Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/VkosI65EihkcngTWaTJkG6-9m2I.roa
File: VkosI65EihkcngTWaTJkG6-9m2I.roa (raw, json)
Hash identifier: fX35nzHhBNIcEWDRVnVwrt3ML71QDkHBtpojCYaD+w8=
Subject key identifier: 56:4A:2C:23:AE:44:8A:19:1C:9E:04:D6:69:32:64:1B:AF:BD:9B:62
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D65A078C701A93FA52293A0558B833
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/VkosI65EihkcngTWaTJkG6-9m2I.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201384
IP address blocks: 85.91.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:07:8c:70:1a:93:fa:52:29:3a:05:58:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=564a2c23ae448a191c9e04d66932641bafbd9b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:03:75:20:d0:dc:e8:bc:24:95:d6:af:12:
08:3e:6b:bf:9f:2e:04:ed:d8:8e:4b:5d:fa:df:53:
9e:6b:cd:87:e1:7b:db:0d:dd:6e:80:2a:e4:16:a5:
2e:a8:72:44:93:62:28:05:0c:36:0e:28:57:ff:55:
40:ae:56:22:24:c8:ac:aa:d0:98:04:af:98:13:17:
4a:e7:4c:6a:ed:9f:e4:7b:ca:b1:e1:3a:65:16:3b:
02:3b:da:8b:3b:dc:3a:21:3a:ae:1e:c5:c6:97:bf:
ca:68:ac:d7:f2:89:76:9f:d5:2c:44:40:ce:03:52:
b6:55:84:25:66:64:88:4b:3d:ac:87:6b:77:a7:3c:
b4:34:8b:1a:a2:81:be:2b:6f:09:fc:1e:0b:8b:f8:
7e:40:c5:38:6a:d2:6f:2d:49:63:79:52:b2:32:7b:
cd:1d:e8:36:fb:4e:54:4d:66:1b:be:05:0c:21:2f:
76:23:f2:3b:47:1a:0f:89:37:08:52:6b:d3:3f:d6:
c8:16:53:d0:ec:e0:0a:fe:f8:4e:4d:5d:61:dc:d2:
51:25:22:f0:01:b2:8f:0c:e7:17:fd:54:d5:99:21:
a6:9e:53:b3:b1:25:70:a6:9b:64:4c:95:f8:e4:b5:
40:70:c7:83:f1:36:33:9c:75:fe:e5:73:65:2e:df:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:2C:23:AE:44:8A:19:1C:9E:04:D6:69:32:64:1B:AF:BD:9B:62
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/VkosI65EihkcngTWaTJkG6-9m2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.107.0/24
Signature Algorithm: sha256WithRSAEncryption
72:72:69:7e:e3:0d:e2:2d:d4:4e:79:c4:00:35:9a:d3:7f:30:
df:60:95:81:d4:2a:26:1e:ad:53:95:6e:cd:40:26:91:fb:2b:
71:90:8f:18:77:48:00:cb:aa:6d:56:b4:28:c0:2f:cb:0b:ec:
c4:d4:31:e7:36:13:dd:eb:99:9d:31:a8:a9:ac:ac:4f:ef:31:
7f:41:4f:6f:50:80:85:56:d1:f8:63:40:7f:4b:fe:ac:d3:0c:
e3:f0:55:6e:6d:43:70:17:7e:66:84:8a:18:4d:a3:f9:4f:ca:
0a:77:7a:60:e5:89:1f:31:0a:89:92:0f:b1:30:ae:30:0d:7f:
77:9f:60:3e:19:a6:15:42:65:a6:fe:c3:c4:39:37:59:70:a0:
25:fb:f2:73:ab:5f:1f:0d:19:74:fc:83:62:65:25:71:87:bc:
42:e4:90:7d:da:72:cc:e4:1b:5b:7b:7c:6c:af:92:5e:33:08:
64:22:17:10:2b:16:57:37:8f:14:ed:46:67:e9:71:a1:2d:52:
54:36:74:cc:21:1e:bf:d2:b0:1f:57:ec:2a:09:04:6a:dc:9a:
a6:3e:8a:d1:72:90:bc:74:79:6d:51:0d:46:06:da:bb:5c:72:
a1:4a:f3:22:1d:d9:a2:f1:7d:25:6a:cb:0f:d1:43:39:73:91:
48:4d:bb:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1loHjHAak/pSKToFWLgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjRhMmMyM2FlNDQ4YTE5MWM5ZTA0ZDY2OTMyNjQxYmFmYmQ5YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2IDdSDQ3Oi8JJXWrxIIPmu/ny4E
7diOS13631Oea82H4XvbDd1ugCrkFqUuqHJEk2IoBQw2DihX/1VArlYiJMisqtCY
BK+YExdK50xq7Z/ke8qx4TplFjsCO9qLO9w6ITquHsXGl7/KaKzX8ol2n9UsREDO
A1K2VYQlZmSISz2sh2t3pzy0NIsaooG+K28J/B4Li/h+QMU4atJvLUljeVKyMnvN
Heg2+05UTWYbvgUMIS92I/I7RxoPiTcIUmvTP9bIFlPQ7OAK/vhOTV1h3NJRJSLw
AbKPDOcX/VTVmSGmnlOzsSVwpptkTJX45LVAcMeD8TYznHX+5XNlLt/98wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZKLCOuRIoZHJ4E1mkyZBuvvZtiMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvVmtvc0k2NUVpaGtjbmdUV2FUSmtHNi05bTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVtrMA0G
CSqGSIb3DQEBCwUAA4IBAQBycml+4w3iLdROecQANZrTfzDfYJWB1ComHq1TlW7N
QCaR+ytxkI8Yd0gAy6ptVrQowC/LC+zE1DHnNhPd65mdMaiprKxP7zF/QU9vUICF
VtH4Y0B/S/6s0wzj8FVubUNwF35mhIoYTaP5T8oKd3pg5YkfMQqJkg+xMK4wDX93
n2A+GaYVQmWm/sPEOTdZcKAl+/Jzq18fDRl0/INiZSVxh7xC5JB92nLM5Btbe3xs
r5JeMwhkIhcQKxZXN48U7UZn6XGhLVJUNnTMIR6/0rAfV+wqCQRq3JqmPorRcpC8
dHltUQ1GBtq7XHKhSvMiHdmi8X0lassP0UM5c5FITbux
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:01 2025 by rpki-client