Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/VVkXzzLot1NoIJDj7qPW9t8KJeA.roa
File: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (raw, json)
Hash identifier: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=
Subject key identifier: 55:59:17:CF:32:E8:B7:53:68:20:90:E3:EE:A3:D6:F6:DF:0A:25:E0
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019423D7367A97098F1E37A8F7F27EA6354E
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/VVkXzzLot1NoIJDj7qPW9t8KJeA.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64465
IP address blocks: 91.212.251.0/24 maxlen: 24
2001:67c:179c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:36:7a:97:09:8f:1e:37:a8:f7:f2:7e:a6:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555917cf32e8b753682090e3eea3d6f6df0a25e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:e9:f5:d8:64:f9:8c:23:68:88:72:a0:21:
39:21:6d:7c:35:67:7f:cf:6a:2c:a6:09:bb:50:8a:
ca:de:12:f7:df:59:59:f0:62:d5:9e:23:90:fa:49:
51:9b:2b:65:7f:b5:1c:c6:f9:9f:31:08:95:43:7c:
94:2f:3c:52:e6:a8:ab:22:67:15:f9:37:fa:1d:c2:
4c:9b:44:42:1f:f9:85:52:fe:4d:3d:ae:65:12:cb:
86:1a:06:a7:28:34:fe:ff:ad:91:19:bf:8e:a4:e1:
5f:2b:4c:12:56:7f:0a:99:cc:9d:7b:76:bb:57:18:
1d:e1:1a:42:48:68:c7:e6:e2:56:9b:f2:6e:08:7c:
0d:4f:cd:05:71:f4:48:b5:65:e8:7b:13:e6:63:52:
c0:82:54:a7:8d:3d:c2:87:69:50:7c:2e:cf:aa:e0:
87:a4:f7:9f:e0:88:cd:98:f8:34:be:87:79:d1:1b:
0b:d1:09:99:e6:8b:aa:38:23:7c:8b:d5:99:c7:1f:
64:f6:e4:4f:f9:46:73:4b:7f:ba:f0:39:a9:94:77:
d9:42:e3:9c:73:7a:3f:9f:22:8f:60:62:dd:1a:e8:
a0:8d:de:1f:81:9f:81:35:15:b4:2e:dd:cf:7c:92:
d2:5e:22:a1:45:47:a7:51:c6:00:fc:52:c9:6d:2c:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:17:CF:32:E8:B7:53:68:20:90:E3:EE:A3:D6:F6:DF:0A:25:E0
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/VVkXzzLot1NoIJDj7qPW9t8KJeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.251.0/24
IPv6:
2001:67c:179c::/48
Signature Algorithm: sha256WithRSAEncryption
27:fa:3c:d8:c2:fc:3d:97:98:e4:1e:af:24:70:6e:af:27:74:
40:51:46:3c:80:05:2f:8f:91:25:5a:52:75:89:ae:e1:fb:28:
83:97:59:e2:5f:fc:73:2f:08:cb:a3:83:5f:72:41:af:80:ac:
2b:dd:72:13:3a:5d:12:68:0b:8e:66:02:53:c7:64:e8:7b:42:
73:89:4c:9d:05:05:32:27:a6:45:e7:00:fc:a4:29:e5:f9:eb:
12:e4:e0:f4:38:d0:10:04:de:8a:b0:a1:15:45:71:32:20:31:
3c:14:4b:86:14:82:2e:29:cc:49:b3:1a:f6:5b:ea:cf:3b:37:
c6:cf:38:e8:b3:3a:32:5b:04:7c:51:ab:1d:3c:f2:f5:d2:b1:
3d:d0:8d:f0:07:9e:0a:b6:50:23:6b:cd:90:49:85:9d:18:7e:
01:01:10:7f:b3:dc:5e:8e:c0:ff:c0:c0:5f:31:e1:90:02:24:
b1:e6:d0:b7:71:54:5b:aa:38:e9:91:d1:7d:35:ea:f1:61:df:
ce:93:9b:b3:08:05:21:2b:ef:2c:1d:11:d6:6e:64:dc:f7:82:
87:8c:db:fb:13:4d:ac:71:90:50:a4:a9:30:55:33:5e:54:2d:
c6:84:3e:0c:38:3f:9e:d6:21:39:f1:c1:5c:df:8b:14:85:03:
63:63:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:46 2025 by rpki-client