Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vUg-we427Pnzv4fZagw1LhVQ7HY.roa
File: vUg-we427Pnzv4fZagw1LhVQ7HY.roa (raw, json)
Hash identifier: FJgP1J1nTOkDOvUhlENnwdCG5ddNrChXM1/XFA5Zv/E=
Subject key identifier: BD:48:3E:C1:EE:36:EC:F9:F3:BF:87:D9:6A:0C:35:2E:15:50:EC:76
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B23A9155B6055122E91F057300FC1A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vUg-we427Pnzv4fZagw1LhVQ7HY.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215903
IP address blocks: 195.136.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:91:55:b6:05:51:22:e9:1f:05:73:00:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd483ec1ee36ecf9f3bf87d96a0c352e1550ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:9c:4e:b2:52:3d:b6:6f:5b:1c:ca:54:ea:
df:01:f6:85:c5:3e:f0:64:29:de:ed:60:18:e9:f7:
33:42:38:fb:d3:a4:61:27:e6:83:ae:35:97:8c:9b:
81:4b:bb:b7:39:3a:fe:68:ac:73:81:58:b8:9f:3b:
dd:3e:89:fd:3d:6f:79:70:8a:3e:25:b2:01:81:1f:
a6:9b:c9:75:55:67:ec:22:77:7a:df:5a:44:f6:9a:
20:2e:72:95:e6:02:67:f6:92:35:ea:a5:77:66:83:
16:ee:54:94:df:91:15:21:79:7a:8d:d1:ab:4e:49:
3e:59:5f:4d:39:c3:df:1c:e3:bc:44:63:dc:0c:30:
d6:e3:77:0a:cc:c3:82:05:cf:86:3e:8d:b2:78:9c:
1e:49:30:c7:5d:90:a3:e3:e2:3c:07:86:02:dd:92:
9b:f3:f5:8b:9f:4f:bb:d9:f9:ba:2c:39:e7:ca:95:
b3:6c:2e:4c:4a:80:d8:9d:40:ba:dc:c6:25:d2:72:
48:51:38:e0:2f:d5:86:ff:7f:8c:e7:ca:85:7c:e2:
8d:83:3b:ee:dd:98:46:b2:8c:76:26:87:2f:f7:94:
a7:5b:c4:fb:d7:c2:3e:b5:9f:c9:fe:c9:60:40:33:
15:f3:cb:6a:64:5e:69:69:be:36:04:89:86:c2:31:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:3E:C1:EE:36:EC:F9:F3:BF:87:D9:6A:0C:35:2E:15:50:EC:76
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vUg-we427Pnzv4fZagw1LhVQ7HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.108.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0b:b0:66:e5:82:fc:1b:9a:4f:fe:36:93:6e:eb:79:77:f3:
f9:f5:1b:d8:18:18:ae:64:f1:a9:a5:c8:fe:ea:3b:fb:65:20:
7d:28:0b:d8:d9:0c:fc:22:03:5f:fc:d3:9b:ea:d4:bc:7b:bd:
dd:98:74:65:69:70:71:2e:f0:10:69:08:94:f0:c1:90:b1:a3:
9d:95:e0:c5:ac:f7:50:b9:2c:3f:71:3d:ad:20:23:18:37:f0:
a5:41:55:3b:9a:8b:40:0d:f8:77:2a:b3:db:c7:dc:90:33:c2:
80:fd:fc:64:e0:25:3c:93:43:70:ab:9b:8c:e2:65:27:91:b3:
b3:d9:83:06:ea:29:72:cf:b4:96:fa:a3:42:7c:3c:e6:a7:4f:
2f:9e:f7:47:0d:c1:6e:2c:7e:fb:39:1b:80:24:1a:45:64:d6:
e0:10:bc:68:67:e0:2b:06:a8:36:46:8b:e1:56:29:7b:c1:c6:
73:14:9c:31:d3:eb:66:3d:0f:bc:65:29:95:64:5e:71:05:7f:
20:0d:b4:71:e3:7c:a9:21:3c:c5:04:63:68:08:d5:41:5a:c1:
ac:e6:33:1f:f0:ac:51:1e:d7:66:79:8a:eb:08:74:ea:75:3d:
47:43:c7:91:f5:fc:71:7c:a5:5a:5a:cf:46:87:a5:51:d3:47:
85:e2:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:59 2025 by rpki-client