Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/VrF_JXAYi7cHSdA7vOtQcy0-na0.roa
File: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (raw, json)
Hash identifier: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=
Subject key identifier: 56:B1:7F:25:70:18:8B:B7:07:49:D0:3B:BC:EB:50:73:2D:3E:9D:AD
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 0194B1BB8ED5096D5CDD691C2CAA420CBE4A
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/VrF_JXAYi7cHSdA7vOtQcy0-na0.roa
Signing time: Wed 29 Jan 2025 11:04:06 +0000
ROA not before: Wed 29 Jan 2025 11:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47527
IP address blocks: 185.226.20.0/24 maxlen: 24
185.226.21.0/24 maxlen: 24
2a0d:dc00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:bb:8e:d5:09:6d:5c:dd:69:1c:2c:aa:42:0c:be:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jan 29 11:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b17f2570188bb70749d03bbceb50732d3e9dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:d2:57:5b:99:03:6c:8a:37:ad:56:e9:58:
17:ab:88:7d:f9:1b:41:18:8a:b6:89:b4:66:0b:17:
a4:a5:86:27:ff:23:5e:81:cf:ad:3b:75:d0:4f:b9:
7e:33:8c:f6:c2:11:35:00:90:1e:93:93:6b:6f:2a:
f4:b6:b2:a1:f8:d9:2b:bd:2d:14:7e:ee:d0:f6:43:
8d:5c:11:eb:2c:e8:45:8c:c3:97:89:f1:34:e7:da:
be:2f:0b:d0:c4:39:39:6f:0f:db:0b:dd:8e:af:76:
90:7c:ca:28:d6:ad:9d:1d:af:1b:71:e7:d6:11:92:
18:f3:2e:18:13:c3:71:93:d2:7d:ae:fb:1f:aa:f6:
50:16:11:55:42:e9:b6:6a:06:fc:33:55:af:db:33:
df:6a:c5:b2:cb:6d:bf:f7:bb:cc:59:bf:32:b2:d5:
ed:dd:92:bd:47:fe:42:e5:e5:9f:18:21:6a:90:da:
e4:a6:33:d9:97:2e:d2:ea:70:fa:78:83:02:de:73:
ca:67:fe:48:24:b3:8c:23:32:24:f7:78:ac:82:30:
99:a8:18:98:92:1d:61:de:26:2d:31:b9:2f:8f:2f:
03:dc:d8:ad:3e:ed:33:98:77:de:67:bf:a4:04:9c:
aa:d6:02:37:9b:a8:3a:1f:f5:45:fd:d0:57:ae:88:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:7F:25:70:18:8B:B7:07:49:D0:3B:BC:EB:50:73:2D:3E:9D:AD
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/VrF_JXAYi7cHSdA7vOtQcy0-na0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.20.0/23
IPv6:
2a0d:dc00::/29
Signature Algorithm: sha256WithRSAEncryption
67:a3:16:42:0e:0d:bf:09:73:e1:b6:a2:12:c2:9f:39:9d:b4:
ec:99:af:91:ec:4d:b8:55:9e:0f:fc:88:57:3e:72:94:3c:e6:
9c:99:d8:a6:9c:4a:3c:e3:3d:ff:6a:9c:eb:39:46:22:0a:44:
a8:70:e1:02:1f:d5:af:ec:b5:35:46:59:85:7e:7f:bb:23:ed:
11:b8:b6:b1:ba:96:af:43:3d:e3:f0:01:0b:d3:82:0c:76:ae:
b7:bb:d2:0f:41:79:f5:44:7c:d2:d3:97:10:1f:2b:57:39:5b:
ce:b2:e4:b0:2f:22:21:59:a4:75:b3:d4:91:e8:5e:27:c3:28:
31:c5:9e:3f:80:ea:1f:60:c5:11:77:a4:56:c7:0d:e3:8a:05:
80:77:c9:91:56:d7:6d:c6:2f:8f:4c:0e:f2:a4:bb:ac:90:a3:
24:07:85:16:3e:12:f6:62:bc:8d:d5:5c:ea:78:14:bc:97:f6:
5c:5f:8d:27:9b:ea:9e:7e:00:36:cf:ba:65:04:e2:c4:75:11:
79:33:37:9c:e0:49:2c:b4:c3:be:78:27:b2:9b:64:37:50:01:
cd:f8:42:0b:48:77:02:a3:0f:aa:7a:54:51:6c:43:e4:1a:ec:
47:32:80:4a:53:29:c8:a7:36:95:a8:7d:97:5d:20:4c:b9:fa:
a4:c4:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:32 2025 by rpki-client