Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/VNYCVzbiU_3jbeJ25u2hye6LJrc.roa
File: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (raw, json)
Hash identifier: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=
Subject key identifier: 54:D6:02:57:36:E2:53:FD:E3:6D:E2:76:E6:ED:A1:C9:EE:8B:26:B7
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019425FDE83161983C4BF1E5E76B745C223D
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/VNYCVzbiU_3jbeJ25u2hye6LJrc.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48152
IP address blocks: 194.88.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:31:61:98:3c:4b:f1:e5:e7:6b:74:5c:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54d6025736e253fde36de276e6eda1c9ee8b26b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:5c:db:fb:d6:7b:d0:3d:e8:1a:53:a3:d7:
2e:02:19:76:07:d3:68:61:66:4c:4d:8a:3a:58:40:
ca:17:50:f9:68:28:89:35:52:67:12:56:91:1d:d3:
d3:56:69:e5:2a:01:8d:6b:0c:b2:08:f5:e2:85:05:
5b:e7:da:83:4e:f8:8d:29:7e:29:59:40:fa:42:b5:
1f:7a:0a:60:45:c2:47:1a:cb:1b:f4:0b:83:12:e0:
a1:62:a9:6d:cc:b4:99:96:c9:ba:c1:1f:66:33:39:
46:32:58:b1:31:8a:2c:cd:10:e4:68:01:ee:5b:6a:
00:a5:7c:ca:23:f3:0f:69:e6:b0:ab:26:80:47:b7:
4b:1e:81:14:ae:8d:62:d8:ce:ef:31:82:04:e5:c4:
0e:3a:d8:c9:d3:63:09:87:1e:4e:05:b2:97:7f:96:
e5:5c:9d:84:d1:d8:0c:e3:f1:67:0d:aa:f4:97:f8:
c8:e8:26:8a:88:4b:75:f0:e6:55:46:49:70:eb:67:
cd:6b:8a:55:e7:91:c5:a0:64:29:8e:e3:80:a8:34:
75:ca:1c:0f:f2:f7:44:8c:db:f9:01:3d:2b:19:f0:
b0:13:01:27:96:42:be:cc:fd:cf:2e:1f:cb:5d:be:
56:9a:85:48:b8:f6:a2:92:9a:ed:21:51:75:72:a1:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:02:57:36:E2:53:FD:E3:6D:E2:76:E6:ED:A1:C9:EE:8B:26:B7
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/VNYCVzbiU_3jbeJ25u2hye6LJrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.0.0/24
Signature Algorithm: sha256WithRSAEncryption
00:19:03:9b:26:1d:d3:8d:df:23:ab:d2:a4:fb:aa:81:3d:ac:
50:61:b0:f5:68:55:b3:44:63:6a:da:8b:00:8c:0d:aa:5f:22:
d7:f0:77:2f:19:bd:18:f6:3b:07:2f:cd:37:fe:30:eb:cf:1f:
c3:bc:e4:d7:37:f5:fe:76:20:32:7b:87:d0:1a:5b:6b:b2:42:
a6:d4:c8:41:0f:88:ae:bf:5e:3f:d2:d1:3d:08:b2:a7:f9:5a:
3c:d5:41:ec:95:e2:2f:e6:cd:23:1d:e2:f9:f7:de:b1:0c:8e:
c2:b1:46:e7:6b:45:86:0d:f0:d6:cb:b7:c8:2f:3c:30:6b:c0:
2e:fe:53:1d:ce:62:96:da:6f:6c:15:50:19:df:31:c2:b2:f0:
ad:3b:3d:10:db:6d:63:74:28:13:85:34:c4:bd:f2:5a:fe:71:
44:da:d2:f4:3b:09:09:5a:8d:fd:82:03:40:f0:55:d5:c2:fb:
c1:4d:84:de:62:e0:92:dc:48:91:b3:19:54:97:13:81:29:9a:
da:e5:ef:b8:16:12:93:e3:ed:e4:39:6c:8b:af:56:e6:6d:af:
87:c9:0b:c9:5c:97:06:61:f3:a7:bf:95:05:e1:0f:1b:4a:c0:
b0:2d:1f:45:ef:fc:11:2f:27:af:27:aa:4e:63:67:40:d5:7d:
2e:fb:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:10:27 2025 by rpki-client