Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa
File: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (raw, json)
Hash identifier: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=
Subject key identifier: 55:5F:E9:29:49:C8:39:15:90:67:77:BD:1A:AD:12:6F:61:1B:56:B6
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01958F83BC4BADBDBF5B03209772A06604C6
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa
Signing time: Thu 13 Mar 2025 12:38:50 +0000
ROA not before: Thu 13 Mar 2025 12:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61266
IP address blocks: 185.10.244.0/22 maxlen: 22
2a03:6940::/32 maxlen: 32
2a03:6947:300::/40 maxlen: 40
2a03:6947:400::/40 maxlen: 40
2a03:6947:500::/40 maxlen: 40
2a03:6947:900::/40 maxlen: 40
2a03:6947:a00::/40 maxlen: 40
2a03:6947:b00::/40 maxlen: 40
2a03:6947:c00::/40 maxlen: 40
2a03:6947:f00::/40 maxlen: 40
2a03:6947:1100::/40 maxlen: 40
2a03:6947:1200::/40 maxlen: 40
2a03:6947:1300::/40 maxlen: 40
2a03:6947:1700::/40 maxlen: 40
2a03:6947:1900::/40 maxlen: 40
2a03:6947:1b00::/40 maxlen: 40
2a03:6947:1d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:83:bc:4b:ad:bd:bf:5b:03:20:97:72:a0:66:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Mar 13 12:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555fe92949c83915906777bd1aad126f611b56b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:06:17:c3:c6:74:57:31:e7:be:c8:70:fd:
bf:c7:ee:01:4d:16:cf:e3:f5:2b:d5:0d:69:a8:82:
f4:6d:71:c5:65:a1:fa:b5:4c:2e:da:a4:19:82:b3:
c6:d8:99:ae:9c:84:29:97:91:df:5e:be:fc:2a:0e:
1c:80:ae:2e:b1:5a:41:1e:e3:23:57:0d:ea:7d:c3:
ee:f5:20:0d:e5:c0:6b:d8:04:9f:57:41:e8:77:87:
ef:ce:c3:f4:d9:3b:46:8a:39:2f:97:91:72:3f:a0:
9e:38:64:03:8e:f4:31:db:8f:c5:88:38:3d:c2:b9:
57:8e:8b:26:0b:24:83:c3:ab:34:af:d4:eb:71:c5:
d3:62:d1:a0:4d:26:eb:ff:7c:86:bb:4a:c6:ce:d2:
20:6b:f7:74:f0:cc:bb:66:2c:6f:7c:c5:45:c4:da:
5f:5f:6c:5e:33:6e:38:7c:0b:6f:70:57:6d:af:47:
b8:24:a6:ad:6b:8d:dc:c6:4f:18:34:7a:ee:20:0f:
a7:e6:41:8e:36:5e:9b:89:d4:35:17:96:17:1f:ef:
f4:c8:31:e5:b1:f5:a1:04:51:60:6c:0c:77:1a:cc:
eb:95:9b:59:ef:10:05:b0:65:43:3f:b9:95:c7:7d:
f5:e9:3b:c3:aa:a8:a0:6d:34:98:f7:01:05:a2:54:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:E9:29:49:C8:39:15:90:67:77:BD:1A:AD:12:6F:61:1B:56:B6
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.244.0/22
IPv6:
2a03:6940::/32
2a03:6947:300::-2a03:6947:5ff:ffff:ffff:ffff:ffff:ffff
2a03:6947:900::-2a03:6947:cff:ffff:ffff:ffff:ffff:ffff
2a03:6947:f00::/40
2a03:6947:1100::-2a03:6947:13ff:ffff:ffff:ffff:ffff:ffff
2a03:6947:1700::/40
2a03:6947:1900::/40
2a03:6947:1b00::/40
2a03:6947:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
56:b6:f2:4b:ad:13:39:5f:63:05:16:8a:3d:38:97:b1:58:43:
52:2d:40:be:9a:7a:60:89:0d:2d:62:3f:24:80:43:f0:1c:0e:
a3:41:14:2c:71:38:d1:6f:cc:a4:25:f9:98:44:cd:87:14:6a:
da:3b:9a:80:ec:42:09:da:5f:12:ec:2f:d7:3e:7c:0c:9f:e1:
39:47:fb:01:03:69:c4:99:d6:ca:e2:5f:9a:8c:a8:cf:2f:99:
4d:bf:d6:f4:b1:2e:91:0f:98:15:b3:ab:33:7d:88:7a:da:1f:
08:02:8f:92:84:6c:2d:f0:21:2c:14:e3:c0:84:8d:35:9c:0e:
d6:22:7d:37:81:7e:42:f5:15:03:26:03:e3:fc:b9:f0:9e:a9:
cf:31:cf:fd:c5:af:27:6e:e0:21:11:da:f8:68:72:14:24:6c:
c7:bd:ea:f4:7d:88:d4:64:90:4e:17:c0:52:60:f0:01:3d:91:
0e:00:25:61:bc:cb:55:6c:86:9e:32:0a:0f:b3:22:34:44:4f:
e2:ce:bd:15:7f:10:e4:8a:b2:8e:a5:b9:5e:3d:e6:fd:c3:e3:
5f:b7:31:23:e9:3a:45:17:88:b8:3e:33:e8:b6:00:91:81:e6:
ff:b6:f4:c1:96:b7:fe:7f:da:3b:45:50:b6:42:46:53:1b:84:
89:ed:40:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:13 2025 by rpki-client