Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/VSEL2iQWB7y3te4btwgqQzATX5A.roa
File: VSEL2iQWB7y3te4btwgqQzATX5A.roa (raw, json)
Hash identifier: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=
Subject key identifier: 55:21:0B:DA:24:16:07:BC:B7:B5:EE:1B:B7:08:2A:43:30:13:5F:90
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 01942143BAD77392059E4A3D080C314BC83A
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/VSEL2iQWB7y3te4btwgqQzATX5A.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139341
IP address blocks: 51.39.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ba:d7:73:92:05:9e:4a:3d:08:0c:31:4b:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55210bda241607bcb7b5ee1bb7082a4330135f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:ab:49:49:fe:d3:39:45:bc:0c:9a:23:73:
2b:6b:1f:28:0a:4c:de:d6:a4:7d:46:ae:7f:7e:55:
a2:0b:ad:b5:38:de:37:24:c3:29:fb:47:e1:fd:74:
09:8b:94:b1:4f:eb:aa:a2:c0:3a:b3:f8:1b:d6:58:
02:68:3a:ad:bb:83:6a:41:13:b0:e0:28:ac:61:92:
fe:ad:ce:3d:6b:76:4e:5c:c9:c4:28:7d:7c:68:0e:
a1:8c:4b:f2:c3:eb:db:15:ee:c5:66:99:f6:8e:b8:
df:fc:d7:5a:8b:74:b1:28:4e:30:c4:cb:2b:c5:f7:
9b:ff:6f:fb:fc:24:72:3f:6b:c4:5d:a1:42:8e:8d:
87:e1:27:c3:bd:bd:d0:32:ff:99:71:f8:35:2d:27:
29:e1:c2:03:de:d3:44:b5:8b:0f:49:88:b6:01:a4:
25:6d:10:05:f1:65:77:57:4e:6f:f1:b3:3a:27:c5:
b1:c2:10:95:6a:58:e5:ce:6c:3c:64:00:1c:47:86:
90:8b:9d:24:af:55:e2:58:4e:88:b1:be:c5:95:d2:
62:b0:50:25:d6:65:81:7a:50:31:12:d7:96:7c:7b:
4e:cd:09:01:75:ad:92:7b:fc:25:7f:03:2c:09:fa:
a1:ea:f6:33:0b:65:7b:c1:ed:ec:ef:27:09:0c:a3:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:0B:DA:24:16:07:BC:B7:B5:EE:1B:B7:08:2A:43:30:13:5F:90
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/VSEL2iQWB7y3te4btwgqQzATX5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.39.179.0/24
Signature Algorithm: sha256WithRSAEncryption
07:54:95:cb:a9:be:d9:89:4b:51:b2:45:ae:30:4d:c0:6a:fc:
92:ca:de:34:8a:54:d0:c6:0d:33:5d:03:5d:08:68:0d:c0:de:
13:b9:34:11:74:65:fa:f5:cf:99:0c:32:38:4a:d9:b1:90:bd:
fd:55:43:b4:17:18:7d:3d:8e:41:0a:0d:0f:ad:92:71:0b:10:
a4:bd:b6:9a:a0:5f:c1:59:e3:38:5d:02:2d:8d:09:89:e0:23:
f5:4c:db:43:08:26:2b:d3:61:23:50:51:b5:90:be:21:95:9e:
95:63:38:44:94:d1:0e:39:fb:d6:3a:a0:eb:5d:b0:18:b5:d7:
2d:7b:70:0c:c4:23:4b:a0:2a:41:56:7e:8f:64:93:71:79:6d:
e7:53:dc:1c:28:02:a2:0a:7d:d2:41:52:87:25:76:cf:f2:5d:
44:21:59:b1:8f:19:ae:c3:e4:c2:40:96:ff:21:3d:c5:20:fe:
9b:69:f1:1f:46:57:08:ab:95:50:a4:96:c6:18:1a:1d:b5:b3:
d2:20:e6:e7:0f:22:6d:1c:b5:b1:79:ed:7c:fd:3f:40:73:af:
58:b1:30:21:e2:42:16:b9:fb:ce:14:10:2b:20:1c:fd:48:e6:
e6:c1:63:d1:8e:2d:f7:80:d9:68:22:1c:85:f7:44:30:c9:91:
2a:a2:f8:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ7rXc5IFnko9CAwxS8g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjUwMTAxMDk0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTIxMGJkYTI0MTYwN2JjYjdiNWVlMWJiNzA4MmE0MzMwMTM1ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjKrSUn+0zlFvAyaI3Mrax8oCkze
1qR9Rq5/flWiC621ON43JMMp+0fh/XQJi5SxT+uqosA6s/gb1lgCaDqtu4NqQROw
4CisYZL+rc49a3ZOXMnEKH18aA6hjEvyw+vbFe7FZpn2jrjf/Ndai3SxKE4wxMsr
xfeb/2/7/CRyP2vEXaFCjo2H4SfDvb3QMv+Zcfg1LScp4cID3tNEtYsPSYi2AaQl
bRAF8WV3V05v8bM6J8WxwhCValjlzmw8ZAAcR4aQi50kr1XiWE6Isb7FldJisFAl
1mWBelAxEteWfHtOzQkBda2Se/wlfwMsCfqh6vYzC2V7we3s7ycJDKNMbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUhC9okFge8t7XuG7cIKkMwE1+QMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvVlNFTDJpUVdCN3kzdGU0YnR3Z3FRekFUWDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMyezMA0G
CSqGSIb3DQEBCwUAA4IBAQAHVJXLqb7ZiUtRskWuME3AavySyt40ilTQxg0zXQNd
CGgNwN4TuTQRdGX69c+ZDDI4StmxkL39VUO0Fxh9PY5BCg0PrZJxCxCkvbaaoF/B
WeM4XQItjQmJ4CP1TNtDCCYr02EjUFG1kL4hlZ6VYzhElNEOOfvWOqDrXbAYtdct
e3AMxCNLoCpBVn6PZJNxeW3nU9wcKAKiCn3SQVKHJXbP8l1EIVmxjxmuw+TCQJb/
IT3FIP6bafEfRlcIq5VQpJbGGBodtbPSIObnDyJtHLWxee18/T9Ac69YsTAh4kIW
ufvOFBArIBz9SObmwWPRji33gNloIhyF90QwyZEqovgF
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:25:33 2025 by rpki-client