Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vZSI2LaRad19lSy1p-p3fBBNwQk.roa
File: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (raw, json)
Hash identifier: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=
Subject key identifier: BD:94:88:D8:B6:91:69:DD:7D:95:2C:B5:A7:EA:77:7C:10:4D:C1:09
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 01942823205FF52D03869B96D8C5F50018D1
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vZSI2LaRad19lSy1p-p3fBBNwQk.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36040
IP address blocks: 46.28.246.0/24 maxlen: 24
46.28.247.0/24 maxlen: 24
193.33.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:20:5f:f5:2d:03:86:9b:96:d8:c5:f5:00:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd9488d8b69169dd7d952cb5a7ea777c104dc109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:a8:20:59:cd:cc:82:1a:85:d7:75:4a:2b:
a8:a2:48:95:19:e5:17:c5:fb:f2:18:e1:b3:e4:76:
40:99:50:e3:df:c7:38:68:5b:14:ed:47:d9:1c:44:
c8:03:f4:7a:e6:7b:64:af:7b:2d:c3:e8:56:22:2b:
99:b6:c1:4f:cc:14:16:6b:50:8f:9e:de:40:07:2b:
3d:c2:b1:fd:a3:4b:5a:45:69:2f:c5:2f:a4:c6:1a:
cd:0c:27:d9:c4:5e:df:f0:c6:48:31:53:7b:6f:ae:
67:6e:76:5b:66:8b:c5:32:2e:39:2f:c1:9e:7c:5c:
f5:e9:79:48:a4:85:df:83:2c:b9:49:90:6f:29:9a:
82:88:71:ef:31:6b:e4:fb:13:fc:39:e0:cd:7a:09:
75:cc:33:9c:17:ee:85:f7:16:f2:fe:81:68:48:77:
2a:4c:fe:4a:41:d3:46:84:ef:2b:88:53:b0:4e:c2:
29:e4:9f:31:80:04:e3:d8:b0:19:51:48:9f:40:f8:
5f:fd:d3:21:2e:cf:49:5a:42:93:0a:03:e6:1c:e3:
4b:ac:d1:3d:bc:48:f5:15:a0:81:10:d2:4c:83:e5:
66:94:f0:17:bd:58:2b:f3:05:18:aa:bc:bd:47:94:
a7:e3:00:d6:0f:2e:50:dd:dc:2d:77:6e:17:ba:a4:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:88:D8:B6:91:69:DD:7D:95:2C:B5:A7:EA:77:7C:10:4D:C1:09
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vZSI2LaRad19lSy1p-p3fBBNwQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.246.0/23
193.33.5.0/24
Signature Algorithm: sha256WithRSAEncryption
17:85:46:97:a6:a9:ed:b6:93:04:c3:fc:ac:0d:f5:8c:ee:45:
3f:5b:70:18:63:39:45:ba:31:eb:59:fc:eb:7c:ee:da:0a:f3:
23:23:de:b8:d4:ad:9a:42:53:27:d3:43:39:be:f0:e6:a5:26:
ca:47:1b:74:1c:db:bc:62:ab:6b:ac:df:2b:75:1f:dd:71:81:
f9:81:85:b5:c5:8a:bb:14:54:41:15:34:86:97:bc:50:66:e9:
13:88:b1:78:b6:3e:4d:fb:de:91:02:57:bf:25:3e:e1:a4:57:
d0:ac:57:3a:67:3d:5f:75:88:9a:a7:61:76:39:d1:4c:f4:29:
f6:7e:9d:8d:83:49:6e:af:d2:3d:4a:57:67:45:b4:97:db:7c:
12:1d:ab:f6:a5:ea:b1:72:dc:ee:a4:ff:5c:17:c7:e2:29:22:
39:3d:5e:a5:b0:a9:49:29:a1:58:e8:05:5e:06:86:26:89:5b:
96:6f:c3:e3:91:21:c1:b2:8e:99:8e:e6:6b:c6:72:ff:60:87:
96:ea:5b:13:45:2d:7c:b2:92:7c:a6:59:ec:78:04:7b:70:35:
91:33:c8:4e:d9:cc:fd:75:69:27:53:43:ca:0e:2c:57:48:05:
c2:69:6a:e0:4e:15:86:e6:fc:24:15:1d:c2:9c:4d:8c:71:eb:
2c:74:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:47 2025 by rpki-client