Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/vum5ModJUNyeXtPPKIV3l7J0g94.roa
File: vum5ModJUNyeXtPPKIV3l7J0g94.roa (raw, json)
Hash identifier: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=
Subject key identifier: BE:E9:B9:32:87:49:50:DC:9E:5E:D3:CF:28:85:77:97:B2:74:83:DE
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 01942748061EB4583439B579AF279CD781EB
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/vum5ModJUNyeXtPPKIV3l7J0g94.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31183
IP address blocks: 109.235.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:1e:b4:58:34:39:b5:79:af:27:9c:d7:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bee9b932874950dc9e5ed3cf28857797b27483de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:27:64:a3:8e:7a:ea:1b:fd:ab:0d:f8:68:
9f:e4:ef:58:de:d4:82:10:a8:58:0c:cf:65:55:3e:
1f:a0:c6:7f:af:56:d7:a1:06:5e:24:1d:22:54:29:
7e:5c:88:68:2f:f6:2c:8b:6f:03:d9:ed:40:bb:f8:
73:3c:56:4f:f6:f4:54:ca:d8:14:4b:94:21:1c:12:
e3:28:76:82:2c:f0:a4:47:72:33:68:98:59:cd:2b:
45:dd:22:b1:c9:52:f8:ad:e6:35:c9:bc:a6:ff:77:
af:62:2d:f0:0b:bd:57:5f:58:d1:63:11:85:6f:f9:
9e:4e:ee:e7:f7:e1:a9:5b:ac:6a:a8:2e:87:47:14:
b0:52:f3:df:68:eb:2a:b2:e7:4c:88:c7:38:be:41:
86:85:0a:75:74:da:c1:7a:ca:d9:90:d4:5f:6c:3f:
ce:51:81:fd:d9:9e:22:41:58:69:27:f6:db:5a:8c:
6c:54:f6:35:e9:9f:f7:2c:d2:db:4a:8e:af:31:06:
0c:4d:d9:82:b5:3d:65:67:44:c7:8d:a8:58:fa:8a:
aa:db:3f:5a:36:93:82:0c:48:3c:2b:cb:52:e3:c9:
05:62:51:2e:95:67:78:8d:00:f3:f1:8a:3e:ce:99:
54:6e:30:54:69:24:fb:9b:37:f1:b6:5f:75:d4:02:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:B9:32:87:49:50:DC:9E:5E:D3:CF:28:85:77:97:B2:74:83:DE
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/vum5ModJUNyeXtPPKIV3l7J0g94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:92:9a:59:d4:12:a8:09:6d:b7:fe:b5:5e:9e:ac:75:b8:0f:
a2:48:ce:22:a6:c3:2c:a9:ef:50:25:53:c6:a7:a5:1f:4e:28:
42:b4:df:12:ed:fc:86:07:f4:2d:bf:f0:a7:b3:fb:e4:d3:72:
9c:5b:0e:1f:4c:44:24:7d:a1:68:56:49:66:3d:37:26:2d:bb:
e5:47:45:8d:28:a3:5c:89:29:d9:cf:49:73:f2:45:b2:64:4b:
29:ba:4d:d0:33:f1:58:79:62:18:a6:ef:31:af:d3:1d:7c:87:
04:47:82:8c:30:b3:63:f1:d5:b8:35:fb:ae:e6:da:bb:4b:19:
6b:6c:5b:11:f3:61:09:0a:a9:1a:0e:8f:d3:e2:f7:2f:ac:a6:
64:de:bf:f6:26:58:37:27:15:2c:c6:47:0f:b0:ce:47:6e:c8:
60:39:40:12:99:7f:b5:03:02:29:ad:e6:c8:bb:8b:dc:c1:a7:
53:3c:0f:64:ea:22:bb:e6:53:21:dd:83:cc:00:a8:86:81:59:
73:a6:84:52:5b:88:c8:9b:22:e9:31:f6:74:88:6e:ec:a2:08:
d8:64:85:8c:0e:cf:fe:46:20:76:00:91:2a:cc:8d:9e:13:33:
71:53:bd:e7:7f:82:83:24:3e:f7:42:00:a5:00:df:c6:d1:38:
83:21:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:06 2025 by rpki-client