Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa
File: VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa (raw, json)
Hash identifier: amZYPVVWihv5JeymXC/hm0CI0v2XFAyE3R7vmcHdxNw=
Subject key identifier: 56:C1:1C:E5:D6:9A:26:6C:BC:38:9E:29:67:C4:BE:BA:C6:BD:CE:5A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01981910C46A808AC836D9865B01A5ED4D2F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa
Signing time: Thu 17 Jul 2025 15:46:25 +0000
ROA not before: Thu 17 Jul 2025 15:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.210.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:10:c4:6a:80:8a:c8:36:d9:86:5b:01:a5:ed:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 17 15:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56c11ce5d69a266cbc389e2967c4bebac6bdce5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:63:24:2f:fe:7c:5c:f4:93:4b:6e:29:7f:
b8:39:32:1b:64:2a:39:3a:8e:56:92:48:fc:39:aa:
26:32:4e:1d:2c:2d:ce:d2:c9:b1:56:47:e9:c9:94:
90:96:3e:96:34:c5:21:4a:43:8e:db:36:63:50:d0:
b0:5d:df:43:f5:2b:0c:de:44:9b:4d:07:d3:c2:85:
2a:bc:37:bb:ea:d4:38:01:4c:76:35:19:fa:97:9d:
2a:62:f8:7b:df:01:99:f5:fe:52:ed:9a:a3:f2:55:
c1:08:9f:40:e9:9b:f4:27:03:a7:25:d4:81:af:84:
10:b6:77:df:74:1f:51:d6:4d:bd:fc:da:33:c7:1f:
98:83:bd:3a:01:f4:06:49:dc:b4:4f:65:9f:14:85:
0f:ef:3c:9d:4e:8d:96:ba:a1:c8:d9:77:76:7b:ab:
e8:aa:20:b3:24:84:79:ad:b6:cc:f6:0b:7e:74:3c:
e3:ab:ea:21:9e:c4:5b:3c:56:88:b3:3a:1e:b0:e8:
45:81:18:64:d4:bc:3c:79:86:09:85:43:c6:ec:ac:
bf:f8:38:c1:fa:07:3a:cb:9d:e4:5d:d5:12:61:c4:
0f:c7:f5:17:d0:05:26:d8:b8:2c:45:29:98:88:02:
99:3a:c5:70:28:28:ec:3c:64:fe:7b:3b:ab:39:0d:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:1C:E5:D6:9A:26:6C:BC:38:9E:29:67:C4:BE:BA:C6:BD:CE:5A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.210.0/24
194.143.217.0-194.143.218.255
194.143.221.0/24
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.202.0/23
213.220.2.0/24
213.220.4.0/23
213.220.9.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
70:45:8f:ce:21:ce:5d:b2:e5:23:64:56:8a:4e:4b:c9:ab:68:
38:10:96:96:66:ec:1f:9a:17:74:a6:2b:29:60:03:f7:3e:28:
01:85:88:df:c3:b0:26:c2:69:0a:d1:f8:ee:51:e4:07:cb:98:
06:c7:d5:03:f9:2d:21:df:d1:1b:54:e9:b3:02:2a:6e:6d:2a:
93:72:bf:a4:05:6e:f9:4c:30:52:65:17:b4:65:46:d3:34:42:
c0:fc:bb:3a:0b:cc:a9:d4:48:13:1a:a9:20:02:b2:3c:57:05:
2a:cf:91:30:d9:21:7f:ab:87:7f:7d:64:56:05:8c:d6:d1:8e:
1e:7d:68:26:61:45:16:11:e3:f2:dc:1e:5f:81:53:84:6b:a3:
1b:9d:09:33:2d:82:be:12:e2:69:3e:c1:7d:98:13:82:6a:f9:
ff:51:f8:0d:e5:43:12:82:80:09:06:f8:16:af:3a:01:e0:18:
47:4a:6e:c9:11:83:b4:23:b6:6a:00:37:75:49:c4:95:04:d2:
9b:2e:2f:d7:51:0d:f4:25:9f:91:ca:92:3e:60:78:a5:30:86:
ca:2e:c4:66:9c:9e:a1:6c:38:80:07:e8:79:ff:43:a6:94:f0:
63:86:a6:28:ca:2c:fc:bc:25:c2:48:79:15:ea:1a:bd:6e:81:
b1:cd:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:04:52 2025 by rpki-client