Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xcM4UcyjEGSW7YtHep_d-3OaG1c.roa
File: xcM4UcyjEGSW7YtHep_d-3OaG1c.roa (raw, json)
Hash identifier: gLv2X4mmhqdZ0DR6Guf9VRAWOkcIQYeIUyS9NInh/QI=
Subject key identifier: C5:C3:38:51:CC:A3:10:64:96:ED:8B:47:7A:9F:DD:FB:73:9A:1B:57
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2257FC347022A47DBA35B098EB081
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xcM4UcyjEGSW7YtHep_d-3OaG1c.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62258
IP address blocks: 81.15.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:7f:c3:47:02:2a:47:db:a3:5b:09:8e:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5c33851cca3106496ed8b477a9fddfb739a1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:fc:3f:51:65:a1:10:5f:79:07:6c:32:ea:
39:cc:ce:0d:7c:34:cf:80:24:9a:e0:8a:e9:56:66:
62:37:52:cb:5e:6b:27:02:ac:48:ba:4a:9f:8b:a5:
c3:8e:b9:c6:c4:23:06:5a:99:3c:6d:73:fa:db:5b:
46:a6:2e:aa:99:62:5e:92:37:3d:7b:bb:35:7b:fe:
9f:d6:ba:bc:b9:96:a9:3d:7f:13:02:35:ff:33:74:
49:41:5e:cf:eb:72:27:ef:8a:08:07:5a:db:b1:f2:
99:84:d2:71:b9:4a:a5:01:37:cd:11:58:bc:01:df:
e5:a8:a4:c0:76:63:21:0e:ae:15:02:b8:fd:36:32:
15:90:69:95:d8:67:61:13:93:79:23:28:a5:21:da:
14:4a:ee:77:f7:11:d4:c5:10:8b:f8:7e:66:62:45:
a4:82:1b:ea:fb:f1:ac:b6:28:26:54:6c:05:0b:cb:
e0:9f:b7:a1:d3:03:7f:e4:4d:ec:7b:24:e1:07:37:
e9:94:ed:44:cc:b6:5a:24:11:5c:a9:28:e3:c4:c7:
4c:f9:0f:b7:41:a3:d4:40:32:39:56:50:7a:39:64:
ab:cf:7a:6f:cb:7b:7c:94:c9:07:f0:58:a8:04:86:
fd:3a:98:69:1b:7d:5c:b4:39:54:d3:61:55:a4:e1:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:38:51:CC:A3:10:64:96:ED:8B:47:7A:9F:DD:FB:73:9A:1B:57
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xcM4UcyjEGSW7YtHep_d-3OaG1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:db:ce:5b:d9:86:09:b5:05:e0:21:cb:d0:1a:6d:de:b6:3b:
f8:62:2e:4e:0a:7f:00:15:26:f6:32:50:10:58:ee:e7:f8:28:
34:ae:c9:5e:9a:45:59:a6:dd:66:b9:bc:c5:e1:77:8d:5d:04:
ef:89:8b:ff:b2:2c:d8:a5:18:c3:ef:ed:df:6e:ac:bf:ef:87:
42:dc:97:be:57:ce:3f:a7:ba:c6:f2:20:7d:6f:37:5b:76:5d:
31:57:85:d7:c2:d4:53:40:2d:a8:0e:a1:e4:06:ec:c6:d4:37:
13:c9:31:35:0f:0d:d7:b0:aa:d8:34:0d:8d:16:48:8f:e9:8a:
7d:60:10:ed:cc:47:ef:66:a2:cd:9b:98:b0:00:35:e6:5d:e0:
fb:06:a7:24:1e:de:6b:20:89:d0:e8:e8:fe:47:f8:79:67:36:
d2:bc:7b:fa:0c:ab:a1:b4:02:ba:bd:03:3c:87:42:02:92:2f:
94:49:65:2b:28:ae:b6:13:9f:47:87:03:08:d0:71:c5:e5:2a:
57:a4:b3:1c:f0:8e:af:4e:1b:19:5b:61:a7:88:c6:ee:fe:29:
01:c9:03:19:ad:66:f1:03:ee:a4:67:42:ce:5a:0f:96:ae:e3:
a7:d7:b7:5d:5c:61:7a:8b:d1:cc:9b:d5:79:ce:f4:ad:2f:09:
f5:ae:03:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiV/w0cCKkfbo1sJjrCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWMzMzg1MWNjYTMxMDY0OTZlZDhiNDc3YTlmZGRmYjczOWExYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFv8P1FloRBfeQdsMuo5zM4NfDTP
gCSa4IrpVmZiN1LLXmsnAqxIukqfi6XDjrnGxCMGWpk8bXP621tGpi6qmWJekjc9
e7s1e/6f1rq8uZapPX8TAjX/M3RJQV7P63In74oIB1rbsfKZhNJxuUqlATfNEVi8
Ad/lqKTAdmMhDq4VArj9NjIVkGmV2GdhE5N5IyilIdoUSu539xHUxRCL+H5mYkWk
ghvq+/GstigmVGwFC8vgn7eh0wN/5E3seyThBzfplO1EzLZaJBFcqSjjxMdM+Q+3
QaPUQDI5VlB6OWSrz3pvy3t8lMkH8FioBIb9OphpG31ctDlU02FVpOGZhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXDOFHMoxBklu2LR3qf3ftzmhtXMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEveGNNNFVjeWpFR1NXN1l0SGVwX2QtM09hRzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ/QMA0G
CSqGSIb3DQEBCwUAA4IBAQCj285b2YYJtQXgIcvQGm3etjv4Yi5OCn8AFSb2MlAQ
WO7n+Cg0rslemkVZpt1mubzF4XeNXQTviYv/sizYpRjD7+3fbqy/74dC3Je+V84/
p7rG8iB9bzdbdl0xV4XXwtRTQC2oDqHkBuzG1DcTyTE1Dw3XsKrYNA2NFkiP6Yp9
YBDtzEfvZqLNm5iwADXmXeD7BqckHt5rIInQ6Oj+R/h5ZzbSvHv6DKuhtAK6vQM8
h0ICki+USWUrKK62E59HhwMI0HHF5SpXpLMc8I6vThsZW2GniMbu/ikByQMZrWbx
A+6kZ0LOWg+WruOn17ddXGF6i9HMm9V5zvStLwn1rgNe
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:36 2025 by rpki-client