Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/VyXgHHFFQ2oH5mDTe8acLrMgUes.roa
File: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (raw, json)
Hash identifier: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=
Subject key identifier: 57:25:E0:1C:71:45:43:6A:07:E6:60:D3:7B:C6:9C:2E:B3:20:51:EB
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 01942669EA85D5A2A2DB6980D76E1F8EBFEA
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/VyXgHHFFQ2oH5mDTe8acLrMgUes.roa
Signing time: Thu 02 Jan 2025 09:47:42 +0000
ROA not before: Thu 02 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30939
IP address blocks: 194.15.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:ea:85:d5:a2:a2:db:69:80:d7:6e:1f:8e:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Jan 2 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5725e01c7145436a07e660d37bc69c2eb32051eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:d5:d8:de:66:bd:e4:11:73:58:34:e9:43:
c4:42:c4:b6:0d:dd:08:7c:04:2a:a9:16:1b:5c:5b:
5c:7d:29:26:01:fa:d2:d5:e5:6f:c9:1b:52:33:11:
31:b9:71:63:aa:e9:b7:fa:1c:fe:24:9f:2a:bd:ee:
71:9c:71:65:0f:8b:a9:a0:df:b4:c5:c5:21:f3:43:
c8:ed:55:ba:91:73:2e:37:02:56:2b:36:90:27:d8:
c9:8e:eb:d8:74:77:f4:46:ab:61:05:0c:8b:6a:53:
da:27:44:5b:ad:0e:3a:33:59:8a:4b:aa:d3:c7:12:
e1:51:47:a6:b2:bc:b7:4a:af:ed:f6:9d:ea:e8:1b:
c3:e1:9a:f2:9f:27:5c:1a:23:a1:cb:37:22:c9:e6:
54:9f:dd:da:90:24:e0:dc:76:d3:2a:bf:2b:3d:54:
ad:65:a6:4d:6d:9b:65:c0:cb:d2:ae:a8:34:d3:53:
cc:47:72:83:9a:d6:aa:8d:22:c2:eb:f1:98:e0:91:
cc:69:8c:38:2d:74:fd:45:b0:22:e4:68:e9:b5:3e:
a1:e6:cc:6c:e2:e2:f7:1f:73:3a:1b:6d:db:fe:c6:
eb:17:dc:cf:24:10:44:74:de:82:13:dc:c1:5a:5a:
3c:8e:89:ac:16:68:74:4f:0b:fc:15:b0:57:57:4d:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:E0:1C:71:45:43:6A:07:E6:60:D3:7B:C6:9C:2E:B3:20:51:EB
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/VyXgHHFFQ2oH5mDTe8acLrMgUes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:92:e4:28:e6:04:0a:48:53:9e:23:fc:87:bd:25:db:6a:53:
39:4c:59:9d:24:ab:af:f5:04:35:d7:90:c1:d5:ec:68:ec:bc:
22:08:e0:ff:94:9a:be:8f:bb:c4:76:92:f4:dd:b2:ac:e5:cc:
9f:3e:e6:c5:3a:95:30:49:5f:f4:4d:20:2d:c3:44:3e:f6:95:
ff:89:ad:c2:f7:aa:b6:35:b5:ee:a3:0d:d8:96:b3:9e:11:b4:
b5:48:e1:20:d9:9e:74:4e:b8:07:14:35:58:32:1b:7f:7f:84:
97:83:87:8e:3e:2a:50:37:cf:20:34:6b:db:27:42:60:d3:b5:
f6:b6:1e:5c:b7:38:83:7f:71:30:29:17:f5:11:a3:06:6c:50:
97:9e:f2:aa:30:b2:16:f9:14:1f:a6:95:10:11:b7:e9:e0:f1:
89:6d:c2:d5:83:0e:4d:8a:a4:4c:b9:dc:d4:4f:b0:0b:b7:11:
63:73:c1:b2:19:b3:f3:3d:25:45:11:ab:d4:24:ea:48:7a:19:
83:1b:cf:55:e6:d9:30:54:92:96:c8:63:76:16:d0:27:57:f8:
60:8f:ea:9a:e1:22:64:f6:b2:af:19:a2:00:07:d7:79:3b:d6:
1e:aa:98:0e:fe:0e:37:8d:55:08:c7:3b:c1:76:8f:3b:ad:0a:
4c:6c:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:10 2025 by rpki-client