Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xjsdFqfY0abwxBnZFLf8rRYa-TA.roa
File: xjsdFqfY0abwxBnZFLf8rRYa-TA.roa (raw, json)
Hash identifier: CBrQ9xP0Dx63JV4UI1IUxLKxkjcMTPl8w01Ofstjamg=
Subject key identifier: C6:3B:1D:16:A7:D8:D1:A6:F0:C4:19:D9:14:B7:FC:AD:16:1A:F9:30
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0195CD5B07A4B4BD64BBDE2718709B0D1DE2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xjsdFqfY0abwxBnZFLf8rRYa-TA.roa
Signing time: Tue 25 Mar 2025 12:50:49 +0000
ROA not before: Tue 25 Mar 2025 12:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203188
IP address blocks: 82.177.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:5b:07:a4:b4:bd:64:bb:de:27:18:70:9b:0d:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Mar 25 12:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c63b1d16a7d8d1a6f0c419d914b7fcad161af930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:08:7e:08:6b:f8:a8:af:9f:00:5a:56:47:
4c:9a:74:4d:a9:5f:de:f0:00:66:a2:9d:75:19:29:
05:06:38:d1:8d:f8:d0:02:ed:93:96:e8:bb:36:7a:
6f:c7:c6:67:d3:a1:68:8b:9f:91:21:2c:25:ae:da:
14:56:f5:23:41:18:0f:54:3e:96:03:7f:34:21:b4:
12:63:37:89:23:60:b3:2f:9d:b6:13:a0:37:4e:c7:
27:63:e6:83:95:7d:90:dc:11:84:f7:1d:26:de:99:
6b:1e:7f:b4:61:22:e1:a8:32:7b:79:77:d7:ee:f4:
9f:f8:5d:c1:5b:16:d6:24:22:ce:f9:f9:aa:60:36:
34:99:7c:0c:29:3b:36:36:21:e4:a0:ff:6b:1a:f8:
b6:23:7b:74:1e:c9:5c:e4:e1:0e:40:c5:5b:3e:0f:
c2:9d:1d:29:60:cc:c2:e0:32:ec:15:f9:87:63:89:
db:47:bc:2f:0d:01:90:2a:e8:cf:a2:3a:91:c5:b8:
55:58:c9:c3:f5:58:7d:00:d3:bd:2a:ec:dd:95:99:
44:5a:69:c1:db:a0:6b:e6:24:61:f9:81:99:42:05:
2b:08:66:0a:01:dd:89:17:cd:b8:63:20:3b:5b:e9:
cf:11:04:0e:81:5f:fe:1b:26:4e:3b:4c:64:54:cb:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:1D:16:A7:D8:D1:A6:F0:C4:19:D9:14:B7:FC:AD:16:1A:F9:30
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xjsdFqfY0abwxBnZFLf8rRYa-TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c6:0a:4a:4c:60:3f:64:bc:31:36:7e:e4:00:ef:3c:ba:94:
6d:31:6b:dc:74:91:ee:f7:27:b2:e7:c8:dd:9e:bb:9c:e5:9b:
e3:74:f6:26:a3:02:bc:cf:63:cc:82:24:90:d3:ff:c2:e6:fb:
c7:b7:f0:43:74:2d:8a:a8:dd:cc:6d:fc:6d:d1:5f:d6:fe:61:
2b:3c:cc:85:61:90:a0:c1:5d:07:c0:d2:9c:9d:ae:85:64:b7:
a1:1a:41:85:61:48:e3:56:e4:1a:9c:7b:9e:d7:f6:f6:1e:2e:
a2:31:12:f2:67:99:66:f3:59:88:df:7f:52:44:6c:0d:17:87:
fa:7e:f0:de:95:41:e8:c6:89:96:7c:de:1a:e7:a1:70:1e:6e:
98:6e:8e:23:0a:3a:25:7c:63:93:7c:32:5f:46:0a:1c:1e:5c:
3a:78:2b:ec:c3:ce:52:ee:fb:3b:22:87:e1:ad:3d:ff:8e:61:
ec:0f:9e:80:23:14:1f:31:66:5e:f8:e9:7c:3f:36:60:6c:62:
58:87:9c:fd:9f:4f:19:4b:92:ba:f9:82:16:65:07:e9:f0:66:
0a:ec:38:b1:7d:69:24:c7:c0:78:4f:93:a3:dd:4b:d3:98:99:
17:ea:21:4f:18:63:1f:d5:65:da:65:8d:cd:33:b6:2d:22:05:
c2:d3:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:10:25 2025 by rpki-client