Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vpYIjVqYXse1NOzMJJ05jbEjSrE.roa
File: vpYIjVqYXse1NOzMJJ05jbEjSrE.roa (raw, json)
Hash identifier: f52UR8ZwcW4ybXazWq/1q+s1rdIV3yCQBXBsligRmpQ=
Subject key identifier: BE:96:08:8D:5A:98:5E:C7:B5:34:EC:CC:24:9D:39:8D:B1:23:4A:B1
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452E5A6BB9070905D432719BD61560
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vpYIjVqYXse1NOzMJJ05jbEjSrE.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 31.222.242.0/24 maxlen: 24
31.222.249.0/24 maxlen: 24
185.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2e:5a:6b:b9:07:09:05:d4:32:71:9b:d6:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be96088d5a985ec7b534eccc249d398db1234ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:ab:84:2c:ba:58:c4:cf:00:6f:45:f4:4a:
95:0f:7c:dc:7a:bd:7c:51:6e:3f:87:a6:72:1f:69:
4f:82:f6:64:29:06:8e:66:32:1b:66:64:36:b5:7d:
21:ce:e2:d9:af:ba:d7:8f:db:c1:6e:2a:3d:63:3c:
c4:57:28:a1:e5:3b:93:eb:bf:22:0b:ce:e5:31:dc:
ea:de:81:dc:88:29:01:a9:53:fe:3b:58:7b:b5:ec:
fd:bc:18:98:68:9e:4c:c2:ed:ae:72:7d:38:29:c9:
d9:5b:bc:c2:87:77:23:ce:16:a6:fe:75:a2:2c:46:
30:49:3c:43:df:3d:ba:97:82:9c:10:93:93:76:e0:
06:8e:2c:31:ba:31:4b:2c:68:1f:d6:cd:97:09:5a:
e1:1e:f8:d7:0a:8b:77:34:c9:be:0b:a7:4d:77:6d:
9e:97:6d:cf:0f:63:92:45:18:d9:c4:d4:bf:ed:fa:
36:3d:a4:8e:55:77:64:8b:60:d4:f9:76:91:e2:e2:
23:1d:6b:fd:45:d1:aa:d7:f5:56:95:df:1e:13:40:
6a:05:78:a2:66:0b:79:61:fe:45:e6:59:ac:e5:2e:
b7:4a:71:f5:a9:0e:d8:ec:a8:a2:8b:aa:7a:7c:02:
36:f9:26:80:02:60:f2:21:10:90:a0:c1:1f:1a:e4:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:08:8D:5A:98:5E:C7:B5:34:EC:CC:24:9D:39:8D:B1:23:4A:B1
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vpYIjVqYXse1NOzMJJ05jbEjSrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.242.0/24
31.222.249.0/24
185.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c5:55:18:dc:eb:a3:6e:52:c8:31:ca:1c:78:be:78:26:c3:
c4:2a:5a:c1:f2:76:40:b5:98:a2:91:c8:2d:78:c6:9e:3e:cf:
25:f0:8d:c4:59:52:a5:3f:f2:bd:c0:df:9a:c0:d7:38:29:1e:
45:87:9f:9b:f2:f7:16:13:5d:62:e8:0e:04:8d:ce:25:bf:d4:
fd:91:02:cc:85:38:16:16:d1:e9:99:93:92:fd:78:1c:86:03:
88:f5:8a:4d:ac:da:8a:84:af:c0:fa:1b:d0:68:3c:f5:18:7a:
31:d1:bd:33:42:cb:48:d8:51:dc:7c:bf:7a:3a:03:05:c3:94:
a4:43:9a:0c:49:6f:0c:fe:47:83:c3:90:73:f2:69:37:11:c2:
e8:41:ae:e8:99:bf:9a:71:7c:29:53:93:57:05:10:f1:a8:84:
13:e7:27:b3:21:b9:9d:b6:ab:bc:d3:8d:a3:f9:f3:92:e2:42:
a4:60:cf:ec:79:4e:94:a5:e5:48:3d:4f:ec:cc:5b:11:83:89:
98:b7:7f:9d:59:14:6d:e8:72:2b:5f:59:59:5b:43:c5:23:d1:
e6:ca:3f:c9:23:01:f5:73:e4:86:c3:48:ef:18:77:6e:2b:74:
34:11:d3:bd:cd:9e:fb:68:d7:49:fa:19:0a:77:24:c3:96:66:
26:82:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:55 2025 by rpki-client