Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/j2WZyi_WVL5PHgg6PDS-7A3m0Jc.roa
File: j2WZyi_WVL5PHgg6PDS-7A3m0Jc.roa (raw, json)
Hash identifier: 8WGnCCNDTgsOkuvTkGeWJ9ew0cORAhUZDmVfYBoP8q8=
Subject key identifier: 8F:65:99:CA:2F:D6:54:BE:4F:1E:08:3A:3C:34:BE:EC:0D:E6:D0:97
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B23387514606130B657B6E0F0FEA86
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/j2WZyi_WVL5PHgg6PDS-7A3m0Jc.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205990
IP address blocks: 81.15.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:33:87:51:46:06:13:0b:65:7b:6e:0f:0f:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f6599ca2fd654be4f1e083a3c34beec0de6d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:fe:78:16:a5:cc:c8:36:7e:52:11:81:fe:
4f:9f:d1:71:b2:64:d3:0a:c5:51:d6:7d:e4:f1:4e:
a2:0b:be:35:e3:79:c0:4a:2e:a4:88:64:f6:6b:a8:
aa:e7:ea:69:03:e1:f9:c6:49:0f:da:10:52:45:0c:
22:fb:ea:eb:9d:6d:23:ef:72:c9:c6:9f:6c:4e:b5:
f6:00:59:f5:8c:b6:16:2a:4f:1d:03:35:2e:90:7c:
20:76:04:cb:b5:f6:32:d1:17:ee:45:be:df:6a:98:
95:95:1f:8b:08:5b:2c:59:87:57:c5:2d:87:dc:c0:
4d:4b:64:05:8f:c7:9e:56:69:0a:67:0f:7f:d6:bb:
6b:76:6b:91:6b:f9:55:11:01:7c:60:cb:ff:c4:38:
bf:ea:84:b1:35:30:ba:22:b2:35:00:d6:35:6c:4d:
0f:8b:b2:cf:39:21:45:ce:50:9f:95:69:e3:f7:fb:
5d:01:2c:93:e3:fb:aa:77:4e:36:8b:54:c4:0e:3d:
f6:ca:0d:fc:66:a2:97:b3:24:55:2b:34:fe:77:e2:
a7:a0:71:aa:44:49:b2:b1:eb:7a:41:81:f9:93:5e:
bc:c9:46:13:40:f3:5c:94:8e:e9:d6:e3:41:15:ae:
91:09:53:df:71:31:a1:0a:c4:29:22:06:f7:70:b2:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:99:CA:2F:D6:54:BE:4F:1E:08:3A:3C:34:BE:EC:0D:E6:D0:97
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/j2WZyi_WVL5PHgg6PDS-7A3m0Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.217.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f6:72:04:3c:a5:47:a2:3e:64:b5:ba:bf:b3:1e:5f:ee:0c:
ec:9a:cb:2e:3d:8f:90:25:44:e4:5b:7c:a5:af:9a:a9:6b:a0:
4e:d3:b6:68:aa:e0:09:a2:94:7e:96:a3:6b:81:1c:6b:e4:14:
25:7c:9a:db:86:98:07:a6:fd:54:01:5c:10:0c:32:68:48:ab:
58:04:af:df:c6:6c:98:3e:b4:b8:a5:81:41:47:5d:7f:c7:10:
04:89:7c:00:7a:c1:81:30:bf:44:b9:f5:00:29:0f:56:1f:7d:
1f:d3:d9:ef:98:c7:c1:82:ef:92:fe:de:0f:c2:ef:e0:b0:13:
a6:a8:5b:be:47:8c:64:8f:86:cc:e9:c8:1c:86:46:79:7e:6b:
33:c1:8e:85:5a:8b:dd:cb:27:22:41:fb:92:60:69:70:a5:8c:
a5:62:e7:97:97:88:0e:47:11:3b:21:6f:2c:d9:b3:b4:78:09:
05:24:58:76:a6:15:e2:1f:a4:68:e8:16:ca:f6:fc:91:b4:69:
dd:48:8f:ff:50:1b:57:2e:6a:b5:07:80:42:3c:a7:66:65:2d:
bd:41:93:49:5c:b0:84:2a:1b:ef:6d:70:59:d2:fa:a6:86:12:
cd:2c:be:7c:d2:87:3a:7f:a4:95:c2:47:1a:0b:1d:17:95:3c:
5b:ca:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:57 2025 by rpki-client