Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa
File: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (raw, json)
Hash identifier: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=
Subject key identifier: 55:3E:AC:8B:89:0B:C9:DE:B3:A4:D6:AA:54:45:D0:65:B8:23:D8:69
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FC9A6AAA5335AB0F596D0A977256
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206243
IP address blocks: 109.120.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fc:9a:6a:aa:53:35:ab:0f:59:6d:0a:97:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553eac8b890bc9deb3a4d6aa5445d065b823d869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:d8:6a:6d:bb:1d:5b:23:38:b7:b8:27:a7:
8c:37:7e:c9:9b:b2:69:0d:d1:d8:3d:95:f3:cc:59:
47:e1:b7:9e:c7:e1:be:8f:45:e4:6f:01:aa:8c:ce:
7c:e2:4e:cb:7e:52:1d:cd:02:33:d7:d9:bc:d1:31:
02:e2:e4:f3:c7:2a:f5:16:b1:48:81:6c:0c:d5:1a:
f0:23:66:48:5f:9c:ed:76:f6:23:3a:d1:01:ad:22:
58:2f:2a:f8:2a:dd:19:98:fb:ed:a3:bb:f6:c4:80:
64:97:49:f0:25:83:da:f5:ef:43:83:31:1d:e7:b1:
81:07:a7:ac:de:86:11:6e:9c:24:af:1d:b5:fa:fc:
ce:89:0e:58:7f:68:0c:3c:75:07:f9:91:a9:69:49:
a6:f2:54:33:96:69:78:87:63:06:46:e7:48:19:06:
71:c6:c5:85:53:05:cf:1a:b2:1b:ea:55:77:23:6b:
ed:03:c6:c0:a3:6d:f6:83:6a:09:57:88:e1:15:f6:
4a:77:21:cd:a2:62:69:64:3a:4b:78:76:22:1f:26:
7d:93:d7:72:18:e2:cc:0f:c5:59:a2:76:7d:54:9d:
ee:d2:61:b4:1c:2a:5f:0e:97:a2:d4:72:2f:80:1c:
f6:89:10:10:ea:4d:6e:af:b2:d1:5d:f6:26:df:d5:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:AC:8B:89:0B:C9:DE:B3:A4:D6:AA:54:45:D0:65:B8:23:D8:69
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4c:c2:35:cf:74:88:ee:fe:da:ce:fc:de:0d:27:f7:ec:61:
b4:2d:29:1e:2c:c5:e0:78:e5:a5:83:b2:e0:f6:67:a6:4a:f2:
14:ed:69:27:27:65:c6:14:78:88:0a:b2:4b:4d:b3:99:e1:7c:
d2:2f:e6:1d:4b:42:20:64:e9:8f:5b:cd:d3:94:7a:6e:c2:c5:
d8:75:68:7e:d5:c5:63:23:67:99:b2:80:07:b5:a4:d4:11:88:
24:45:59:42:a1:41:60:b4:f5:05:8a:71:93:da:86:a4:4e:2d:
80:1c:4e:97:b6:f8:04:8c:e0:15:ad:a6:f6:d5:15:2d:af:58:
31:61:66:1f:5a:2a:65:7e:13:a3:79:62:af:50:8f:90:7b:96:
b7:d9:3d:38:b3:5c:e6:09:6c:de:ed:56:ab:cf:00:36:c9:93:
4c:07:1a:8d:ff:f7:f5:eb:53:c2:4b:b3:e3:b2:91:b0:2d:ce:
c8:6f:70:cf:60:1a:27:d2:d4:80:55:32:2e:3f:65:4e:66:ea:
2d:d1:18:ec:a1:47:12:02:57:c3:ee:27:92:b9:f6:8d:66:be:
da:68:32:3c:5f:9a:f4:f8:1a:01:c8:eb:e1:07:8d:e9:0c:18:
56:7f:78:03:18:ab:c5:af:81:e6:67:9a:31:5f:69:4f:2a:d2:
d1:2e:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:22 2025 by rpki-client