Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VQKc_a-V5lys0IaCgbd0Pi8uukc.roa
File: VQKc_a-V5lys0IaCgbd0Pi8uukc.roa (raw, json)
Hash identifier: 5Y4TeajMqsQT/MHs12q360MfKIZkdpqF4ZdShKAMUjs=
Subject key identifier: 55:02:9C:FD:AF:95:E6:5C:AC:D0:86:82:81:B7:74:3E:2F:2E:BA:47
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59F77B026DA450D76873D68B1F5A7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VQKc_a-V5lys0IaCgbd0Pi8uukc.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41112
IP address blocks: 37.9.51.0/24 maxlen: 24
146.185.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:77:b0:26:da:45:0d:76:87:3d:68:b1:f5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55029cfdaf95e65cacd0868281b7743e2f2eba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:ef:f9:e7:c2:58:16:ff:0f:65:05:70:35:
0a:00:80:c1:fa:9f:f5:17:e8:fb:03:2b:30:db:b2:
64:e5:57:84:64:43:c3:59:45:27:59:fb:ca:a9:82:
ff:6e:fd:13:3e:9a:f0:3b:fa:b4:3f:c0:5a:06:95:
a2:43:cb:43:8f:03:d2:4c:cf:06:46:81:37:24:bb:
61:91:4f:43:9d:4e:1e:b4:ed:2f:6a:3a:4d:63:0f:
ce:db:e4:06:02:2d:27:1d:e7:34:f5:d5:85:62:bb:
0c:64:f1:5c:c0:25:9c:5c:08:97:26:db:d6:98:d8:
25:44:eb:65:b8:da:02:b0:5e:2c:fc:08:53:99:ad:
0e:82:41:c7:18:5f:9c:a2:4e:b0:1b:40:b5:2a:d2:
76:46:82:cc:27:b6:39:25:17:d7:1a:bf:81:06:6c:
c0:5b:38:6c:a2:9f:6c:74:cd:a8:97:6f:45:c0:29:
30:17:9f:42:1b:14:b3:d3:87:a4:06:bc:d6:b2:7c:
f8:db:e2:2a:d4:7a:bb:58:f1:26:4b:65:de:42:80:
5c:fe:d8:ff:ca:5b:17:04:6b:d6:bd:27:f9:fa:53:
46:e9:35:81:1f:cb:a2:13:89:e6:d9:ec:12:0c:60:
1e:ae:e2:1c:76:82:59:e1:b3:62:71:d8:0c:8a:aa:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:9C:FD:AF:95:E6:5C:AC:D0:86:82:81:B7:74:3E:2F:2E:BA:47
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VQKc_a-V5lys0IaCgbd0Pi8uukc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.51.0/24
146.185.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:70:5b:c3:0e:57:ba:55:da:d6:0e:93:19:12:f0:9d:f0:b1:
c9:42:b8:1c:38:52:64:b4:4f:7d:78:2b:49:a5:b7:32:97:cd:
a9:1d:85:4c:cc:93:25:fa:92:78:7b:17:a5:1a:f5:7c:aa:44:
ce:ff:c5:41:82:3f:76:cd:0a:59:7d:a5:b6:46:38:96:25:5a:
a4:61:d0:e4:ce:e7:f9:94:6f:83:7a:29:4c:16:64:94:0a:a1:
c6:79:56:5a:ff:b9:e8:d0:4a:b3:0c:9d:fd:ed:ac:c7:5b:fe:
54:48:c5:8a:ba:c1:38:70:b0:11:71:ea:e4:be:ea:88:47:37:
0a:49:17:b8:bb:7b:59:da:7a:9f:c4:1b:58:c2:90:84:66:b3:
37:c4:56:a8:4f:87:b6:86:47:93:a8:f5:23:23:15:6a:b3:5c:
f6:06:d3:10:dd:78:83:3e:34:97:86:56:0c:13:d5:6f:94:5d:
a5:8a:fc:1e:82:a8:e5:38:bd:39:38:6c:43:4f:a0:8b:1c:ba:
5d:10:64:b4:28:c9:2a:a4:72:f8:d4:dc:ed:52:e8:68:f1:01:
b7:ff:ae:18:da:f8:62:8e:69:c3:5f:e1:0a:36:fb:b8:76:9f:
31:a8:60:d1:27:f4:66:de:fa:3d:37:be:cc:97:38:37:6d:9d:
74:a0:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:19:48 2025 by rpki-client