Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/vPQVU__LjjI0KQlbryLD4Z9lbco.roa
File: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (raw, json)
Hash identifier: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=
Subject key identifier: BC:F4:15:53:FF:CB:8E:32:34:29:09:5B:AF:22:C3:E1:9F:65:6D:CA
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019425203CBC8E50A2EE6F2C5BDFE7F643FE
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/vPQVU__LjjI0KQlbryLD4Z9lbco.roa
Signing time: Thu 02 Jan 2025 03:47:37 +0000
ROA not before: Thu 02 Jan 2025 03:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49221
IP address blocks: 31.7.48.0/21 maxlen: 21
185.94.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3c:bc:8e:50:a2:ee:6f:2c:5b:df:e7:f6:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Jan 2 03:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf41553ffcb8e323429095baf22c3e19f656dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:8e:af:cc:ec:44:0f:62:8f:b1:db:2c:82:
fc:36:f4:69:0d:8e:44:4b:95:69:26:85:8c:fe:bf:
60:f8:f7:15:7b:5d:ee:f7:9e:b5:14:f4:5e:c9:38:
32:5f:53:1b:04:ce:66:e6:00:a4:d4:a3:56:53:c4:
39:bb:2c:24:e8:7f:e7:7e:bf:4f:87:4c:11:0d:ec:
2e:5c:a2:d7:14:63:a0:92:3a:f1:5e:fe:10:d6:0c:
f5:eb:f8:91:62:f2:fd:ab:27:39:52:96:70:23:4f:
69:69:e4:ed:b4:c0:ed:cc:ee:6e:52:89:70:10:d9:
57:db:11:b5:a9:0b:39:8e:a2:bd:e7:0f:71:f4:37:
e3:63:20:86:91:ab:c8:15:ad:91:30:5a:9a:df:e2:
27:69:14:19:ef:7c:c9:86:a1:af:63:50:dc:02:97:
63:91:c3:c5:05:9b:43:b0:f4:df:41:a7:27:98:cf:
35:1e:08:b8:b7:da:f1:45:f7:0f:32:77:1b:cc:5f:
52:e7:58:bd:68:d9:ba:27:55:75:23:52:d2:04:46:
20:2d:ac:cb:10:47:7b:dc:bb:d9:27:79:e8:9b:ea:
b3:6c:5b:f5:86:53:85:52:fc:04:07:05:8e:7a:1a:
d1:24:d9:5f:e3:fb:cc:32:3e:64:46:05:25:73:8a:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F4:15:53:FF:CB:8E:32:34:29:09:5B:AF:22:C3:E1:9F:65:6D:CA
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/vPQVU__LjjI0KQlbryLD4Z9lbco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.48.0/21
185.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
78:da:54:90:17:25:a6:07:2c:13:d4:a7:a5:8a:4d:94:25:89:
40:68:b5:f1:60:d4:e7:2c:77:65:3b:1f:46:47:28:d5:63:10:
a1:be:06:ea:28:c4:94:72:05:68:7b:30:43:2f:e8:fa:25:8d:
2d:da:41:51:9b:cd:33:dc:cb:9d:40:63:96:3d:52:f7:42:e4:
0c:f0:2a:04:12:bb:3d:10:21:a0:ac:cc:3f:0b:00:20:f0:42:
0c:e8:95:34:1b:48:7d:c9:5f:b9:7a:18:b0:b3:c5:e0:5f:8d:
d9:9e:84:e4:8d:b4:21:c9:8d:a2:70:5d:f3:83:d7:73:1d:6c:
e4:93:1a:a6:f7:34:c3:ff:84:36:cd:76:a9:38:54:46:80:ab:
4b:fa:d1:bd:b6:dd:9b:17:a5:0d:8f:0c:5c:64:30:91:47:07:
a6:6a:ea:45:90:5f:ee:cf:57:9e:0c:cf:60:d2:76:cd:c9:02:
1e:08:02:cf:02:ce:cb:63:78:d1:b8:1e:4f:a2:27:76:ab:e1:
c6:0f:19:20:1d:e3:71:61:a7:a3:ba:41:ab:50:51:0b:21:e5:
fb:a1:76:bb:b6:d5:23:31:9e:50:e4:eb:30:9e:89:df:03:18:
18:fe:21:92:ab:f8:31:a8:a7:62:12:02:cf:67:54:fa:1f:af:
4a:66:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:39 2025 by rpki-client