Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_VAdRV_VkXsQ_PWfO73sjnRDIgE.roa
File: _VAdRV_VkXsQ_PWfO73sjnRDIgE.roa (raw, json)
Hash identifier: ddtoBXvOFiOlKSDPEAPrId8rwkKIvGiiLctDa5TjMf8=
Subject key identifier: FD:50:1D:45:5F:D5:91:7B:10:FC:F5:9F:3B:BD:EC:8E:74:43:22:01
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F494658168BC99555C13473992371
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_VAdRV_VkXsQ_PWfO73sjnRDIgE.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26114
IP address blocks: 83.231.153.0/24 maxlen: 24
212.119.8.0/24 maxlen: 24
213.198.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:49:46:58:16:8b:c9:95:55:c1:34:73:99:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd501d455fd5917b10fcf59f3bbdec8e74432201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:04:c5:cf:95:fe:55:07:e5:2c:9d:ad:ac:
33:98:6e:c3:59:32:05:9d:88:97:23:61:af:97:ef:
89:6e:ac:55:5a:18:ef:0e:17:a1:4a:66:68:a8:b4:
c1:b5:6f:97:bd:62:48:c3:20:2a:59:80:dc:5f:fe:
c5:5d:32:dd:59:bc:84:61:16:5a:f6:ac:90:c6:24:
0e:b4:91:de:0b:4b:31:4c:32:7c:72:af:1a:f1:61:
ef:cf:11:d6:1a:33:cb:c5:6b:a7:b7:f4:15:f8:96:
ce:8f:90:45:3c:01:07:8b:9b:8a:75:42:bd:97:cd:
0c:c3:19:85:32:8b:17:c9:9e:85:b6:14:e0:0b:95:
ff:65:8e:31:86:28:13:3d:0e:81:ed:57:3c:5e:2e:
39:17:e9:0d:a1:9f:a9:9d:13:e9:db:57:3b:9c:cc:
7b:97:df:00:9b:a4:d2:d5:aa:2c:9e:93:e5:c8:ca:
58:1c:ab:d0:86:b1:e4:6e:7c:08:b4:9c:06:48:66:
1b:13:bd:f8:8b:4f:f3:64:2e:ec:41:7e:33:b1:9c:
70:d7:02:1c:81:02:80:78:55:86:3a:b9:7f:aa:7a:
d7:2e:e9:c5:a4:e0:80:68:d1:42:bf:f0:4b:dc:d4:
a4:62:95:64:16:57:d7:e5:49:56:df:52:2e:23:c7:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:50:1D:45:5F:D5:91:7B:10:FC:F5:9F:3B:BD:EC:8E:74:43:22:01
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_VAdRV_VkXsQ_PWfO73sjnRDIgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.153.0/24
212.119.8.0/24
213.198.53.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8e:52:e3:dc:93:94:b6:b9:4e:e1:65:e8:20:97:46:13:1f:
99:a4:08:7d:72:2e:3c:28:2d:e3:a2:89:1f:dc:36:9e:d2:e5:
2a:fd:a9:5d:64:11:44:95:75:a7:19:4c:a2:5c:f8:b9:38:b4:
78:fd:c8:d4:f8:f4:a2:83:85:c8:1d:1d:09:89:31:d5:1b:8d:
03:a8:fa:9e:89:04:b2:32:c9:25:6b:10:a5:73:89:29:9c:20:
f5:43:cd:c1:7f:33:d2:58:8e:0a:cb:ea:10:ee:aa:7a:90:39:
22:da:42:61:a8:0b:df:eb:4b:99:e4:cc:d4:51:c1:e3:cb:33:
43:f5:10:67:a6:5f:1f:9a:c3:db:dd:c6:3c:ad:d0:f4:99:19:
06:0f:8f:08:7d:8a:7f:be:13:73:6d:4c:29:77:91:a6:9a:e3:
80:0b:e3:b9:d9:06:17:27:b4:d7:a6:b5:08:0e:71:bf:66:e4:
f8:d7:52:15:d7:f4:d5:7b:8a:2a:16:1e:8d:11:08:74:8f:16:
44:19:c5:45:46:bc:21:c0:8c:e0:1a:96:98:a2:0b:31:5d:0e:
65:3c:a3:ca:89:1c:33:dd:e9:0e:1d:80:bc:8a:d4:cb:8d:56:
49:fe:80:ed:61:9b:5e:59:64:00:ab:14:11:78:3a:df:c3:96:
23:86:62:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlj0lGWBaLyZVVwTRzmSNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjUwMTAyMDU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDUwMWQ0NTVmZDU5MTdiMTBmY2Y1OWYzYmJkZWM4ZTc0NDMyMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf4Exc+V/lUH5SydrawzmG7DWTIF
nYiXI2Gvl++JbqxVWhjvDhehSmZoqLTBtW+XvWJIwyAqWYDcX/7FXTLdWbyEYRZa
9qyQxiQOtJHeC0sxTDJ8cq8a8WHvzxHWGjPLxWunt/QV+JbOj5BFPAEHi5uKdUK9
l80MwxmFMosXyZ6FthTgC5X/ZY4xhigTPQ6B7Vc8Xi45F+kNoZ+pnRPp21c7nMx7
l98Am6TS1aosnpPlyMpYHKvQhrHkbnwItJwGSGYbE734i0/zZC7sQX4zsZxw1wIc
gQKAeFWGOrl/qnrXLunFpOCAaNFCv/BL3NSkYpVkFlfX5UlW31IuI8cruQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFP1QHUVf1ZF7EPz1nzu97I50QyIBMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvX1ZBZFJWX1ZrWHNRX1BXZk83M3NqblJESWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU+eZAwQA
1HcIAwQA1cY1MA0GCSqGSIb3DQEBCwUAA4IBAQA3jlLj3JOUtrlO4WXoIJdGEx+Z
pAh9ci48KC3jookf3Dae0uUq/aldZBFElXWnGUyiXPi5OLR4/cjU+PSig4XIHR0J
iTHVG40DqPqeiQSyMsklaxClc4kpnCD1Q83BfzPSWI4Ky+oQ7qp6kDki2kJhqAvf
60uZ5MzUUcHjyzND9RBnpl8fmsPb3cY8rdD0mRkGD48IfYp/vhNzbUwpd5GmmuOA
C+O52QYXJ7TXprUIDnG/ZuT411IV1/TVe4oqFh6NEQh0jxZEGcVFRrwhwIzgGpaY
ogsxXQ5lPKPKiRwz3ekOHYC8itTLjVZJ/oDtYZteWWQAqxQReDrfw5YjhmKC
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:26 2025 by rpki-client