Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/VRTGeEzF5FtK76qOfPyLSRNqkOo.roa
File: VRTGeEzF5FtK76qOfPyLSRNqkOo.roa (raw, json)
Hash identifier: pOO7nnFTp0Qht5tDg13SMXctJEqxWl0GtVbovHy2WzY=
Subject key identifier: 55:14:C6:78:4C:C5:E4:5B:4A:EF:AA:8E:7C:FC:8B:49:13:6A:90:EA
Certificate issuer: /CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Certificate serial: 019425FC3720C6BE674C83EDCD69B83842CD
Authority key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/VRTGeEzF5FtK76qOfPyLSRNqkOo.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39242
IP address blocks: 81.19.112.0/20 maxlen: 20
109.70.160.0/21 maxlen: 21
2a02:ef0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:37:20:c6:be:67:4c:83:ed:cd:69:b8:38:42:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5514c6784cc5e45b4aefaa8e7cfc8b49136a90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:e9:51:0f:37:7a:6d:5c:8b:31:a3:b8:1f:
be:09:6c:7a:bb:84:ad:db:a5:57:85:9f:4b:42:0c:
10:fa:c7:12:0e:46:3a:dc:b7:8b:5e:a6:5d:6d:49:
58:bd:1e:0b:1e:be:11:22:ce:87:63:02:e4:ee:4f:
80:1e:ef:0e:4c:64:3f:f0:37:ce:2c:cf:ed:ff:d0:
e3:bc:5e:94:11:c5:1d:43:17:3e:98:ff:14:10:c0:
90:10:f5:bf:8d:77:5a:f3:d4:c5:3d:4e:c5:e3:2c:
6b:e3:f3:71:be:c1:4a:9d:43:cc:d9:f1:39:6b:da:
e2:36:19:44:cc:60:43:7e:ba:be:e5:a6:f1:0a:61:
d0:fd:d8:54:91:b4:ca:ab:fd:ed:b3:a6:d2:c8:43:
74:3d:73:5a:19:5c:52:d3:b3:b8:f3:db:31:a5:25:
5f:e8:2a:c5:04:64:e0:93:dc:39:0f:1f:86:38:66:
5a:77:2a:72:e9:6b:df:c6:64:36:38:95:32:57:d5:
2d:09:24:54:5b:7e:88:af:1c:25:c5:1f:c9:d7:58:
b6:cd:10:37:ea:d4:e1:d7:77:ce:07:53:f9:1a:22:
87:5c:4e:fd:0b:b2:f9:38:e1:96:17:bd:56:70:ad:
35:af:84:4e:d1:32:ca:17:85:ce:82:47:07:49:f3:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:C6:78:4C:C5:E4:5B:4A:EF:AA:8E:7C:FC:8B:49:13:6A:90:EA
X509v3 Authority Key Identifier:
keyid:5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/VRTGeEzF5FtK76qOfPyLSRNqkOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.112.0/20
109.70.160.0/21
IPv6:
2a02:ef0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:4d:99:5f:39:6c:20:9c:ea:bb:11:4b:6e:d3:2e:dc:eb:9d:
c2:7a:af:11:ce:0c:a3:c6:a5:44:c1:c1:83:1e:93:b2:dc:68:
20:24:be:df:e2:29:f2:98:ed:0a:5a:05:e9:87:0e:0e:89:63:
18:45:b0:03:e8:c7:ee:00:99:2c:a5:4e:16:b5:87:e6:cc:19:
4a:cf:65:41:22:2f:8b:62:43:48:1a:b2:2b:e3:db:20:5a:da:
95:69:43:1f:34:56:4b:75:41:c6:3e:c8:06:dd:2d:b4:dd:44:
83:24:b7:a3:19:74:15:20:13:31:30:b1:fd:1a:86:d9:7e:fb:
a6:b7:c5:44:30:e6:35:43:7b:b8:a7:64:59:c1:cf:a3:e5:3f:
81:8f:25:0a:0a:4b:81:17:fb:de:ea:3d:b8:57:60:de:c3:d6:
a2:ff:dc:bd:f8:20:ce:1b:61:39:cd:43:79:76:8e:df:3a:64:
0e:f1:6a:3d:ad:bb:fb:1f:a4:48:f6:29:25:09:2d:72:fb:c4:
56:97:f4:a5:ab:00:1f:17:3e:18:93:70:6b:e7:4e:22:3e:60:
46:4a:5f:d5:24:16:69:14:69:81:01:51:02:67:ec:b4:e7:05:
4a:c5:1f:ed:ee:5d:d8:d7:5d:20:32:a1:68:78:1c:77:b4:67:
9c:3b:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:29:52 2025 by rpki-client