Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/vrwlMuSLqv4pWbmq0q24Ljisqq4.roa
File: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (raw, json)
Hash identifier: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=
Subject key identifier: BE:BC:25:32:E4:8B:AA:FE:29:59:B9:AA:D2:AD:B8:2E:38:AC:AA:AE
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 01941F8C41A775F533D32D9D9A8E93548A39
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/vrwlMuSLqv4pWbmq0q24Ljisqq4.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57707
IP address blocks: 171.25.220.0/23 maxlen: 23
171.25.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:a7:75:f5:33:d3:2d:9d:9a:8e:93:54:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bebc2532e48baafe2959b9aad2adb82e38acaaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:00:d7:23:9d:77:87:ae:b6:52:c8:68:9a:6e:
f1:a5:1d:db:91:af:15:23:d2:4e:e9:21:b5:69:7e:
a5:89:98:33:bf:19:0f:1d:0b:f8:6b:66:ee:2e:9b:
e4:62:3f:24:44:46:69:70:d7:3e:49:8a:34:3a:f4:
b7:86:c8:62:e8:2f:35:ec:48:1d:49:7d:6f:a5:7a:
37:b8:57:c2:32:76:57:40:81:fc:f8:09:75:96:db:
4a:ff:0d:59:7e:7e:f3:3f:64:60:33:a9:42:2f:ea:
9c:1b:9f:ff:77:af:d1:cf:4f:3f:38:52:10:bc:25:
9a:66:4e:5f:dc:98:32:a2:41:8e:ff:95:bf:ce:be:
08:7a:f8:09:fc:58:c2:2f:04:fb:fd:96:57:56:b6:
cb:0e:8b:9a:87:67:7a:f8:65:da:21:95:bb:94:a0:
4a:17:1d:3f:66:5b:84:7f:2e:8d:68:5f:a5:3c:a3:
94:0f:95:19:92:5d:c9:b2:37:98:d6:88:81:ec:9b:
55:42:e0:6a:bc:29:f9:ed:3a:c8:db:91:91:8e:d7:
50:50:b9:46:e7:14:8e:2e:64:fe:22:27:1b:cc:ba:
fa:a8:01:16:35:db:84:bb:f5:cd:07:e0:dd:95:06:
1d:c4:1d:38:f3:19:a7:43:b2:f7:04:6d:ef:d2:d0:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:25:32:E4:8B:AA:FE:29:59:B9:AA:D2:AD:B8:2E:38:AC:AA:AE
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/vrwlMuSLqv4pWbmq0q24Ljisqq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.220.0-171.25.222.255
Signature Algorithm: sha256WithRSAEncryption
5e:13:42:6a:d4:a8:8d:42:01:9a:cb:59:43:f7:e8:40:71:bd:
b1:d5:d9:5e:99:5e:c8:d9:e2:ab:af:8c:22:31:34:f1:2a:eb:
ce:35:1b:97:b0:a1:8a:fe:0c:c1:5d:f7:97:2a:bb:d2:93:46:
03:99:ac:50:ca:0b:10:d9:88:8e:ce:80:e4:ef:9e:51:d0:aa:
66:b2:3e:c0:45:57:f1:de:bf:91:d2:9d:63:78:b5:03:be:0a:
ef:48:a8:d1:b6:25:11:9d:98:5c:37:36:5a:c9:d6:bf:7d:05:
82:77:f3:d9:02:4f:3c:c6:2a:cb:07:16:6f:19:7b:09:98:6b:
86:51:16:21:e8:cc:2d:7b:42:38:03:00:63:85:48:74:77:dc:
01:15:82:5b:7c:97:fe:cd:eb:c5:8b:5d:84:49:47:d3:7c:8c:
e8:82:45:ff:40:46:6c:13:d6:8e:d6:0a:c9:01:97:4a:cc:d7:
50:6e:bf:b2:18:1e:fb:5a:0c:9a:13:3b:26:c0:a2:8c:32:b9:
bb:01:39:38:72:66:4e:2f:0a:a7:a1:15:54:ed:fd:3c:fb:6c:
b3:5a:fc:a2:90:8f:29:2b:dc:ee:ad:5e:b9:5e:36:b2:4f:af:
bc:0f:58:77:b1:7e:6c:77:f3:2b:6d:3c:bc:ea:4f:bc:3b:ae:
df:13:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:45 2025 by rpki-client