Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VosQE_lxxY4Ez_A7-eCm2WkyAzc.roa
File: VosQE_lxxY4Ez_A7-eCm2WkyAzc.roa (raw, json)
Hash identifier: RKYUAb4CORFTwguvtZxMU0wFTaZw5AkJlOQbBpj8P/c=
Subject key identifier: 56:8B:10:13:F9:71:C5:8E:04:CF:F0:3B:F9:E0:A6:D9:69:32:03:37
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C4147B536D482DFD6CD771316981A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VosQE_lxxY4Ez_A7-eCm2WkyAzc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211611
IP address blocks: 81.181.87.0/24 maxlen: 24
81.181.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:47:b5:36:d4:82:df:d6:cd:77:13:16:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568b1013f971c58e04cff03bf9e0a6d969320337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:dc:9a:66:00:b6:09:97:06:62:fe:78:28:
9d:5e:d3:a0:19:38:46:32:97:70:1d:fc:91:25:33:
a1:57:34:28:d5:90:5e:59:bf:aa:b8:de:34:91:30:
54:ca:18:8f:d2:6b:bc:8a:0d:0d:2d:0b:a6:84:1e:
90:0b:79:23:4b:f0:b7:dc:18:83:60:1e:cb:55:4c:
31:7c:de:51:8a:ce:da:e5:4d:a7:b6:f5:4f:30:e2:
e7:f3:f0:55:b3:f8:5e:9e:88:ae:3b:8c:65:84:e0:
3f:c3:f0:e0:d9:7b:88:44:30:3b:8e:b5:6e:37:54:
07:59:3e:e8:54:32:f5:2b:71:e6:01:c3:92:37:5a:
21:df:a7:e1:9b:f0:4f:1b:15:76:00:b4:a7:ef:c6:
51:db:03:5c:bf:9b:a4:41:7e:41:7b:51:15:28:54:
98:86:53:8e:57:91:e6:1e:b2:d4:23:8d:8a:cf:e2:
86:aa:66:ec:59:ac:65:f4:ce:4a:9e:de:ca:47:58:
bd:a0:7c:c8:95:d6:c0:3f:60:37:f2:40:8c:64:60:
80:06:93:7b:db:02:36:31:7e:bd:14:85:25:3d:4f:
4d:8d:a4:9b:67:cf:c1:75:e3:f2:7c:01:b7:2f:37:
3c:cd:ad:5a:37:0d:a8:de:56:f7:bc:c6:71:6e:80:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:10:13:F9:71:C5:8E:04:CF:F0:3B:F9:E0:A6:D9:69:32:03:37
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VosQE_lxxY4Ez_A7-eCm2WkyAzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.87.0/24
81.181.198.0/23
Signature Algorithm: sha256WithRSAEncryption
87:84:fe:6f:ed:79:10:52:75:62:d2:53:ab:e1:a6:15:05:80:
ce:01:03:2f:0c:03:d3:f7:22:87:a3:b3:f1:7c:e8:c0:ad:b7:
26:d6:06:1d:7a:66:86:aa:63:5c:3d:88:78:69:6f:2f:3d:95:
8f:b5:51:a6:22:2c:ce:e4:0a:04:81:72:03:e0:15:64:72:3e:
0a:87:82:0a:f9:02:e7:45:e0:3d:41:1d:33:66:35:e7:44:49:
8a:50:5f:07:57:69:a7:a8:0d:b1:d9:b6:ad:be:27:ae:52:bf:
ff:95:e1:10:8f:fd:ee:94:60:c0:4d:31:31:83:3d:64:33:a4:
94:36:35:f7:f8:34:95:52:6a:86:fa:1d:55:42:18:93:d8:d0:
9a:26:b5:41:c7:1d:9d:f3:5a:14:6f:1f:85:2f:72:94:a9:3a:
a2:c1:90:0c:8e:be:4f:e0:8d:b4:a4:24:d1:14:8b:46:ba:56:
2e:3c:cb:3b:c2:88:b1:ff:7f:86:3f:38:12:21:9e:fb:5d:89:
76:76:dd:6b:18:76:12:0c:5e:83:69:00:b1:76:b1:47:c0:f9:
65:13:15:53:e6:a0:e7:32:32:41:d4:b3:ef:ce:06:62:d3:0a:
5e:a8:40:35:5a:6a:1d:0b:20:8b:1a:ea:ad:38:e3:a7:c2:f1:
7b:8f:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:56 2025 by rpki-client