Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa
File: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (raw, json)
Hash identifier: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=
Subject key identifier: 55:BA:7F:2F:68:5D:17:14:DD:7F:37:4A:2D:25:FF:CD:B2:E5:FE:69
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019427479E1CDD17B7721FA2E6AF429487D2
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 2.182.160.0/20 maxlen: 20
2.183.128.0/20 maxlen: 20
2.183.136.0/23 maxlen: 23
2.183.184.0/21 maxlen: 21
2.183.202.0/23 maxlen: 23
2.188.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9e:1c:dd:17:b7:72:1f:a2:e6:af:42:94:87:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55ba7f2f685d1714dd7f374a2d25ffcdb2e5fe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:dc:80:82:0b:2d:6b:27:47:e4:cc:21:35:
c0:be:65:2a:e9:43:fb:02:02:58:79:86:9c:43:f2:
4a:29:91:5f:8f:ef:4a:8b:91:32:8a:ca:2e:e8:cf:
a6:88:3f:ef:14:82:35:df:96:88:06:bb:1b:6e:cf:
e1:b2:c2:06:18:3b:25:eb:1f:0b:cf:f4:03:f6:c4:
ec:2c:3d:43:0a:e4:a8:5a:1f:9e:97:83:6d:be:fc:
eb:7e:71:66:14:88:19:d3:f7:3e:d9:ad:09:fa:b9:
5c:7d:57:51:31:d8:8a:38:41:9b:82:ae:d9:fc:ab:
a9:25:ca:5d:e9:dc:34:2e:e5:66:2e:69:35:b8:c3:
22:09:63:59:cc:b7:98:84:a1:81:0c:28:99:08:6d:
01:4c:3b:f3:29:50:48:42:9e:8d:7d:83:a4:ca:6b:
0a:3c:84:ab:5c:5b:84:23:14:6f:9c:bb:06:06:dd:
52:33:be:f5:02:7d:54:87:da:7e:9c:c8:d1:51:c3:
0f:d7:63:6c:e6:a8:9c:87:4a:72:90:74:07:89:e0:
ce:7d:60:4e:02:5a:27:d3:e1:0c:46:e5:22:00:f3:
90:32:95:02:dd:7b:74:43:3e:da:b1:f8:ac:04:7f:
03:90:e2:f6:57:87:0f:ab:a3:1d:6c:88:00:57:8c:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:7F:2F:68:5D:17:14:DD:7F:37:4A:2D:25:FF:CD:B2:E5:FE:69
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.182.160.0/20
2.183.128.0/20
2.183.184.0/21
2.183.202.0/23
2.188.32.0/21
Signature Algorithm: sha256WithRSAEncryption
02:78:21:2c:17:3e:9b:ff:39:37:9a:83:5e:17:91:40:ed:5c:
84:82:5e:d6:31:93:c6:58:c6:31:1b:8f:4a:84:4a:b9:a2:a4:
0b:20:98:eb:91:a9:1b:ca:15:4c:d2:0a:8d:60:6b:fb:ff:16:
60:a6:36:8f:bb:49:06:60:40:ae:bd:a5:44:66:02:4a:cf:a0:
26:1e:e9:d7:f8:87:af:17:5f:0f:bf:83:c5:54:56:6c:79:bf:
b7:be:9d:7d:29:52:08:4e:0a:69:ac:10:c0:a8:d0:cd:3e:b0:
2c:8a:ce:31:2f:79:4a:25:e8:c1:47:3c:9e:20:7e:dd:6d:47:
7a:1f:0e:fe:c3:00:5e:72:b6:e7:86:67:af:bd:9f:40:fe:79:
c0:66:f3:f9:da:28:f8:b1:22:9a:e8:20:8a:b9:17:5f:8d:92:
d8:60:c5:3a:c8:e2:d2:c4:de:fb:76:16:b7:01:05:5e:c0:71:
7e:ea:73:8f:bc:32:80:5c:1f:ee:91:ab:d9:7c:1c:f0:d0:99:
64:ca:57:78:4b:06:0a:6d:10:96:a5:ea:9e:76:f8:e9:74:7e:
9a:4b:a0:ae:f9:43:63:6b:a8:ff:6f:64:5e:58:6c:25:5c:fc:
4a:a6:e1:85:99:cf:8b:b9:d5:2e:00:5d:12:c3:38:78:25:9c:
9a:7b:6e:27
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQnR54c3Re3ch+i5q9ClIfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjUwMTAyMTM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWJhN2YyZjY4NWQxNzE0ZGQ3ZjM3NGEyZDI1ZmZjZGIyZTVmZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEfcgIILLWsnR+TMITXAvmUq6UP7
AgJYeYacQ/JKKZFfj+9Ki5Eyisou6M+miD/vFII135aIBrsbbs/hssIGGDsl6x8L
z/QD9sTsLD1DCuSoWh+el4NtvvzrfnFmFIgZ0/c+2a0J+rlcfVdRMdiKOEGbgq7Z
/KupJcpd6dw0LuVmLmk1uMMiCWNZzLeYhKGBDCiZCG0BTDvzKVBIQp6NfYOkymsK
PISrXFuEIxRvnLsGBt1SM771An1Uh9p+nMjRUcMP12Ns5qich0pykHQHieDOfWBO
Alon0+EMRuUiAPOQMpUC3Xt0Qz7asfisBH8DkOL2V4cPq6MdbIgAV4wd5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFW6fy9oXRcU3X83Si0l/82y5f5pMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvVmJwX0wyaGRGeFRkZnpkS0xTWF96YkxsX21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEAragAwQE
AreAAwQDAre4AwQBArfKAwQDArwgMA0GCSqGSIb3DQEBCwUAA4IBAQACeCEsFz6b
/zk3moNeF5FA7VyEgl7WMZPGWMYxG49KhEq5oqQLIJjrkakbyhVM0gqNYGv7/xZg
pjaPu0kGYECuvaVEZgJKz6AmHunX+IevF18Pv4PFVFZseb+3vp19KVIITgpprBDA
qNDNPrAsis4xL3lKJejBRzyeIH7dbUd6Hw7+wwBecrbnhmevvZ9A/nnAZvP52ij4
sSKa6CCKuRdfjZLYYMU6yOLSxN77dha3AQVewHF+6nOPvDKAXB/ukavZfBzw0Jlk
yld4SwYKbRCWpeqedvjpdH6aS6Cu+UNja6j/b2ReWGwlXPxKpuGFmc+LudUuAF0S
wzh4JZyae24n
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:20 2025 by rpki-client