Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dlbcn5ff2HWIbbHCCyrghSMA3qU.roa
File: dlbcn5ff2HWIbbHCCyrghSMA3qU.roa (raw, json)
Hash identifier: glAdNLiqG2vrC/rcsXIRSXjzEjG0LvX4iGTpYbs6F5M=
Subject key identifier: 76:56:DC:9F:97:DF:D8:75:88:6D:B1:C2:0B:2A:E0:85:23:00:DE:A5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21018FDCE3EA45CB1C2199C6E7AA1
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dlbcn5ff2HWIbbHCCyrghSMA3qU.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24577
IP address blocks: 82.177.142.0/24 maxlen: 24
82.177.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:18:fd:ce:3e:a4:5c:b1:c2:19:9c:6e:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7656dc9f97dfd875886db1c20b2ae0852300dea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:72:7d:27:2f:f3:03:a8:4f:2d:50:21:7e:
bf:61:f9:e2:c1:c2:da:2c:d4:9e:d1:bc:2f:a2:e7:
4b:b9:f6:4a:5d:25:36:ab:14:63:49:15:fe:0c:6b:
4e:fd:25:79:35:14:eb:2c:dd:c2:33:47:d4:73:93:
30:fa:02:86:85:60:36:cc:49:f3:b1:4c:67:5e:fa:
bf:c6:ce:2a:a7:45:86:09:dc:5e:01:8e:ee:7c:df:
52:81:19:91:94:5b:4c:3e:a9:7e:c7:e9:75:29:93:
aa:52:24:6e:72:c7:26:2f:31:51:8f:6e:0f:56:88:
0b:97:de:01:9a:01:8e:58:c1:98:f9:8e:1a:65:4f:
23:17:a1:49:e8:d3:e9:23:b1:0e:da:67:89:1c:d5:
4c:03:43:09:fe:e3:8f:73:94:46:59:2a:27:bd:48:
f2:3d:0d:b5:3b:3c:41:19:aa:40:94:09:3c:d0:56:
64:a2:51:5a:80:30:cc:17:d6:74:60:40:db:38:8b:
56:a9:24:ab:32:e4:f1:59:74:ea:13:3a:d9:62:2a:
14:b4:d3:7e:1a:63:fe:29:a8:22:e2:77:d1:4a:2d:
ba:bd:c8:35:eb:f7:f7:98:7d:10:09:7d:dd:33:ff:
07:6e:07:ba:a2:6a:57:69:60:79:59:93:65:47:31:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:DC:9F:97:DF:D8:75:88:6D:B1:C2:0B:2A:E0:85:23:00:DE:A5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dlbcn5ff2HWIbbHCCyrghSMA3qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.142.0/24
82.177.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0c:e3:e5:90:67:08:3a:2a:ca:8c:f0:0c:17:de:aa:12:35:
ee:20:89:32:89:24:96:42:57:e8:24:29:b4:08:b3:d3:f0:04:
6a:fe:ba:ea:d0:d2:63:40:ce:b5:e8:9b:ba:08:74:4c:4f:25:
0f:c1:68:ce:d0:96:fd:be:2c:cc:45:f5:9d:30:d3:c2:80:17:
7d:84:2e:6a:06:aa:9e:95:6c:89:4e:4f:b4:02:da:e0:e9:c5:
b2:ba:b7:29:3a:a8:8f:84:86:d2:c4:b7:e5:6d:eb:89:fa:e2:
00:50:81:f7:74:7d:60:f2:d8:20:31:40:89:a2:58:a0:83:bc:
2d:ce:33:39:43:f2:fb:b0:12:41:3c:f8:8b:fd:6f:d7:a8:c3:
d1:59:06:9f:b7:85:69:80:ac:b5:bb:c4:c4:96:de:d2:57:60:
00:42:74:9d:ac:79:c4:fc:91:6a:a7:d1:ff:30:b1:e7:77:4e:
5e:85:56:10:22:72:14:81:a8:34:eb:1e:e6:81:65:9b:2b:13:
dd:25:07:37:2f:f3:bc:40:13:c3:ef:84:bd:cf:54:04:83:2f:
1b:39:72:6d:af:a8:76:73:3d:1c:4f:e6:d1:55:51:cd:ce:db:
80:eb:73:8f:5c:8d:53:ef:54:e3:03:ed:e5:01:0e:a0:3c:3e:
a0:ad:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:50:17 2025 by rpki-client