Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/VEDYX_cUfJzMWRyMM4Dauca7wqY.roa
File: VEDYX_cUfJzMWRyMM4Dauca7wqY.roa (raw, json)
Hash identifier: emvPGd/BGNmoaOgiTJawr2YtCEYZXYHWYyhS2hE0sKg=
Subject key identifier: 54:40:D8:5F:F7:14:7C:9C:CC:59:1C:8C:33:80:DA:B9:C6:BB:C2:A6
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01963E94F0D8F5FC261D73897731BFFADD02
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/VEDYX_cUfJzMWRyMM4Dauca7wqY.roa
Signing time: Wed 16 Apr 2025 12:31:10 +0000
ROA not before: Wed 16 Apr 2025 12:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29534
IP address blocks: 77.88.236.0/24 maxlen: 24
77.88.237.0/24 maxlen: 24
77.88.238.0/24 maxlen: 24
77.88.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:94:f0:d8:f5:fc:26:1d:73:89:77:31:bf:fa:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Apr 16 12:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5440d85ff7147c9ccc591c8c3380dab9c6bbc2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:01:6f:48:b6:24:40:8b:15:4c:74:56:78:
8f:8c:93:5f:a3:9d:fd:08:fa:66:6b:c3:3e:44:be:
8b:b1:a9:6f:4c:70:f8:78:63:f2:bb:81:5a:7b:a5:
94:11:69:b0:5f:26:bc:0a:17:2c:cb:7a:78:16:8a:
0d:f4:ec:8d:b5:92:54:26:93:3b:df:68:78:a5:c3:
4a:97:8e:69:a4:dc:12:47:b5:30:c2:0a:67:bd:b5:
a8:7e:77:c6:a0:f9:46:96:c0:aa:f1:ca:5e:e5:ee:
15:3e:9b:a6:09:cc:14:d0:50:30:b3:69:73:66:c8:
28:11:81:de:24:f7:82:63:c0:94:ef:fd:a3:ab:98:
a4:30:ca:07:c7:71:4a:00:34:96:90:63:89:03:f0:
19:cc:37:71:bf:f0:b6:1a:5c:35:00:71:ae:7e:1b:
88:01:a8:71:e4:54:53:74:b6:7b:5a:8d:26:b8:34:
28:0d:74:44:e2:0f:13:df:c6:a6:30:c3:54:aa:10:
36:9d:0a:b4:93:2d:ee:e7:40:a8:fe:7c:a6:5a:4a:
e8:49:0c:50:54:35:70:b1:a5:75:ab:b3:c1:0b:12:
0a:b1:44:09:3e:1b:47:33:c1:74:d2:7c:bd:a9:e3:
d4:4f:0a:08:31:ef:8a:29:02:78:f8:ad:bf:15:98:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:D8:5F:F7:14:7C:9C:CC:59:1C:8C:33:80:DA:B9:C6:BB:C2:A6
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/VEDYX_cUfJzMWRyMM4Dauca7wqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.236.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f2:60:7d:53:36:69:40:45:ed:4f:8c:91:54:e1:6d:4c:b9:
86:21:24:d0:ea:78:f1:19:f2:d3:c9:65:2e:b2:f7:30:62:8b:
04:69:c9:7d:ff:1b:03:9c:73:e1:e7:38:fc:18:28:6e:b1:25:
df:46:89:7d:70:70:f7:ee:29:b2:c5:a9:70:34:65:5e:e6:94:
21:2c:a0:07:ec:15:92:89:14:82:b3:2c:9d:3d:0d:1b:78:b4:
f3:3a:bf:7d:95:ae:99:df:03:51:44:f7:bd:41:e7:5b:d2:07:
08:7e:47:38:de:72:56:10:3d:ba:ad:87:5e:33:7f:80:2d:6c:
00:99:27:8a:2d:73:59:ae:28:2c:44:ce:89:fa:5f:6a:4f:fe:
f2:32:12:c6:be:60:5c:ee:04:01:3c:dd:d2:e7:10:71:13:15:
53:fb:33:56:7c:e0:30:3e:33:b7:d1:5a:bf:19:00:37:4b:b2:
11:f4:8d:d2:31:e3:91:2c:02:74:47:54:aa:41:74:9c:ee:e7:
c4:ea:ff:e4:4a:7d:aa:84:5b:67:22:13:3a:de:01:69:a6:09:
2c:5e:85:09:dc:17:28:70:10:1a:33:6a:16:bb:4e:3f:c0:4b:
71:fb:78:10:9d:13:46:f9:64:5e:48:8c:92:60:99:03:13:95:
f5:4a:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:17 2025 by rpki-client