Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/vRZENosVd-UpUXAI72NxZZVntJk.roa
File: vRZENosVd-UpUXAI72NxZZVntJk.roa (raw, json)
Hash identifier: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=
Subject key identifier: BD:16:44:36:8B:15:77:E5:29:51:70:08:EF:63:71:65:95:67:B4:99
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 0194266BAE9A40D869E3FE1616CA093A9051
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/vRZENosVd-UpUXAI72NxZZVntJk.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131222
IP address blocks: 193.219.98.0/24 maxlen: 24
194.5.252.0/24 maxlen: 24
195.5.190.0/24 maxlen: 24
212.104.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ae:9a:40:d8:69:e3:fe:16:16:ca:09:3a:90:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1644368b1577e529517008ef6371659567b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:55:0c:22:c4:fd:4f:27:aa:21:e5:3c:97:
72:24:78:a5:88:f9:5e:c4:2f:83:a5:42:51:d3:93:
17:0c:9d:1e:b8:bf:e4:b7:b4:71:ac:7c:e1:e2:df:
2b:17:2b:14:ec:1d:1d:2a:e4:1a:35:6d:63:0c:22:
1b:29:16:ef:dc:e1:27:26:8e:ef:e8:d7:e5:0f:47:
b2:29:5c:94:1e:3a:66:d4:c3:79:20:2e:f2:a9:87:
60:f1:06:41:e1:a5:9f:be:e5:bf:8d:e8:6c:cb:5e:
de:b3:fc:9b:54:36:ba:eb:71:1e:8e:5e:9c:8e:8a:
bf:6e:c2:70:44:44:e9:9e:a7:7e:df:a2:ed:fd:83:
b2:c9:1c:5e:9b:0b:1d:47:66:b8:0d:1d:17:f2:c9:
26:25:08:6a:c8:b2:17:a4:c1:a7:8d:bb:bc:8e:d8:
f8:e3:74:f1:10:cc:4b:1a:70:cf:91:85:a3:d1:16:
19:de:63:41:d0:78:db:78:6a:e7:0f:ba:0b:a9:39:
4d:31:7a:47:a3:ec:88:cc:e3:2c:96:24:8b:59:1f:
bd:5e:8f:56:56:78:b1:e8:db:63:8d:d7:f7:b8:19:
b3:44:3f:a9:78:06:d4:fd:80:72:72:5c:bf:7d:9c:
28:3c:d1:bd:3b:68:40:06:1e:0b:ce:45:97:3a:10:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:44:36:8B:15:77:E5:29:51:70:08:EF:63:71:65:95:67:B4:99
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/vRZENosVd-UpUXAI72NxZZVntJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.98.0/24
194.5.252.0/24
195.5.190.0/24
212.104.148.0/24
Signature Algorithm: sha256WithRSAEncryption
07:44:c4:24:e8:ae:dc:dd:9a:a7:f3:82:13:89:fe:c7:2b:da:
c2:46:85:a4:d0:cc:16:40:91:a5:9d:ea:7a:6f:04:91:7c:28:
5c:34:be:bb:ae:08:2c:88:56:a6:23:96:b6:9a:9b:10:6a:52:
40:7e:09:a8:53:a2:b5:f2:d2:5c:5d:eb:b0:97:a9:26:3e:ce:
7d:93:30:17:fb:2b:3f:07:19:c3:2f:52:80:0a:22:f4:8e:2d:
9c:8e:0a:f3:06:39:59:b9:33:d0:e5:48:b9:e5:70:6e:e1:31:
d4:69:fc:e2:c4:45:7c:4b:d5:87:89:10:40:92:49:e4:1c:dc:
1d:e7:9b:19:24:9e:d5:d8:53:70:40:86:ef:44:5b:ea:5d:30:
0b:a7:54:e0:f9:62:68:dc:18:71:e1:70:74:39:84:bc:1a:07:
66:1b:78:ec:e0:17:a8:04:3c:b2:af:ce:db:8a:41:c1:37:ec:
58:9a:36:9d:b4:a7:ca:7c:e8:99:54:21:17:30:3f:7c:a1:02:
a3:9c:8f:98:fd:08:00:ab:c4:a1:68:44:19:06:0f:d1:87:53:
5b:94:5e:e6:db:1d:1c:17:dc:e9:e3:33:f1:e9:83:03:b4:ec:
44:f3:f3:90:e5:bb:27:09:4f:57:23:e9:36:8a:d6:70:05:8b:
3a:fd:ce:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:49 2025 by rpki-client