Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa
File: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (raw, json)
Hash identifier: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=
Subject key identifier: 55:76:12:73:C8:D5:F0:B5:74:61:4B:C3:F4:6A:A1:88:6F:D6:83:72
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 01941F8C47112B165A4E184E7AB4C44EA106
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205893
IP address blocks: 45.11.40.0/24 maxlen: 24
185.202.240.0/24 maxlen: 24
185.202.241.0/24 maxlen: 24
185.202.242.0/24 maxlen: 24
185.202.243.0/24 maxlen: 24
2a0a:e240::/32 maxlen: 32
2a0a:e241::/32 maxlen: 32
2a0a:e242::/32 maxlen: 32
2a0a:e243::/32 maxlen: 32
2a0a:e244::/32 maxlen: 32
2a0a:e245::/32 maxlen: 32
2a0a:e246::/32 maxlen: 32
2a0a:e247::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:11:2b:16:5a:4e:18:4e:7a:b4:c4:4e:a1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55761273c8d5f0b574614bc3f46aa1886fd68372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:36:41:a5:54:54:71:37:1c:d4:c7:be:d8:
dc:a0:11:a5:8a:5e:1b:7f:09:42:57:b3:71:a9:22:
ce:97:a9:6c:cb:23:13:5a:87:dd:c5:2c:2d:cc:d0:
c5:4f:b8:6b:00:8b:ba:24:50:13:ea:3d:eb:33:83:
cf:ef:09:31:69:7c:48:5f:7e:3c:38:a0:b9:f5:68:
13:ae:e9:bd:ad:a1:50:05:0c:f2:cd:94:10:ae:3b:
d0:41:5b:4e:6c:2e:b4:e0:f1:2f:44:d3:25:cb:02:
0d:e8:c5:9f:cb:fe:a8:0a:80:51:a4:ee:7c:89:04:
73:ff:51:6a:69:fd:13:f2:35:a7:4f:9c:f8:a3:1a:
f1:5c:eb:ca:de:e5:54:54:01:89:f8:9b:bd:d5:4c:
2e:45:26:72:e0:2a:e8:7f:0a:0c:46:2f:2d:1b:1d:
73:6b:ac:f0:68:8e:a4:b6:50:c4:80:d3:3e:be:9f:
55:af:7e:3c:e2:4e:54:22:d5:b8:e5:7e:81:c0:c1:
58:e2:83:b4:ba:c0:11:36:ee:b0:8f:61:5b:2f:a2:
3e:d6:19:3d:12:4c:d4:e1:e7:80:c4:b3:ab:7b:9f:
e5:e2:a1:1a:34:f8:76:4e:7a:7e:ac:40:1e:ad:2e:
f7:0e:3e:a3:da:26:68:c8:45:2c:d4:ce:f1:47:25:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:12:73:C8:D5:F0:B5:74:61:4B:C3:F4:6A:A1:88:6F:D6:83:72
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.40.0/24
185.202.240.0/22
IPv6:
2a0a:e240::/29
Signature Algorithm: sha256WithRSAEncryption
6c:5c:c3:be:f8:81:5e:24:d1:67:71:96:bc:72:ef:fb:28:ff:
ef:88:3b:20:b2:04:99:e7:de:66:7a:05:b1:f1:53:1a:cd:7c:
57:c9:08:1b:c7:ea:3a:c1:a6:51:35:c8:68:67:8b:29:87:43:
91:27:a4:64:1d:9d:d1:88:28:8b:6d:4b:ac:d0:fa:38:ab:dd:
8e:bd:45:12:dd:0a:bd:56:1d:e4:be:c1:7e:2d:9a:b8:dd:5b:
ab:7f:48:a5:fa:b7:44:14:bf:de:5d:80:0f:e9:49:69:64:42:
76:10:33:e5:4a:25:85:57:f8:f4:b4:7c:fb:84:bf:d4:75:b7:
07:88:39:c5:51:c6:3d:dc:7d:27:ce:86:e8:a0:3e:1c:dc:e7:
0f:88:aa:50:ae:e2:cb:a0:3c:df:0a:50:53:d5:df:14:17:28:
c1:bd:c3:20:20:18:03:94:43:83:6f:05:9c:13:7a:02:7f:b5:
b6:51:c2:5d:eb:79:ea:7c:f3:56:1d:c1:4c:65:b8:51:66:71:
95:66:72:18:de:4d:aa:b5:7b:d7:ef:aa:83:6c:64:d6:40:1f:
d6:67:74:29:41:6f:a8:02:2a:ec:46:e6:a4:9b:36:70:d9:75:
21:a6:65:0a:0a:5c:8e:ab:2d:0a:6c:bf:d1:fb:bb:fb:3c:f9:
df:11:da:99
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQfjEcRKxZaThhOerTETqEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjUwMTAxMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTc2MTI3M2M4ZDVmMGI1NzQ2MTRiYzNmNDZhYTE4ODZmZDY4MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmA2QaVUVHE3HNTHvtjcoBGlil4b
fwlCV7NxqSLOl6lsyyMTWofdxSwtzNDFT7hrAIu6JFAT6j3rM4PP7wkxaXxIX348
OKC59WgTrum9raFQBQzyzZQQrjvQQVtObC604PEvRNMlywIN6MWfy/6oCoBRpO58
iQRz/1Fqaf0T8jWnT5z4oxrxXOvK3uVUVAGJ+Ju91UwuRSZy4CrofwoMRi8tGx1z
a6zwaI6ktlDEgNM+vp9Vr3484k5UItW45X6BwMFY4oO0usARNu6wj2FbL6I+1hk9
EkzU4eeAxLOre5/l4qEaNPh2Tnp+rEAerS73Dj6j2iZoyEUs1M7xRyWRWQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFV2EnPI1fC1dGFLw/RqoYhv1oNyMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEvVlhZU2M4alY4TFYwWVV2RDlHcWhpR19XZzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALQsoAwQC
ucrwMA0EAgACMAcDBQMqCuJAMA0GCSqGSIb3DQEBCwUAA4IBAQBsXMO++IFeJNFn
cZa8cu/7KP/viDsgsgSZ595megWx8VMazXxXyQgbx+o6waZRNchoZ4sph0ORJ6Rk
HZ3RiCiLbUus0Po4q92OvUUS3Qq9Vh3kvsF+LZq43Vurf0il+rdEFL/eXYAP6Ulp
ZEJ2EDPlSiWFV/j0tHz7hL/UdbcHiDnFUcY93H0nzobooD4c3OcPiKpQruLLoDzf
ClBT1d8UFyjBvcMgIBgDlEODbwWcE3oCf7W2UcJd63nqfPNWHcFMZbhRZnGVZnIY
3k2qtXvX76qDbGTWQB/WZ3QpQW+oAirsRuakmzZw2XUhpmUKClyOqy0KbL/R+7v7
PPnfEdqZ
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:11 2025 by rpki-client