Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/VnV_NALClcugVnJ8tM0-ssB-Wvo.roa
File: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (raw, json)
Hash identifier: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=
Subject key identifier: 56:75:7F:34:02:C2:95:CB:A0:56:72:7C:B4:CD:3E:B2:C0:7E:5A:FA
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019422FBAC5690B7D6DBCF3459A4B3512BA2
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/VnV_NALClcugVnJ8tM0-ssB-Wvo.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.148.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ac:56:90:b7:d6:db:cf:34:59:a4:b3:51:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56757f3402c295cba056727cb4cd3eb2c07e5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:c1:3f:e8:33:96:f3:83:96:93:4e:d4:97:
c8:a8:1e:eb:3c:79:43:16:f3:6d:33:2e:5f:b1:70:
f0:d3:e7:aa:b1:71:c5:66:0e:8b:8e:86:a6:2a:0c:
9d:ef:1c:7b:eb:4b:f6:15:db:8d:68:05:ad:bd:3a:
6b:0e:e7:42:96:31:18:b3:9b:7e:d6:16:bb:ba:16:
0e:9a:4d:65:ba:4f:59:f0:db:75:19:b4:5f:7b:3e:
29:5a:c2:d3:95:5c:ce:31:8b:b4:0d:04:ec:8c:e9:
71:5b:f4:69:8f:b3:2c:22:7b:e8:4c:23:97:02:8d:
ce:f0:ee:48:58:24:30:22:30:ab:7e:81:5e:a5:3d:
13:00:9e:2e:a4:af:cd:34:b4:85:61:fb:28:ba:15:
d9:08:3b:18:a6:48:6e:ae:1a:4b:2f:5a:e1:41:bc:
16:0b:18:9a:50:59:5c:20:92:15:5e:30:83:f2:10:
ff:18:53:16:7d:34:0e:7d:4b:c0:7c:c6:8a:6f:5d:
74:6d:f7:1c:6f:fa:c9:74:62:b1:0e:86:35:b9:c3:
f3:26:64:a3:c7:79:df:75:dd:75:81:09:29:ba:00:
a1:18:da:ae:9e:9c:19:c8:51:98:14:42:12:c5:29:
96:06:ff:3b:09:f3:77:d4:53:99:7c:22:30:9c:10:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:7F:34:02:C2:95:CB:A0:56:72:7C:B4:CD:3E:B2:C0:7E:5A:FA
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/VnV_NALClcugVnJ8tM0-ssB-Wvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8a:84:2f:70:28:db:5d:8a:10:22:4d:cc:b4:bb:e6:41:1f:
43:27:96:7f:2d:cb:92:b4:0d:5a:a1:c0:57:17:03:45:5d:d3:
f5:5f:c4:43:20:86:bd:cc:57:9b:50:53:f0:f8:ac:7c:00:9a:
4d:c0:b8:2c:e4:e7:cb:6a:11:71:1c:b1:21:3c:7b:52:e7:d5:
aa:e2:18:b2:32:4c:ab:c4:69:43:7b:e0:46:4c:69:2d:99:1a:
11:b5:16:2d:b4:b2:cb:1e:b5:66:cf:2a:ee:96:e6:b3:49:47:
7c:80:d8:7f:5b:3c:14:36:41:9c:3c:19:6c:b0:48:a6:7b:e7:
82:96:54:51:f2:86:82:33:a3:94:14:9f:23:b9:d4:3b:3d:57:
57:ef:f7:b1:c9:29:a1:37:ee:56:dc:e8:ca:54:96:9e:a7:2b:
6b:0b:52:e9:d7:9f:fd:fc:9e:51:ba:d0:78:9e:dc:98:45:a6:
f6:e6:25:c0:1f:a2:3e:e2:bf:4a:97:15:a4:a7:d5:cb:77:e5:
48:a5:56:25:ae:ac:49:38:15:3c:83:6b:60:84:b0:58:84:5a:
95:50:b5:a2:fe:40:01:9f:20:5e:86:9f:29:9a:d9:ce:81:49:
fa:3c:24:b8:b3:ed:f1:cd:ae:bf:1f:86:25:f9:e1:7b:41:6a:
49:45:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:44 2025 by rpki-client