Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa
File: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (raw, json)
Hash identifier: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=
Subject key identifier: 54:33:DF:C5:A6:4D:62:03:7A:7F:49:A0:B4:30:F6:C2:67:3A:35:48
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019427B69ABFB59115C1EA6CB5E895A941C0
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa
Signing time: Thu 02 Jan 2025 15:51:06 +0000
ROA not before: Thu 02 Jan 2025 15:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15992
IP address blocks: 91.207.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:9a:bf:b5:91:15:c1:ea:6c:b5:e8:95:a9:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Jan 2 15:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5433dfc5a64d62037a7f49a0b430f6c2673a3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:a0:0c:2a:17:f3:72:df:b8:17:18:6b:60:
4a:df:69:f5:9e:15:04:37:22:30:15:6e:04:d0:8d:
bb:9c:07:d1:b1:54:ff:9b:63:94:b4:ff:da:38:06:
7d:bb:0e:5f:07:e9:02:79:a1:ea:be:3c:22:09:50:
58:d8:a9:34:e4:05:cf:8a:32:5d:ab:0f:fa:f9:51:
34:3b:7f:8b:64:1e:e7:b2:c9:39:a5:94:2d:a3:e0:
d9:85:2a:85:1d:e8:6f:c9:b8:33:18:92:c2:1e:dc:
04:44:85:89:42:b4:2e:ba:38:45:be:c4:80:df:ff:
e5:a3:d2:d4:fb:a4:9b:b3:e7:ca:67:ac:01:af:1d:
eb:c0:f9:06:95:ea:99:bd:f0:60:07:5b:8c:b0:43:
d1:ee:4b:6d:79:8f:9c:38:93:42:2f:24:51:32:c6:
b9:bb:31:b7:86:e9:96:64:44:4b:fb:e9:83:74:cc:
00:fa:5d:31:6f:2f:93:b0:8e:8d:52:a0:0d:7a:70:
7c:7d:65:47:49:d7:db:ab:37:d2:6c:59:61:27:11:
93:c0:b9:75:45:69:a3:d7:c2:4c:50:4a:15:7d:e4:
27:df:85:d9:90:8e:da:96:5e:66:15:d9:e5:af:3d:
29:28:9a:a5:f9:89:f9:3f:6f:28:3c:90:ef:55:81:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:DF:C5:A6:4D:62:03:7A:7F:49:A0:B4:30:F6:C2:67:3A:35:48
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.192.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f1:6f:b3:48:87:78:cb:03:a9:46:67:90:b7:0e:5f:2a:c3:
b5:21:23:57:54:a6:df:3f:0c:d3:6a:df:b8:66:77:c5:13:42:
b9:e6:58:0b:90:e9:22:af:17:29:25:ed:66:47:ed:d3:5c:a7:
d4:ba:10:83:d4:8a:58:4c:22:97:8f:77:2d:a3:4a:81:4d:ea:
9e:52:56:57:a0:b4:b9:d8:30:6e:3e:28:36:f8:69:9e:00:b0:
8f:01:40:90:82:6c:1f:51:5e:9c:16:f8:c8:f7:c7:e0:d0:bc:
f5:f7:d6:f0:66:7a:e9:75:4e:2b:ca:d8:cb:9f:8d:de:ca:ec:
5d:32:5c:0b:b9:9e:cb:c6:8a:3b:3b:74:e0:cf:4f:90:79:5c:
c5:4c:95:72:70:17:f8:6d:24:02:c5:5f:e6:07:7d:46:c8:83:
28:07:70:1b:2f:16:f8:8c:5d:ea:bf:09:4e:ee:04:4a:10:a1:
9f:52:c7:76:41:5c:82:f7:81:ac:98:29:0e:b5:b3:6c:fd:85:
84:5c:8a:7a:32:62:0f:5e:67:94:6d:58:96:c2:60:8e:dd:47:
77:b1:a0:28:94:8f:76:5e:47:67:36:b6:a2:8b:3d:4d:85:06:
88:04:1d:78:80:d2:d2:46:3a:ed:e3:17:95:b3:4c:9f:76:45:
5c:0a:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:36:06 2025 by rpki-client