Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VeXmnYzjUdLngeYE-31Ul1TnN6Q.roa
File: VeXmnYzjUdLngeYE-31Ul1TnN6Q.roa (raw, json)
Hash identifier: cLKa3ee8tTqKo5/JTUKO4lHF7DlpDvwsF0Kj5qnVAUY=
Subject key identifier: 55:E5:E6:9D:8C:E3:51:D2:E7:81:E6:04:FB:7D:54:97:54:E7:37:A4
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CE6DB96034939B6DB813156930EB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VeXmnYzjUdLngeYE-31Ul1TnN6Q.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 78.108.216.0/24 maxlen: 24
185.234.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:6d:b9:60:34:93:9b:6d:b8:13:15:69:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55e5e69d8ce351d2e781e604fb7d549754e737a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:87:25:77:24:f2:cb:cc:c1:1f:86:a3:7c:
62:7f:99:dd:f3:d2:65:8e:7e:a5:f0:ff:d3:63:ad:
9e:14:06:db:af:be:23:f6:b0:77:86:ee:f9:70:2a:
e7:b7:3e:aa:25:44:46:1d:33:17:b0:dd:26:25:28:
e4:28:81:0d:11:f0:03:3b:d1:a1:4f:c1:3a:18:23:
36:fc:5c:3e:1a:7f:a8:4d:ad:01:6b:c0:0d:b6:e2:
21:20:35:71:08:eb:64:b8:cc:c6:41:b7:4a:5f:75:
cb:59:69:78:23:56:1c:47:a0:6f:5f:5f:df:07:f1:
a2:66:92:62:2d:17:fa:cc:f4:7e:86:c1:9f:a5:50:
dc:49:67:b8:80:d3:a1:ae:bd:ce:7a:44:a2:2f:c4:
dc:c1:80:49:dd:98:89:bd:7d:bb:c5:dd:18:05:c2:
c9:0e:2f:db:08:01:00:4e:fe:b3:ea:b4:b5:9c:7d:
26:67:e4:24:ba:ab:d0:ce:dc:25:c4:d7:9d:0c:b6:
fc:1c:24:3a:5e:dd:38:ee:d7:02:fa:36:72:22:b5:
cd:f8:ba:29:29:a5:fb:34:49:95:aa:6a:5b:72:bf:
58:05:79:24:af:e6:c3:0b:dc:78:81:b8:c7:30:d4:
ae:6a:ab:39:45:14:1b:bf:67:71:01:c8:34:c5:ef:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:E6:9D:8C:E3:51:D2:E7:81:E6:04:FB:7D:54:97:54:E7:37:A4
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VeXmnYzjUdLngeYE-31Ul1TnN6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.216.0/24
185.234.72.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:96:19:c2:ae:95:99:f8:de:7c:94:2d:62:dd:d0:bf:29:28:
4a:4d:0b:34:67:47:06:c4:6a:8f:28:fd:be:0c:6c:24:df:64:
07:f8:25:99:2b:96:32:e3:33:20:35:ad:35:0a:9e:08:d6:5c:
e7:ca:4a:46:07:e9:44:0e:a0:a2:02:be:11:53:bc:5b:7b:26:
24:a5:84:97:7e:bf:11:80:24:e4:4d:50:55:1a:d5:30:9a:50:
e7:fa:0c:e9:08:e3:7d:42:12:0d:9f:eb:c8:d6:4a:6e:60:75:
90:d2:a4:0a:2a:b5:b1:ee:02:4a:d0:27:77:9b:02:2b:ee:03:
93:73:15:2e:f2:a0:d4:bc:78:cc:8e:36:8b:4a:58:10:53:23:
c0:c5:7b:5b:05:28:4f:56:fe:bd:21:7d:88:e7:f8:90:44:e8:
0d:f2:86:5a:68:73:e6:4f:09:68:94:e6:85:94:62:ff:44:ef:
54:40:86:42:2e:b7:d5:0a:d7:5f:cd:ea:72:7b:19:cf:f3:31:
d4:8c:53:01:02:3c:e9:44:f7:3e:09:7b:58:1f:80:62:7c:00:
80:b4:7a:ae:76:aa:96:33:10:c7:24:8c:34:b9:dc:1b:71:fd:
3a:bd:ea:0b:6f:56:b0:ce:ec:d7:2b:21:ff:99:13:e3:9e:7e:
8a:64:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:41 2025 by rpki-client