Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VAwOmXBu3_hb-94kaLmxAE_i7pI.roa
File: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (raw, json)
Hash identifier: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=
Subject key identifier: 54:0C:0E:99:70:6E:DF:F8:5B:FB:DE:24:68:B9:B1:00:4F:E2:EE:92
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A0CAABEEA6565519D1A88E44E57B
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VAwOmXBu3_hb-94kaLmxAE_i7pI.roa
Signing time: Thu 02 Jan 2025 11:48:38 +0000
ROA not before: Thu 02 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57199
IP address blocks: 80.67.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a0:ca:ab:ee:a6:56:55:19:d1:a8:8e:44:e5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=540c0e99706edff85bfbde2468b9b1004fe2ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:65:fe:05:40:6c:51:33:7d:1f:c5:54:f1:
7a:0e:8a:d5:f5:3f:65:d7:25:9c:bf:f7:d6:a9:52:
6c:cc:7a:5b:9f:8a:8c:0e:79:ed:21:44:e3:da:15:
e5:4b:b3:b1:4e:01:97:41:eb:c0:23:6f:b1:db:20:
7e:58:27:4f:09:bf:6d:83:4f:94:4d:81:2b:f3:48:
03:e3:5f:3f:54:cc:38:11:37:64:f4:e6:b9:dd:d5:
72:0e:ff:7f:04:89:de:fd:50:12:9d:fb:eb:ed:b4:
1e:e1:6b:d2:a0:bb:9f:da:85:3c:5c:36:00:29:ef:
31:0d:c7:9b:69:fb:15:c8:bf:d9:ed:ae:d6:9d:99:
ed:33:ca:bf:f1:32:a0:36:b1:d7:c3:72:ea:6e:5a:
08:36:72:56:90:15:10:11:31:24:fe:b5:3b:7d:78:
31:17:b5:df:b1:41:9d:a9:a7:b1:36:95:2a:71:0b:
ae:2d:4d:a6:fe:a6:27:48:5a:b9:bd:08:af:be:e9:
48:21:36:fc:74:70:c5:42:23:ea:f2:1a:a1:0e:c3:
a8:15:26:26:94:ed:fc:74:3d:67:d0:81:8a:7b:8c:
5e:6b:ab:88:e2:e8:49:5f:1f:cf:cf:e4:8d:a9:25:
4e:bb:39:ca:96:75:bc:44:50:45:ad:c5:3f:36:70:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:0E:99:70:6E:DF:F8:5B:FB:DE:24:68:B9:B1:00:4F:E2:EE:92
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VAwOmXBu3_hb-94kaLmxAE_i7pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ac:56:36:c4:29:a3:59:2c:49:c5:20:23:33:18:e3:ec:49:
94:5c:a7:0b:13:25:e5:75:2e:bc:cf:c9:99:28:32:a8:83:0a:
80:91:bd:64:c4:fb:89:2c:5c:73:ca:4a:e0:1a:0a:07:9d:83:
c5:de:cd:84:78:d4:74:ba:21:d3:ec:67:a9:7d:88:87:44:34:
e3:a6:91:54:96:54:a7:41:32:b2:b2:84:ef:61:90:e8:a9:ec:
35:1b:8e:6b:19:48:0a:b4:72:8a:38:58:e5:de:1a:23:e4:ae:
66:9e:93:2f:d9:d3:d0:b8:ea:62:d0:df:7f:bb:97:fa:d2:37:
a6:80:b0:12:92:2b:5d:ac:b6:8a:93:83:9a:c8:99:2d:f5:16:
26:3a:e8:c6:38:97:f8:da:d6:06:48:d8:ea:4d:89:bc:dd:0e:
da:e4:74:46:8c:e4:4c:e1:91:0b:54:65:84:cb:53:15:cd:e4:
9d:d0:d2:71:fc:70:ac:69:08:d4:2a:05:e8:51:08:76:ba:e0:
34:cf:e3:8b:be:0a:c9:6a:a1:f7:e6:6c:50:ad:22:45:28:36:
19:a7:42:cc:05:01:d4:0c:3c:06:6b:26:88:a4:92:34:83:75:
7e:ab:0f:9e:ae:b3:e3:ee:cd:a4:90:cb:f5:30:23:e4:ed:82:
39:99:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:22 2025 by rpki-client