Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VZW8zzoOZs77LOykLXGwtKWHEIg.roa
File: VZW8zzoOZs77LOykLXGwtKWHEIg.roa (raw, json)
Hash identifier: aY6SJJf2XF362zIPkmKtDul6GCJjeW+IT6GLRb7+pnw=
Subject key identifier: 55:95:BC:CF:3A:0E:66:CE:FB:2C:EC:A4:2D:71:B0:B4:A5:87:10:88
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282825C80508F0D937085C0C961CE23B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VZW8zzoOZs77LOykLXGwtKWHEIg.roa
Signing time: Thu 02 Jan 2025 17:55:07 +0000
ROA not before: Thu 02 Jan 2025 17:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200024
IP address blocks: 85.196.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:25:c8:05:08:f0:d9:37:08:5c:0c:96:1c:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5595bccf3a0e66cefb2ceca42d71b0b4a5871088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:2d:68:3c:f3:2c:2b:96:9b:e5:ac:6b:c9:
d8:8c:4b:07:36:65:94:14:ab:9d:bd:1d:2c:ab:d0:
4e:68:1d:5b:a7:3d:16:9f:60:86:44:8b:98:d5:87:
c7:1d:d1:b4:90:dc:b8:0c:4f:fb:6b:99:2e:fe:e8:
69:a9:e2:e1:e7:d4:1f:d6:76:9d:03:e2:77:ff:4f:
0d:09:6f:1e:66:ea:c2:2d:14:c5:17:2a:12:f0:cb:
e4:53:2f:fc:76:22:69:de:90:cb:1b:cd:ac:eb:e0:
f4:f3:6e:b6:54:a5:72:69:94:b5:76:21:22:85:67:
71:4d:36:12:61:0d:61:89:c4:08:9f:19:44:73:60:
ef:81:5b:db:18:23:35:16:29:1a:92:66:90:e4:f0:
4c:ba:23:f2:de:7e:6d:29:ba:3b:03:61:3e:44:6a:
e9:72:67:d9:b5:2a:4f:d5:5d:b9:2a:d7:96:b7:3f:
6b:78:9a:48:38:83:94:63:1a:10:96:e1:71:37:b1:
4a:24:44:1f:f3:ec:a7:15:ac:6b:2f:04:da:d6:0f:
85:61:c6:39:3c:54:02:71:ad:a3:21:6b:81:75:9b:
e2:5f:48:48:ec:3a:aa:88:ad:3d:ce:97:ec:d7:94:
a7:b4:5b:29:a5:c8:84:cf:88:dc:03:3a:64:45:d7:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:BC:CF:3A:0E:66:CE:FB:2C:EC:A4:2D:71:B0:B4:A5:87:10:88
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VZW8zzoOZs77LOykLXGwtKWHEIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.196.136.0/24
Signature Algorithm: sha256WithRSAEncryption
97:17:53:46:f0:30:a2:b7:25:5b:da:53:86:88:d4:89:19:b2:
79:b2:ab:dc:87:3c:71:fe:59:8f:0d:66:7d:9e:97:23:8f:2d:
3b:b7:a2:91:dd:13:0a:f4:2e:81:c8:ff:66:9b:57:a5:9b:69:
23:7c:04:fc:b1:28:b6:bb:af:68:fb:e1:98:14:17:26:a6:79:
b5:2a:8f:ba:39:0a:a0:78:3c:84:d1:48:a6:18:e3:ba:f0:6d:
d0:d8:c8:6d:bf:cf:19:e2:90:07:9b:2d:45:fe:46:ca:ad:f5:
a9:ae:8d:08:9a:a8:8b:00:70:77:d9:34:a2:53:58:b3:65:0b:
65:aa:fc:d8:2d:fb:8a:94:36:c7:9e:a3:90:f6:a7:3d:e8:12:
4d:84:50:49:7b:c0:93:85:39:d7:cd:41:40:d4:50:6e:cc:95:
17:0c:e8:db:70:9a:de:ad:7e:e8:83:c4:09:ef:ee:76:31:db:
43:c4:9c:0d:44:89:16:a3:78:fb:a8:92:59:9c:3b:77:f0:1a:
e0:00:2d:5a:a0:12:db:77:13:36:b8:14:73:7c:90:3a:ca:0d:
d5:99:42:39:ab:37:fb:09:5f:9d:ea:a0:68:82:68:dd:c5:25:
3f:a1:06:fb:a3:81:a7:83:1b:c8:c7:26:e0:02:10:0b:c7:ee:
46:6f:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:03 2025 by rpki-client