Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/VVORpSs2avN7LB4Mow7a1En91F4.roa
File: VVORpSs2avN7LB4Mow7a1En91F4.roa (raw, json)
Hash identifier: yZQKa4XavWNRZD1+bUj1AOYorZS8ADmIAXXZ5FIRTC0=
Subject key identifier: 55:53:91:A5:2B:36:6A:F3:7B:2C:1E:0C:A3:0E:DA:D4:49:FD:D4:5E
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 0195A8B020B05EAF629E348431088A0D9ADF
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/VVORpSs2avN7LB4Mow7a1En91F4.roa
Signing time: Tue 18 Mar 2025 09:57:49 +0000
ROA not before: Tue 18 Mar 2025 09:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62597
IP address blocks: 185.103.32.0/22 maxlen: 24
185.103.32.0/24 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.34.0/24 maxlen: 24
185.103.35.0/24 maxlen: 24
2a00:edc0::/32 maxlen: 32
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:107::/48 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
2a00:edc0:1f0::/44 maxlen: 48
2a00:edc0:469::/48 maxlen: 48
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:6000::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:b0:20:b0:5e:af:62:9e:34:84:31:08:8a:0d:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Mar 18 09:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555391a52b366af37b2c1e0ca30edad449fdd45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:f8:8f:28:43:fd:c3:24:0b:3d:d0:aa:ef:
71:ee:dc:84:ea:a7:18:c8:6f:34:db:8b:a2:df:aa:
7b:1d:f6:30:2e:6f:62:af:82:be:72:5f:aa:9c:cd:
d9:c4:40:0a:35:08:6e:37:fc:8d:0e:e8:00:db:ce:
dc:e0:df:d5:1c:6e:62:4a:4f:75:f1:e8:c3:c0:e2:
e8:30:69:36:82:00:1a:bb:40:d7:9e:a6:4c:ca:00:
36:6a:af:20:5a:00:f6:77:ee:06:35:16:7a:26:a6:
29:ad:f8:6f:19:05:e0:f6:17:06:6a:ca:c6:69:eb:
b2:a9:94:70:e0:e4:0f:8e:63:29:e5:15:f5:9b:10:
22:96:ba:4c:59:49:6b:06:1c:fa:ad:00:61:c5:7b:
99:81:39:83:b7:1c:e2:eb:5c:f6:55:0c:3b:57:1c:
11:78:17:5a:ca:b4:72:6d:bd:2c:8e:42:20:0b:9a:
d8:48:ad:98:28:12:f1:20:45:44:22:28:cc:5d:9d:
5c:7c:a2:c0:67:7b:71:65:84:f6:4a:89:e2:93:3f:
85:f2:d7:fd:fd:f5:05:fb:15:6d:47:68:57:d2:7e:
03:0d:f2:99:b6:ce:cf:25:f1:b8:42:ed:17:99:0f:
13:28:22:2e:de:35:07:fb:9d:ec:78:e1:7d:b2:f5:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:91:A5:2B:36:6A:F3:7B:2C:1E:0C:A3:0E:DA:D4:49:FD:D4:5E
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/VVORpSs2avN7LB4Mow7a1En91F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:68:80:9c:7a:7c:86:fb:4b:43:77:3c:28:05:b6:f4:7a:a6:
79:76:56:4d:81:c0:41:86:c4:2c:df:2b:fc:ee:65:22:27:90:
49:cb:c6:d9:df:0a:fd:3e:30:52:a6:8b:d8:8c:6f:eb:99:cf:
89:97:75:7d:29:f3:f0:00:37:37:63:55:bf:8d:a2:da:e6:be:
0a:cf:e9:ec:75:94:52:a5:56:d7:d7:8c:65:0a:7c:0a:38:34:
4c:5a:17:01:1c:11:cf:e3:29:7e:fc:38:6b:8e:9e:63:6d:6a:
b0:35:46:4b:86:29:76:a9:29:a2:10:4d:4c:16:5a:0b:c3:cb:
71:1e:d4:d2:fb:17:04:eb:d1:9c:91:e0:13:48:0b:f9:a5:ac:
8c:39:83:fc:78:d6:36:ea:50:0a:44:3f:3c:4d:90:8f:19:43:
28:1f:eb:0d:f3:2e:5a:39:1f:be:a1:df:31:4c:72:fc:e3:2a:
e8:18:dd:59:81:bb:1b:f7:f5:69:78:6b:d2:86:9c:e1:bd:3f:
d9:b8:45:e7:1b:90:40:6e:74:6d:5c:02:7d:60:24:5f:13:da:
e4:5e:aa:b2:5f:91:cd:92:93:70:80:03:b2:5f:a0:25:ee:a0:
53:ae:3b:7f:e0:19:bb:b8:b9:e9:ea:a4:60:ce:9f:ae:e5:02:
99:10:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:46 2025 by rpki-client