Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa
File: VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa (raw, json)
Hash identifier: dF01qJOvlqCUQfX3+m/1EpYD4bi83TnY1UObrlr43Qg=
Subject key identifier: 57:10:79:C3:21:0F:30:C1:C6:B0:88:2B:4C:C9:E7:D2:D6:B4:4D:78
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23D422673C0CE526A19E85AB66803
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202658
IP address blocks: 213.232.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:42:26:73:c0:ce:52:6a:19:e8:5a:b6:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=571079c3210f30c1c6b0882b4cc9e7d2d6b44d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:29:6a:ec:bf:64:7c:1c:f0:2d:00:59:c6:
2b:21:74:91:9d:63:f6:46:be:a3:e3:0e:e0:68:84:
6c:0d:d5:21:03:35:32:71:ae:f3:fe:3f:f9:23:70:
9d:0b:e4:1d:2d:ce:d6:17:34:fc:50:35:f6:f9:05:
19:20:2f:03:85:48:d4:4c:3e:e0:4e:62:e1:50:21:
8f:31:32:cc:bc:be:90:e1:a8:ba:4b:94:37:f4:d6:
50:fd:a2:8a:c5:fb:66:71:8a:98:c5:72:7f:94:ce:
a6:6b:e7:5f:5e:09:95:8f:bc:1e:dd:49:c0:97:2f:
08:90:55:d4:3c:ce:86:6c:12:53:42:3d:83:f8:d7:
b0:33:de:18:67:97:41:cb:ed:d9:26:81:f9:ae:89:
b3:8b:64:15:54:90:58:ba:78:33:52:bb:9b:8e:da:
c1:5c:af:eb:4d:2a:49:50:09:50:3e:d7:3e:80:09:
21:dc:5c:d5:d2:0f:cb:5a:8c:62:9e:98:82:01:3b:
da:d8:42:4d:1b:9e:c0:83:5a:b4:0f:01:14:49:be:
8d:a1:94:d5:31:69:9a:23:f1:5d:53:99:de:6b:ab:
e7:71:3c:c3:12:9f:80:07:cb:0f:ce:fb:7b:50:c0:
9c:aa:24:29:65:cb:3f:7f:82:69:9f:f3:9c:8e:3a:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:79:C3:21:0F:30:C1:C6:B0:88:2B:4C:C9:E7:D2:D6:B4:4D:78
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
94:d9:9c:a4:19:b2:a8:a0:fd:fd:4e:3f:16:a8:26:07:0d:fc:
99:39:cc:5c:e1:e0:8b:78:31:60:2a:3e:90:30:bc:47:4d:d6:
8d:d5:e9:c7:bd:a8:00:75:7b:47:b9:b0:2f:f6:6e:b1:31:e1:
8d:da:08:5a:61:94:8a:64:14:38:24:dd:3c:23:86:b1:a5:df:
e9:eb:bc:6a:6b:2b:1c:80:0f:00:6b:8a:28:73:49:50:b8:b7:
4e:00:cc:1a:4d:b3:ac:08:f8:f1:39:45:8a:90:49:0f:cb:b5:
76:20:17:38:3f:f7:42:d8:b8:bb:07:42:71:f2:15:18:fb:9b:
97:f3:b9:33:ba:8f:e1:8e:bb:ec:8d:70:6f:cd:76:44:a0:da:
af:4c:88:bc:10:ff:0d:d9:40:7d:5a:ab:83:ac:6a:82:84:e8:
38:fb:56:b7:a3:bc:7e:f5:c4:d2:e5:c1:51:90:22:4a:68:d6:
a4:b9:5c:fb:20:14:f5:ac:1f:2a:25:b7:44:8d:34:5d:35:e3:
13:33:44:96:a3:39:cc:53:3e:0b:44:73:06:67:bb:c7:fd:25:
03:ca:80:6c:7e:eb:0e:a0:b5:56:9c:40:fe:94:6c:7b:30:73:
70:30:06:7b:37:d2:20:f5:82:d5:08:ec:ec:54:ce:89:2c:f5:
65:ea:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:46:00 2025 by rpki-client