Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa
File: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (raw, json)
Hash identifier: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=
Subject key identifier: BF:2E:10:11:09:A9:7C:59:28:F2:AB:CA:22:BB:C7:DE:44:D1:9F:C4
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 01942824DF67F88DDBCD3E6336D60BEADECB
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa
Signing time: Thu 02 Jan 2025 17:51:32 +0000
ROA not before: Thu 02 Jan 2025 17:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8405
IP address blocks: 5.252.124.0/22 maxlen: 22
45.87.16.0/22 maxlen: 22
185.218.168.0/22 maxlen: 22
193.35.216.0/24 maxlen: 24
193.36.3.0/24 maxlen: 24
193.36.42.0/24 maxlen: 24
193.36.74.0/24 maxlen: 24
217.140.72.0/21 maxlen: 21
217.140.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:df:67:f8:8d:db:cd:3e:63:36:d6:0b:ea:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Jan 2 17:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf2e101109a97c5928f2abca22bbc7de44d19fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:dc:95:3e:d1:e9:59:35:80:ee:6b:e2:22:
45:c4:9a:d0:38:ea:83:e8:fe:00:00:15:8d:f9:5a:
2e:35:30:24:fe:8a:a3:8f:f8:5b:c7:44:bb:3b:26:
21:d6:76:09:7f:1c:8c:56:66:3a:6b:87:45:93:b6:
35:0b:bd:86:1c:65:1f:93:99:f2:07:72:ea:37:70:
2a:f9:fd:c8:fe:91:e1:0e:a1:19:c2:dd:19:8f:94:
3a:bd:59:37:7f:f4:16:22:71:44:4b:8b:68:42:26:
b3:de:3b:16:a4:93:b0:fa:bc:78:5a:5b:b3:7c:03:
b9:05:24:ba:27:4c:e8:a8:3b:7c:f1:53:79:62:f9:
3d:e0:94:9c:4f:5c:83:d6:c8:9b:d5:5a:87:ef:15:
80:ef:21:72:01:55:dc:13:b8:01:51:e7:3a:53:32:
36:2c:f2:b2:50:04:71:9c:3f:8e:30:30:43:19:fa:
8b:60:99:ef:74:ea:de:5d:4c:50:39:44:16:d1:a8:
12:02:0b:4d:49:b2:03:a1:f4:ea:e1:d2:40:90:13:
08:d1:e1:f2:1d:3e:92:4f:4c:f4:2e:6e:25:bf:a9:
92:f1:00:26:2b:ad:de:7a:b6:7e:b8:ca:45:d8:13:
2f:81:fb:d1:7b:02:28:32:47:0d:62:5f:4e:dc:98:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:10:11:09:A9:7C:59:28:F2:AB:CA:22:BB:C7:DE:44:D1:9F:C4
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.124.0/22
45.87.16.0/22
185.218.168.0/22
193.35.216.0/24
193.36.3.0/24
193.36.42.0/24
193.36.74.0/24
217.140.72.0-217.140.95.255
Signature Algorithm: sha256WithRSAEncryption
3c:53:fa:fe:36:9e:c4:ba:ea:0c:46:e0:4d:ec:bb:db:62:a4:
66:a8:3f:74:4f:63:a9:10:b6:11:c8:5a:5a:12:35:6d:c9:b3:
74:6d:cd:ef:04:04:04:b5:d2:29:99:d6:b1:e3:35:6f:b5:33:
45:71:e0:57:93:26:7e:a3:16:0c:fc:25:09:c7:09:bf:4b:2e:
3c:c7:78:03:03:95:38:ac:1d:85:6a:53:1e:e0:32:46:e2:aa:
9c:aa:4c:ff:6a:06:8e:29:54:11:a1:19:e0:99:3f:4f:24:ec:
38:b4:4d:20:ca:e7:29:b8:af:4c:60:e5:bf:46:1a:22:dd:28:
54:e5:cf:a4:23:26:3e:d8:13:95:ba:32:43:92:62:01:42:d7:
11:80:21:72:ee:1c:22:68:1e:09:c3:06:e3:e9:1e:99:c3:79:
4c:fa:b1:55:b7:bc:d4:3a:88:3a:55:7c:8b:b0:b9:ed:40:05:
a8:e7:07:c9:38:8b:a4:4c:14:3a:51:1e:e4:38:51:0a:ad:23:
45:52:a4:98:95:db:45:0e:f7:03:bd:f7:09:bf:b1:38:26:6c:
8a:2f:5b:d2:e8:3a:c3:5b:de:44:6a:9b:59:86:03:14:30:81:
ab:ff:0d:f5:d5:be:b8:4f:73:4a:98:b3:a8:62:0c:64:fd:40:
b2:49:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:56 2025 by rpki-client