Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa
File: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (raw, json)
Hash identifier: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=
Subject key identifier: 55:65:AD:46:A2:5B:90:0B:1B:F1:D1:E4:5A:70:BB:53:53:82:BD:FE
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 0194258F72399ACA47ECBD49B42E781AF1A7
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30876
IP address blocks: 213.180.156.0/22 maxlen: 22
213.180.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:72:39:9a:ca:47:ec:bd:49:b4:2e:78:1a:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5565ad46a25b900b1bf1d1e45a70bb535382bdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:36:34:93:a7:21:41:65:8e:92:a4:66:01:
c2:60:79:2a:a0:d7:13:64:0f:08:68:55:f1:42:49:
ac:db:34:dc:79:01:58:7f:c8:21:93:df:32:62:87:
cd:bb:1f:9b:fc:7f:ce:53:ac:3b:ef:43:77:1b:7c:
d7:de:5f:0f:84:f5:11:cc:bb:37:12:cb:5d:2a:43:
66:f9:25:3a:61:fd:b1:7f:75:ad:6e:0b:b0:8c:02:
b3:53:d8:80:ca:ef:00:33:2d:36:22:47:31:ce:b4:
b7:e0:db:52:7e:4f:57:e9:73:42:48:74:11:0e:8e:
74:f1:4b:bf:a9:99:92:ac:ef:33:5f:e1:84:c4:63:
8a:c6:a7:bb:ad:2d:42:c1:a0:35:a9:0e:7e:d7:f8:
a4:b0:c1:71:6b:c8:38:95:ba:c0:c3:31:d4:09:3f:
20:0a:70:37:a9:4e:5f:e6:c3:2c:5f:24:1c:72:98:
e3:4b:c8:14:e7:b1:a7:97:7b:21:88:cd:d8:3b:6b:
99:1c:12:e5:2e:80:31:64:32:ca:cc:d3:85:57:2e:
5c:b7:b7:7e:d0:b0:af:bf:11:2b:1a:8a:30:94:22:
31:c2:21:90:1b:17:4d:9f:7d:6f:64:84:73:8e:e3:
7c:c2:dc:e0:d5:45:e4:5c:3f:36:09:f5:fd:3c:e4:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:AD:46:A2:5B:90:0B:1B:F1:D1:E4:5A:70:BB:53:53:82:BD:FE
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:83:d0:03:2b:ab:28:96:31:30:26:a5:bd:62:38:48:60:04:
90:bf:52:37:e0:4b:5d:f5:87:43:f3:fe:f7:80:ae:90:cc:b1:
b0:46:af:7e:be:01:7c:69:8f:0e:38:4f:cb:7e:00:46:db:45:
64:b6:63:fa:cc:9a:c6:72:80:9f:72:0b:e0:93:ab:8e:9f:78:
c9:be:ed:81:07:0c:3c:64:50:f1:1a:19:25:46:b1:87:07:e7:
3c:55:09:c1:40:40:48:3d:4e:89:65:99:c4:81:d9:3a:82:8f:
25:2e:52:d0:b9:8a:0a:37:d9:dc:20:01:09:de:46:55:0c:7e:
71:12:0a:37:13:ed:d7:a1:e9:c0:58:1a:31:70:4c:db:7a:de:
9e:2d:ce:dd:0c:2d:d2:04:59:26:a1:dd:8d:ac:a8:c6:26:9b:
00:fe:84:54:f9:e6:03:88:3e:ae:8c:9e:56:27:af:6c:7f:e0:
00:56:ba:47:6f:b9:1d:c7:0d:ef:81:32:1e:c6:55:04:77:9e:
c2:b0:01:68:e8:ce:09:56:fa:74:06:53:4a:d7:5f:77:55:56:
87:82:3e:e3:8c:65:39:9d:fb:8e:08:d2:b2:2c:69:fe:2a:f2:
6c:a3:5d:77:d4:7c:03:8b:ed:8d:24:da:2c:80:c6:1f:b8:f7:
46:1f:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:03 2025 by rpki-client