Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pVVoBMFrQL-Oq2tdC0NHf4B3h-0.roa
File: pVVoBMFrQL-Oq2tdC0NHf4B3h-0.roa (raw, json)
Hash identifier: FchFy+i8wvh0bb3G+gEnePPubjmyEFYmpuUyxwQX2WM=
Subject key identifier: A5:55:68:04:C1:6B:40:BF:8E:AB:6B:5D:0B:43:47:7F:80:77:87:ED
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C29DE9335FBC6B12AC5DBDC63D4EB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pVVoBMFrQL-Oq2tdC0NHf4B3h-0.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 80.96.18.0/23 maxlen: 23
80.96.70.0/23 maxlen: 24
80.96.100.0/23 maxlen: 23
81.180.108.0/23 maxlen: 23
81.181.162.0/23 maxlen: 23
85.122.60.0/23 maxlen: 23
217.156.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:de:93:35:fb:c6:b1:2a:c5:db:dc:63:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5556804c16b40bf8eab6b5d0b43477f807787ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:08:7e:11:43:8f:02:91:d3:ab:52:60:39:
b9:b8:f0:84:f2:6a:54:4c:75:9d:60:c2:51:d1:ac:
76:68:6f:26:02:43:7b:50:27:3a:75:80:0a:10:27:
60:8d:09:c8:04:33:f7:7d:e6:fb:eb:5b:c2:33:87:
7b:2f:5a:f6:61:60:f8:85:a7:fd:79:aa:41:85:ef:
13:2d:91:1d:e5:a2:ed:c8:ce:e1:10:a9:51:e9:e0:
54:11:51:1f:67:12:46:29:e3:d4:06:3d:ce:d7:61:
17:4e:d9:8e:c0:48:21:1a:3b:af:89:9a:25:2b:41:
01:fd:57:0b:9b:aa:0d:ce:70:2a:75:f5:74:03:68:
f5:45:1a:b9:fc:92:8c:2a:f4:e8:af:46:df:ca:f9:
fe:d6:54:35:6f:b3:a4:b2:f3:52:e7:08:3c:8d:32:
17:4f:0c:93:7a:51:fd:b1:1b:94:35:59:31:72:b4:
cd:7f:e1:c3:cf:01:8c:42:42:c5:24:fc:90:a2:ba:
1a:73:c7:65:6e:26:39:a6:74:dc:4c:dd:5f:a5:91:
3c:fd:86:d6:05:87:8c:9a:01:34:60:6c:15:a1:66:
eb:91:d6:60:1d:22:52:4a:bd:64:1a:85:51:c0:ee:
6c:b1:cb:24:b0:b1:0b:91:7f:e8:54:8e:61:59:76:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:68:04:C1:6B:40:BF:8E:AB:6B:5D:0B:43:47:7F:80:77:87:ED
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pVVoBMFrQL-Oq2tdC0NHf4B3h-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.18.0/23
80.96.70.0/23
80.96.100.0/23
81.180.108.0/23
81.181.162.0/23
85.122.60.0/23
217.156.32.0/24
Signature Algorithm: sha256WithRSAEncryption
15:50:a8:b7:85:bb:8c:7c:be:e8:dc:4d:80:f9:cd:c4:0d:3a:
74:2f:91:32:0e:c3:30:fe:05:e4:c0:9f:4c:22:5a:9b:1f:5a:
f2:8e:76:0f:62:e8:2b:06:62:d0:73:38:0c:4f:31:df:33:d4:
3a:33:4b:ff:0d:60:f1:cf:fa:80:53:18:4a:dd:00:67:da:8c:
7b:5b:9b:54:ff:e3:af:c6:fa:e1:a5:f0:2c:fc:89:02:8b:48:
a0:5d:dd:a8:51:c6:51:22:70:3b:d8:22:f6:68:b3:31:80:32:
a0:f9:eb:6d:af:1d:04:28:64:7e:ff:46:52:34:13:14:88:d2:
89:2e:a8:50:c9:7b:1b:48:e8:7c:22:88:e6:c5:2b:00:89:12:
7d:c4:3f:04:00:63:f6:62:42:0e:13:a8:15:50:f8:53:e9:23:
17:0e:56:bb:11:7f:bb:85:5d:4f:24:0d:84:3f:98:fc:55:fa:
d2:f1:55:00:f5:78:1d:29:b0:f1:19:c4:f6:e7:47:a3:7f:80:
99:66:90:06:ef:65:72:15:35:07:fa:ce:99:a6:03:26:a0:bc:
b3:a1:e9:cb:85:69:e4:06:39:90:4b:be:14:1e:51:3b:dd:55:
2f:76:fb:ab:50:82:39:6f:65:cd:8c:7c:5c:87:83:e5:0f:27:
a8:2a:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:38 2025 by rpki-client