLwPY87F3FYCmynR9zvkgCR404ru7BuoiFJmnFpre+
8apgLOW8Il9T3EadUDAf/r9ycl1S5mP863v/UzfyPqHKJ7IIu1Ux4cTpTen6MKyV
/yQSnf5MPdzqQqy7bSE2SMUy9ihyBEzB5TgZgwXb2ju4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:18 2025 by rpki-client