Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Vdq57AskBeGBDlheyUDZPLCNdoE.roa
File: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (raw, json)
Hash identifier: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=
Subject key identifier: 55:DA:B9:EC:0B:24:05:E1:81:0E:58:5E:C9:40:D9:3C:B0:8D:76:81
Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial: 019422FB09CCED3A3B585816E6C5CCA9076E
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Vdq57AskBeGBDlheyUDZPLCNdoE.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51626
IP address blocks: 91.220.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:09:cc:ed:3a:3b:58:58:16:e6:c5:cc:a9:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55dab9ec0b2405e1810e585ec940d93cb08d7681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:ea:1d:28:c9:c3:01:f5:37:b9:ed:90:a3:
76:05:7b:4c:2d:ca:06:0b:5a:97:60:a7:8b:99:3b:
5e:fa:8f:fe:a5:d4:32:3e:db:aa:9d:04:a8:b1:b0:
82:d1:74:02:c9:04:87:40:c6:74:88:bd:92:32:b6:
45:a5:bd:e6:56:bb:39:c2:b4:b4:ec:e3:d1:f9:89:
be:fe:5b:98:4f:ad:8b:80:62:d2:fd:f0:c2:56:08:
6b:e0:ac:e3:7a:c9:8b:ac:74:a1:fe:35:b9:bf:e3:
52:cd:a9:39:5d:c6:b5:1d:fa:8b:36:b8:77:b7:56:
90:26:f9:d5:00:f7:35:77:e0:ba:49:86:36:26:2d:
de:3c:af:25:cf:72:c1:75:f8:aa:91:a8:7d:3e:72:
b8:73:f7:53:7e:c2:07:dc:db:35:0c:bc:74:34:7a:
8a:bc:4b:fd:88:03:f7:45:91:d7:55:ad:0d:c2:39:
97:07:2f:32:7a:92:e8:09:85:74:85:99:e6:e0:7c:
ac:63:42:dc:7b:36:2f:52:46:b2:69:ca:35:f9:de:
41:cd:fc:dd:f6:a4:33:9c:73:9a:0c:d9:c2:0d:84:
a1:9d:15:04:8a:61:a5:28:6e:5f:86:99:7b:6d:1c:
eb:51:db:0b:0c:89:77:ba:c6:ea:42:5b:57:0c:8d:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:B9:EC:0B:24:05:E1:81:0E:58:5E:C9:40:D9:3C:B0:8D:76:81
X509v3 Authority Key Identifier:
keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Vdq57AskBeGBDlheyUDZPLCNdoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
84:68:59:82:58:c3:e2:eb:a2:56:1f:da:0b:33:10:c6:d6:98:
04:0b:4d:ff:92:35:87:21:c1:0e:de:c5:be:31:4d:68:b5:99:
56:f8:fb:2d:31:a2:01:ac:22:44:c2:a6:ad:d9:74:74:1b:91:
3a:ef:f6:53:8e:58:5a:09:3f:9f:ea:04:58:17:b1:b4:cb:ab:
7a:18:0e:96:84:77:df:3d:48:8c:4e:ec:cb:6a:ef:c4:2b:9f:
6a:c7:2d:5f:0e:b1:45:a6:bc:ef:45:88:29:9e:ea:28:2e:32:
9d:6c:d5:de:c4:4b:91:16:d8:d2:2a:6d:ef:c8:0e:e8:ff:8b:
12:e6:b6:13:1b:26:cb:d9:09:83:60:3d:1a:68:7b:a5:87:05:
74:37:d1:5b:94:07:9f:a5:37:33:20:f6:89:55:c9:1b:cb:f7:
27:3a:92:f7:fb:12:f4:93:41:af:ea:98:44:58:1f:cd:91:21:
fe:94:0b:e1:8e:08:46:f7:7c:e3:60:7c:72:e7:3b:41:48:33:
aa:4e:d8:16:0d:af:3f:8a:6c:67:78:44:c7:fc:84:fc:77:d2:
c9:a4:7c:8f:2d:0d:a6:d7:bf:b3:bc:b9:c7:df:5f:66:10:86:
cd:90:86:8f:d7:dc:12:f4:95:ca:10:43:ef:59:84:73:e8:c6:
d1:2a:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:38 2025 by rpki-client