Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/vl15h6bSawu987-Q_9jiY_8d_bU.roa
File: vl15h6bSawu987-Q_9jiY_8d_bU.roa (raw, json)
Hash identifier: Ky1qbRFkXL3xxI3+FV1tNHYzBN6SggIg4pNwGCFKnF8=
Subject key identifier: BE:5D:79:87:A6:D2:6B:0B:BD:F3:BF:90:FF:D8:E2:63:FF:1D:FD:B5
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019424B363A2F6A3BFE82D93C5D2D043FB81
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/vl15h6bSawu987-Q_9jiY_8d_bU.roa
Signing time: Thu 02 Jan 2025 01:48:43 +0000
ROA not before: Thu 02 Jan 2025 01:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43045
IP address blocks: 5.182.52.0/22 maxlen: 24
46.17.48.0/21 maxlen: 24
89.221.48.0/20 maxlen: 24
2a02:22c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:63:a2:f6:a3:bf:e8:2d:93:c5:d2:d0:43:fb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Jan 2 01:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be5d7987a6d26b0bbdf3bf90ffd8e263ff1dfdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:4f:81:4d:19:f5:0c:02:ea:e4:86:c7:82:
9e:66:4e:ac:0f:5b:2f:a9:a9:2d:2a:11:cc:91:05:
2f:d6:93:82:c3:cb:28:55:19:d9:3f:21:ed:16:36:
d6:9f:56:4b:4a:47:49:ee:b7:c6:b9:99:76:92:3f:
f9:ce:ba:95:25:e5:aa:8c:65:28:6a:e3:c1:c0:37:
50:a7:11:75:fb:13:2b:5e:4e:39:38:0f:47:16:bf:
15:af:72:d6:8d:80:9d:2e:48:68:ea:a0:b9:b5:62:
1b:f8:b4:cf:73:51:c5:0c:40:b5:7a:43:94:fd:2d:
f8:d3:26:db:87:8a:45:b8:f5:7a:41:cf:76:70:33:
e2:8b:a8:f4:33:e4:1f:90:18:b2:08:3d:0b:13:e7:
69:7d:86:d2:3f:ec:d3:45:dd:3e:10:73:d5:62:20:
3b:ac:99:de:c7:28:53:5a:cd:1c:27:08:12:11:09:
00:98:bb:02:13:7c:d5:9b:fc:fe:41:ba:92:7b:75:
94:a2:b5:74:2d:30:d3:17:ab:f9:e5:5f:f0:5e:6c:
4e:7a:74:ba:41:12:b9:32:3b:a6:2e:ee:44:dc:d9:
de:8e:4e:13:c4:d0:0e:c1:01:5e:d1:ac:cb:37:07:
64:fa:b2:45:79:b9:fc:34:53:ec:75:a7:27:fa:63:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:79:87:A6:D2:6B:0B:BD:F3:BF:90:FF:D8:E2:63:FF:1D:FD:B5
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/vl15h6bSawu987-Q_9jiY_8d_bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.52.0/22
46.17.48.0/21
89.221.48.0/20
IPv6:
2a02:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:25:ad:65:72:30:3d:dd:a5:19:1b:da:8a:73:cd:31:a8:ae:
7d:42:d3:10:8e:69:90:91:16:88:a0:dc:72:bd:a2:63:45:81:
3d:d8:bc:c7:32:35:d4:bf:df:3a:24:31:5e:34:ad:74:2d:fc:
3c:d3:46:95:87:3b:c2:5b:76:ae:a4:11:92:e8:21:c4:f8:a2:
74:08:cf:24:2e:31:f5:20:d4:25:c4:ee:b5:ee:ee:b2:dc:54:
bc:c8:59:a3:86:8f:b8:a1:97:f1:bd:87:81:8e:57:6e:b9:ec:
b2:0b:e3:b6:51:33:eb:9d:70:4a:b9:f7:99:1f:a5:1c:32:4e:
1c:51:54:b6:6a:c4:12:b6:e5:76:82:84:d6:f5:2b:64:c4:ed:
b8:92:f5:3d:7f:42:60:f8:1f:64:02:47:d1:bc:5b:ad:ff:3a:
2b:74:df:5f:b4:f2:a4:c7:f7:9f:b3:70:5d:62:78:0c:45:b1:
14:80:ee:49:74:66:48:6d:78:78:ce:be:a2:07:8b:df:fa:4d:
e8:3e:c0:86:d7:5a:bc:23:d5:42:c5:9f:33:1e:17:2a:0f:7c:
a2:56:1c:49:ae:4c:97:ea:38:8b:6b:47:bc:db:af:81:ca:0f:
3c:83:61:b5:a8:9e:04:38:33:01:cc:21:d8:32:3d:4f:62:12:
5d:cd:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:00:53 2025 by rpki-client