Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VvaNfl5FZlGN4l26OZPfNa5a_3A.roa
File: VvaNfl5FZlGN4l26OZPfNa5a_3A.roa (raw, json)
Hash identifier: iCcUnurkfm59GzKwW5XdAogO04Ybw5KGIogjeHBiqcg=
Subject key identifier: 56:F6:8D:7E:5E:45:66:51:8D:E2:5D:BA:39:93:DF:35:AE:5A:FF:70
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0194834C5A084A8BBEB3890657CBA214FAF4
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VvaNfl5FZlGN4l26OZPfNa5a_3A.roa
Signing time: Mon 20 Jan 2025 10:40:06 +0000
ROA not before: Mon 20 Jan 2025 10:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 194.31.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:4c:5a:08:4a:8b:be:b3:89:06:57:cb:a2:14:fa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 20 10:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f68d7e5e4566518de25dba3993df35ae5aff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:4b:6b:aa:3c:47:11:6c:e9:19:92:67:b2:
b8:5d:75:13:38:a3:38:ec:44:b4:46:95:ce:89:60:
cf:8b:22:e1:37:59:e6:52:f8:9d:2c:a8:e1:9a:98:
7b:a8:0b:c2:23:9f:c0:11:46:50:ba:5e:07:bc:6c:
42:43:dd:e3:65:9e:79:5a:e3:1c:07:4b:e3:72:e5:
22:d6:df:37:da:41:9e:6c:17:bf:d2:82:bf:bf:78:
4a:a1:a8:40:c9:3e:d9:69:05:ba:a7:ff:77:6f:d4:
47:7b:dd:55:d6:34:cb:a8:bd:d8:6f:19:2d:ae:07:
d9:a5:d6:e7:f0:6a:05:ab:ac:a2:c2:10:ea:25:65:
93:43:98:28:b3:8c:f9:3d:1a:a0:e3:bd:da:02:4b:
5c:78:8b:30:c7:af:31:b1:24:ad:a8:38:08:88:50:
3b:19:1f:dd:b3:7f:42:fb:87:dc:6d:38:c4:3d:a9:
a9:b3:f0:bb:e6:5b:f3:43:51:b3:7e:8e:89:eb:2f:
b2:e8:02:4f:75:a3:ff:d1:96:12:4c:ab:cc:aa:7c:
17:5b:60:13:76:29:49:f7:d9:ce:7f:5b:1e:ec:09:
61:98:57:08:fb:71:21:d5:41:52:d9:8d:e5:a3:ff:
e3:33:ef:bd:79:f0:c7:05:f3:78:4f:c6:d6:3f:ca:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:8D:7E:5E:45:66:51:8D:E2:5D:BA:39:93:DF:35:AE:5A:FF:70
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VvaNfl5FZlGN4l26OZPfNa5a_3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.142.0/24
Signature Algorithm: sha256WithRSAEncryption
33:12:e9:d9:59:86:04:3e:74:bb:75:51:76:dd:cc:25:75:a4:
34:34:2f:31:43:ac:18:ac:29:e8:9c:09:49:a7:1a:be:7c:58:
87:ec:cc:10:20:5b:2b:6c:9e:5f:98:c0:9a:02:69:d5:1d:a6:
bb:1c:a0:2f:83:16:af:da:fa:de:42:ab:63:d7:1c:6c:3f:3b:
10:f9:02:a9:df:08:9a:7d:a7:1c:fb:85:7a:aa:0f:36:88:1f:
9c:83:fc:f2:c9:b9:e5:d2:6e:e7:28:8b:0e:de:ef:d1:67:9c:
20:d7:85:81:ce:f5:f6:74:da:94:88:db:61:ff:01:9e:0e:a9:
86:d8:8f:0a:b5:88:02:c0:53:21:ba:d2:94:ca:da:eb:14:b6:
97:76:a6:85:66:4d:46:e3:7a:40:c9:af:f0:18:dc:fa:f2:d2:
b9:5a:dd:7d:0e:8f:4d:f3:c6:e1:3c:cd:c5:fb:d7:c2:33:36:
6e:77:c2:67:37:c2:e4:a4:3d:81:af:b6:61:25:f1:01:38:01:
76:a6:e1:cf:ff:5f:db:13:11:37:e3:ec:f1:bb:f9:81:4d:05:
92:c8:73:63:a1:17:9e:0d:cf:03:71:c4:2a:72:e5:5a:8e:d3:
78:86:03:77:cc:01:e0:2d:fc:af:3c:b3:6a:30:17:b4:a3:d8:
ef:6d:47:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSDTFoISou+s4kGV8uiFPr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTIwMTA0MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmY2OGQ3ZTVlNDU2NjUxOGRlMjVkYmEzOTkzZGYzNWFlNWFmZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml1La6o8RxFs6RmSZ7K4XXUTOKM4
7ES0RpXOiWDPiyLhN1nmUvidLKjhmph7qAvCI5/AEUZQul4HvGxCQ93jZZ55WuMc
B0vjcuUi1t832kGebBe/0oK/v3hKoahAyT7ZaQW6p/93b9RHe91V1jTLqL3Ybxkt
rgfZpdbn8GoFq6yiwhDqJWWTQ5gos4z5PRqg473aAktceIswx68xsSStqDgIiFA7
GR/ds39C+4fcbTjEPamps/C75lvzQ1Gzfo6J6y+y6AJPdaP/0ZYSTKvMqnwXW2AT
dilJ99nOf1se7AlhmFcI+3Eh1UFS2Y3lo//jM++9efDHBfN4T8bWP8pbhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFb2jX5eRWZRjeJdujmT3zWuWv9wMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvVnZhTmZsNUZabEdONGwyNk9aUGZOYTVhXzNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+OMA0G
CSqGSIb3DQEBCwUAA4IBAQAzEunZWYYEPnS7dVF23cwldaQ0NC8xQ6wYrCnonAlJ
pxq+fFiH7MwQIFsrbJ5fmMCaAmnVHaa7HKAvgxav2vreQqtj1xxsPzsQ+QKp3wia
facc+4V6qg82iB+cg/zyybnl0m7nKIsO3u/RZ5wg14WBzvX2dNqUiNth/wGeDqmG
2I8KtYgCwFMhutKUytrrFLaXdqaFZk1G43pAya/wGNz68tK5Wt19Do9N88bhPM3F
+9fCMzZud8JnN8LkpD2Br7ZhJfEBOAF2puHP/1/bExE34+zxu/mBTQWSyHNjoRee
Dc8DccQqcuVajtN4hgN3zAHgLfyvPLNqMBe0o9jvbUf4
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:51 2025 by rpki-client