Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cXGAPkJgW-UcQxAegCM2pNFqTqo.roa
File: cXGAPkJgW-UcQxAegCM2pNFqTqo.roa (raw, json)
Hash identifier: Zn7EzvLbG7MVRClpsSqA7E0DeWtQ5uOR6Wmw7jrnQIo=
Subject key identifier: 71:71:80:3E:42:60:5B:E5:1C:43:10:1E:80:23:36:A4:D1:6A:4E:AA
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD749F097116B03141B3FDAE669E5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cXGAPkJgW-UcQxAegCM2pNFqTqo.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62025
IP address blocks: 195.136.123.0/24 maxlen: 24
82.177.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:49:f0:97:11:6b:03:14:1b:3f:da:e6:69:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7171803e42605be51c43101e802336a4d16a4eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:97:5f:6a:ad:2d:a3:4a:d3:d9:65:8e:2e:
aa:c4:4c:b6:05:93:bf:e6:ff:e6:48:38:34:9e:a1:
f8:5b:ff:aa:30:29:18:88:3a:0c:9b:38:b2:d3:a1:
c1:fc:27:ee:e0:11:d1:b4:83:e4:97:bb:18:f0:5b:
61:9c:ec:ca:98:a0:3e:fa:8a:56:6a:45:8d:32:fc:
38:1c:a9:7f:0f:91:07:c9:33:e4:3b:12:03:fb:ef:
b5:40:63:8f:90:f3:66:82:75:03:10:64:36:56:3c:
ad:48:ab:72:53:80:0a:2f:6c:f3:ba:31:95:81:b7:
ec:54:44:fd:5d:57:ef:68:68:32:5e:eb:12:2e:6f:
a1:f2:62:46:c9:f1:3a:3d:fd:45:a8:2d:9f:5c:6f:
19:50:ac:20:84:c9:d5:cb:1f:95:e9:70:ad:02:95:
a1:76:5d:eb:b2:58:fe:c5:6e:3a:62:5e:67:75:48:
63:5f:97:cb:f7:b0:3a:eb:e6:39:2b:e1:08:d4:43:
c7:f5:6a:8a:19:df:a4:dc:4f:98:79:f3:ca:76:bc:
06:80:23:30:37:ea:62:68:bb:a6:2e:73:b9:c1:50:
6b:a3:11:ee:67:d5:64:2e:00:18:66:e8:db:d8:cc:
21:81:79:b5:0e:4b:c7:5f:f5:d8:f1:95:3f:f6:94:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:80:3E:42:60:5B:E5:1C:43:10:1E:80:23:36:A4:D1:6A:4E:AA
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cXGAPkJgW-UcQxAegCM2pNFqTqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.8.0/24
195.136.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0c:13:54:6d:77:4a:c5:69:84:5c:44:20:67:2c:da:86:b9:
ea:41:a2:7c:7f:15:2e:c0:96:93:0c:15:85:8b:80:0e:0e:68:
3f:01:0b:48:90:ea:bf:0f:43:9f:4c:47:3c:4d:15:f5:a5:7b:
69:24:2b:c6:3c:14:34:b3:f5:30:05:a5:be:49:5d:2b:24:4d:
4a:11:58:27:b1:ee:b1:fd:9d:49:6f:87:96:8e:0c:23:86:42:
44:4d:63:6e:fd:6e:52:42:2c:0c:50:90:2b:55:c3:d2:b7:b4:
da:be:c8:d6:e9:d4:3d:68:05:32:51:6a:1b:86:ba:34:3c:ff:
79:c8:c6:bc:9d:e0:90:f2:70:b9:ce:99:55:31:93:2a:d4:5d:
18:bc:69:1f:20:7f:94:60:65:b7:18:f7:be:9e:c8:e1:a2:98:
47:2d:b2:86:37:13:e7:7b:b1:41:fa:9b:51:00:c5:73:1b:38:
e6:1d:e9:7f:2c:5a:54:a5:fc:43:6e:7f:ff:6a:8d:2e:88:95:
88:92:a9:3f:81:c6:79:bd:a4:72:41:a3:54:4b:cf:94:8d:41:
a4:49:ce:3c:62:51:a5:2e:44:26:da:78:0a:a7:4e:e2:0d:35:
6a:02:d4:bf:d5:f1:dd:0e:0d:36:a0:c7:aa:1a:9c:c6:c1:3c:
f8:ef:e0:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2tdJ8JcRawMUGz/a5mnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTcxODAzZTQyNjA1YmU1MWM0MzEwMWU4MDIzMzZhNGQxNmE0ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz2XX2qtLaNK09llji6qxEy2BZO/
5v/mSDg0nqH4W/+qMCkYiDoMmziy06HB/Cfu4BHRtIPkl7sY8FthnOzKmKA++opW
akWNMvw4HKl/D5EHyTPkOxID+++1QGOPkPNmgnUDEGQ2VjytSKtyU4AKL2zzujGV
gbfsVET9XVfvaGgyXusSLm+h8mJGyfE6Pf1FqC2fXG8ZUKwghMnVyx+V6XCtApWh
dl3rslj+xW46Yl5ndUhjX5fL97A66+Y5K+EI1EPH9WqKGd+k3E+YefPKdrwGgCMw
N+piaLumLnO5wVBroxHuZ9VkLgAYZujb2MwhgXm1DkvHX/XY8ZU/9pRNtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHFxgD5CYFvlHEMQHoAjNqTRak6qMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvY1hHQVBrSmdXLVVjUXhBZWdDTTJwTkZxVHFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUrEIAwQA
w4h7MA0GCSqGSIb3DQEBCwUAA4IBAQCiDBNUbXdKxWmEXEQgZyzahrnqQaJ8fxUu
wJaTDBWFi4AODmg/AQtIkOq/D0OfTEc8TRX1pXtpJCvGPBQ0s/UwBaW+SV0rJE1K
EVgnse6x/Z1Jb4eWjgwjhkJETWNu/W5SQiwMUJArVcPSt7TavsjW6dQ9aAUyUWob
hro0PP95yMa8neCQ8nC5zplVMZMq1F0YvGkfIH+UYGW3GPe+nsjhophHLbKGNxPn
e7FB+ptRAMVzGzjmHel/LFpUpfxDbn//ao0uiJWIkqk/gcZ5vaRyQaNUS8+UjUGk
Sc48YlGlLkQm2ngKp07iDTVqAtS/1fHdDg02oMeqGpzGwTz47+DD
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:42 2024 by rpki-client on console-fra.rpki-client.org