Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGuZd5Fz_PbsgryCG6gISfpGLYU.roa
File: VGuZd5Fz_PbsgryCG6gISfpGLYU.roa (raw, json)
Hash identifier: 4HLRR8ZeZaWjOJgqOjueyK0uxFyuR1AODd8cnNUCimM=
Subject key identifier: 54:6B:99:77:91:73:FC:F6:EC:82:BC:82:1B:A8:08:49:FA:46:2D:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220039CA20E260AE0716351C4667F82
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGuZd5Fz_PbsgryCG6gISfpGLYU.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57565
IP address blocks: 5.230.206.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:9c:a2:0e:26:0a:e0:71:63:51:c4:66:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546b99779173fcf6ec82bc821ba80849fa462d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:3a:19:02:51:ae:13:7f:9d:8b:5b:1e:38:
39:34:d4:9d:a4:53:73:a6:f5:64:3f:14:8a:f2:c7:
3b:1f:84:35:c4:b2:66:49:b9:f6:b9:55:9b:81:b2:
4a:c0:e3:1c:ea:01:8c:5f:d0:f2:af:bf:18:e4:43:
0b:d8:d7:4a:20:35:c6:36:44:bc:4d:04:73:ba:96:
83:ec:5b:d6:b2:32:43:79:b7:02:cc:24:12:a5:bd:
99:53:0c:f5:84:fe:57:5f:63:73:d3:45:22:bc:f6:
1f:9d:d0:76:ad:42:66:2d:cf:11:3e:5a:cb:cf:df:
70:a4:ec:d2:97:98:df:83:de:f6:dd:b6:04:1e:7c:
24:37:de:9c:7f:3d:7d:26:79:12:d7:21:43:35:01:
0d:ca:1d:41:31:87:80:cc:d6:b5:0b:13:f6:ed:d1:
21:fa:70:a4:bd:e8:ea:cc:0c:b0:cb:8f:b6:4b:f0:
09:27:e5:d7:78:09:be:b8:2a:0b:67:08:bd:2d:68:
d9:60:7d:6a:68:09:f4:61:8c:ee:51:fb:80:76:57:
e1:9a:a9:6f:52:57:62:df:60:53:dc:96:6b:8d:f5:
2e:53:87:e2:58:27:03:06:25:ff:a5:93:49:70:d9:
d3:23:66:30:24:81:a1:2a:a4:60:99:26:7b:4d:75:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:99:77:91:73:FC:F6:EC:82:BC:82:1B:A8:08:49:FA:46:2D:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGuZd5Fz_PbsgryCG6gISfpGLYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5c:8a:e1:c8:d5:b9:09:e5:6c:47:61:5b:60:a4:02:75:57:
30:3f:4f:8d:45:e2:5e:1e:f5:f9:47:80:04:8b:e7:92:8e:47:
82:6b:a6:f8:09:6a:9f:f2:e1:dd:f6:ce:f0:d5:16:02:b3:6d:
86:0a:f3:ef:00:82:14:d5:64:77:76:a4:46:58:72:fb:b8:6a:
68:47:a6:f0:91:58:3f:3f:dd:75:0b:02:3d:ac:a3:00:c8:bc:
fa:f5:96:50:04:c4:46:71:f1:c7:0d:6e:e4:94:45:c0:91:02:
45:2b:7d:9c:44:b9:00:56:d8:e7:37:01:8c:8a:e3:33:ba:d6:
24:7a:88:06:e9:f7:72:87:dd:c6:9e:32:cb:d3:b4:9b:a5:4d:
26:9a:61:8c:fa:a3:b5:c3:ad:95:1d:41:2d:61:4f:be:66:c7:
dc:65:3d:df:86:62:ae:7b:12:fd:cd:ff:2a:f3:82:40:b7:e3:
ac:07:8b:30:b6:10:60:0b:9d:d5:bf:e5:75:fb:0e:0d:f8:7f:
3a:76:24:f0:32:a4:53:5f:d4:e8:22:0e:cc:5c:60:d6:af:66:
bd:99:a8:fe:94:1a:e1:89:a1:4e:c7:c7:f6:d1:7d:6a:fe:ae:
c1:95:83:14:f9:35:26:bf:7d:c7:dc:ac:89:75:96:90:25:32:
60:85:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:02 2025 by rpki-client