Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/VnsTdGec-3pHRJVLeuucM8lE74g.roa
File: VnsTdGec-3pHRJVLeuucM8lE74g.roa (raw, json)
Hash identifier: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=
Subject key identifier: 56:7B:13:74:67:9C:FB:7A:47:44:95:4B:7A:EB:9C:33:C9:44:EF:88
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019421445E540AF18E59B13DF30BD5B4CE60
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/VnsTdGec-3pHRJVLeuucM8lE74g.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215739
IP address blocks: 84.252.80.0/22 maxlen: 22
84.252.80.0/24 maxlen: 24
84.252.81.0/24 maxlen: 24
84.252.82.0/24 maxlen: 24
84.252.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5e:54:0a:f1:8e:59:b1:3d:f3:0b:d5:b4:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567b1374679cfb7a4744954b7aeb9c33c944ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:b7:2c:77:d9:db:ea:05:dd:3a:e4:e9:82:
14:28:4a:8e:06:9c:53:2e:1b:e5:c2:6a:e4:ab:de:
c4:9c:95:54:b6:eb:23:84:c9:05:e0:d8:08:ab:de:
eb:df:5d:33:1f:bb:19:0a:ca:d2:40:ee:75:a6:fc:
30:b8:5c:6c:18:0d:28:66:5f:68:84:ba:bd:d3:13:
04:7a:02:3c:a7:f8:e8:8c:6d:9c:66:5c:ff:85:59:
93:ca:0b:6f:84:8e:08:04:e0:ae:76:d6:9f:78:17:
61:ec:36:bc:6e:29:6e:68:ad:7d:b4:16:db:3a:a6:
8e:a5:cf:68:c2:97:ad:6d:c5:17:b8:d3:a7:8e:fd:
6d:d8:89:4b:c6:34:5f:5e:99:b3:56:94:9c:f1:ae:
d7:2c:de:e5:ff:b8:36:d8:7a:f4:fd:f5:16:33:98:
61:9a:85:b9:07:71:38:bb:d9:8a:b6:83:e1:c5:43:
66:2f:05:9a:f9:82:cd:01:f2:b6:a6:1b:35:fe:3d:
3e:f3:2b:1b:f5:c8:5c:79:e1:22:b8:6b:e5:2d:3a:
2e:34:f4:7c:f9:3d:2b:64:ad:53:65:92:e2:bd:1b:
51:7b:ae:7c:f1:f9:42:f7:35:12:75:ae:aa:57:57:
cf:58:4d:11:97:97:16:54:02:57:58:7b:6d:b3:36:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:13:74:67:9C:FB:7A:47:44:95:4B:7A:EB:9C:33:C9:44:EF:88
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/VnsTdGec-3pHRJVLeuucM8lE74g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.80.0/22
Signature Algorithm: sha256WithRSAEncryption
30:96:74:63:56:be:33:8f:38:fc:4b:8e:26:ba:fa:e5:85:d4:
9f:81:6e:bb:10:ac:60:49:c4:01:53:32:81:06:09:09:e9:13:
b6:3e:9e:12:f6:dd:80:2c:ef:62:fd:d6:bb:4f:52:6b:74:09:
3c:df:40:10:42:5b:d2:4b:1f:ab:d6:5b:d7:3f:a3:0d:13:32:
05:e7:ce:14:48:b9:00:2c:a2:8e:5e:a9:67:9e:2c:a4:a9:bd:
12:32:4d:38:40:84:47:cc:ec:16:0a:e7:4a:3a:f0:36:a0:64:
67:10:09:da:0f:12:df:cd:b0:eb:c9:17:57:b7:5f:53:07:ad:
3f:c7:f9:36:cc:68:16:60:f6:28:fa:95:4a:05:69:b9:08:0c:
e4:a0:9f:34:8e:31:8e:61:89:69:87:eb:4c:23:21:f9:7f:fd:
03:39:f0:b3:d7:74:6b:7e:8c:60:2b:52:3e:a7:4b:b8:7f:a5:
cc:bf:ac:e3:13:5a:40:ed:85:2b:3e:61:6c:b6:bb:ea:8a:55:
25:43:88:f1:59:cc:c1:f9:27:81:4e:75:57:d0:3b:91:e2:f5:
88:5b:8a:bd:fb:2f:8d:a1:fc:1c:ed:f7:85:a6:b0:0a:25:5d:
31:fb:2d:10:f0:7d:88:aa:c2:8e:0d:54:59:69:b7:1f:1c:5a:
ca:59:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:33 2025 by rpki-client