Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/VicyF_0e_bvvcn0fKM8q40zu1n8.roa
File: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (raw, json)
Hash identifier: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=
Subject key identifier: 56:27:32:17:FD:1E:FD:BB:EF:72:7D:1F:28:CF:2A:E3:4C:EE:D6:7F
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F76B8C450A9AD9BCEF23036D2764E
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/VicyF_0e_bvvcn0fKM8q40zu1n8.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35711
IP address blocks: 45.14.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:76:b8:c4:50:a9:ad:9b:ce:f2:30:36:d2:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56273217fd1efdbbef727d1f28cf2ae34ceed67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:34:41:6c:62:32:f5:b1:89:61:48:92:b4:
23:d1:25:0b:4e:13:8b:47:e0:bc:ac:df:a8:6c:a1:
82:35:0a:da:16:b3:4c:2e:c7:4b:70:2c:e2:56:31:
08:58:b6:8d:9d:20:a7:db:1a:15:1c:dc:8c:2e:19:
6b:bf:15:3b:b4:88:b5:3b:e7:df:fb:64:36:6a:cb:
8e:14:7d:30:3b:5f:b3:f1:db:16:ec:6e:9e:c3:f1:
e1:67:98:0a:6c:c2:c8:18:41:ab:9d:54:ab:12:2a:
96:2f:c0:0d:ca:01:39:79:d0:2d:3b:93:28:9e:ef:
38:01:1c:52:06:7e:a0:1f:75:38:f5:fa:61:d5:17:
86:ce:e8:36:58:fc:62:96:c9:bd:00:c5:d9:9b:12:
4a:a1:df:52:57:37:21:f7:9e:21:24:83:36:92:9c:
cd:a0:53:ff:c1:93:af:f4:50:08:30:b9:c9:19:64:
9d:8d:20:e6:3a:d8:ae:90:f0:bd:fd:73:7f:f9:db:
09:40:7e:cd:31:71:b8:bb:51:93:d2:9b:23:d3:d1:
db:1c:f8:fd:a3:52:ca:64:a7:b8:cd:cc:23:2f:7c:
24:30:c2:7f:1d:ca:f6:94:b2:1d:e5:e7:10:85:32:
85:c4:e2:c1:dc:d6:0e:c1:d1:50:ad:24:47:54:3b:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:32:17:FD:1E:FD:BB:EF:72:7D:1F:28:CF:2A:E3:4C:EE:D6:7F
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/VicyF_0e_bvvcn0fKM8q40zu1n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b3:48:69:ce:f3:a5:13:35:f5:7f:9d:db:52:f7:fb:e7:7b:
cb:90:eb:c2:db:95:d4:01:24:51:8d:d6:c5:9f:3c:de:33:6b:
aa:51:2c:b3:1d:54:ac:b4:91:aa:19:86:57:2f:1f:ca:13:2f:
77:9d:80:1d:8c:6f:10:23:32:54:a2:82:27:d6:c5:27:34:dd:
82:83:2b:49:bc:e4:27:16:38:c2:55:3f:89:c2:3a:e7:06:3b:
9f:34:58:a8:cd:f9:80:94:32:ae:7c:e5:09:3c:63:ca:3b:a7:
8f:d5:b0:89:3b:2c:8f:c5:30:33:b6:35:69:e2:08:71:47:d2:
b3:bf:a9:2e:6b:be:6c:34:cc:c2:73:34:d3:7c:42:23:a8:f2:
8d:5a:1e:61:7b:34:47:37:b5:58:91:6d:b4:d0:71:ea:5c:82:
d0:09:25:08:14:8b:f5:a4:cf:9f:95:49:6d:54:d3:0c:3a:fb:
85:92:c9:ff:1b:8f:09:fa:da:19:16:e6:30:91:3a:7f:68:d9:
bd:cd:4a:a2:65:d8:2d:37:26:66:f7:e4:64:f4:1c:ff:60:ea:
aa:44:09:69:16:d9:57:f4:e9:79:8d:11:70:0a:e2:54:4b:c3:
d9:15:95:a0:f1:74:77:b3:0e:71:a1:d7:69:71:ed:24:bf:91:
f6:55:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:41:40 2025 by rpki-client