Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vtwn2j1lYyBVF_dsIsNce6M08QU.roa
File: vtwn2j1lYyBVF_dsIsNce6M08QU.roa (raw, json)
Hash identifier: yFQk04afmJ1kMkeswTIKZTL619zxKn6tF1V6IqswFW8=
Subject key identifier: BE:DC:27:DA:3D:65:63:20:55:17:F7:6C:22:C3:5C:7B:A3:34:F1:05
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0194274849A07E4944951C96281A430B766E
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vtwn2j1lYyBVF_dsIsNce6M08QU.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39351
IP address blocks: 85.203.53.0/24 maxlen: 24
85.203.54.0/24 maxlen: 24
85.203.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:49:a0:7e:49:44:95:1c:96:28:1a:43:0b:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bedc27da3d6563205517f76c22c35c7ba334f105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:6b:24:84:f4:66:29:5c:8b:3a:f0:6a:61:
54:ed:fb:51:d9:e4:11:53:4b:f1:19:81:ee:40:4c:
fa:b1:40:0b:9a:11:ae:9c:1a:17:7d:fc:5c:6f:62:
24:04:74:e7:d0:4f:95:3a:59:5f:94:6e:f9:a8:7c:
ae:83:53:ec:ad:82:76:85:25:8f:ef:1d:a2:f0:45:
c3:a2:fb:0f:5b:d1:bd:53:e4:94:ba:34:a8:1c:a5:
63:80:c9:85:b3:ac:7e:a6:bc:2c:59:4b:c2:55:a7:
e5:17:28:92:d3:01:5a:3b:79:3f:65:9a:ff:ee:39:
a0:19:59:17:18:1e:21:d0:9a:88:7d:9a:f4:4a:3e:
6c:7c:2b:8f:7a:c7:00:c0:93:ad:e9:8c:d2:c5:76:
80:4f:cf:4b:43:28:e7:21:6a:83:19:c0:d3:a0:6a:
75:4b:d6:91:f1:b6:ea:7d:f4:d8:4f:9e:62:47:a0:
23:ab:7a:57:80:54:14:bb:5f:25:62:40:f4:d6:ad:
80:ed:2d:f8:6b:92:43:eb:ec:f9:10:98:d8:a3:f7:
80:2e:6c:85:4d:ba:3e:cd:88:f1:d1:34:81:6d:1d:
a1:ff:f4:f4:be:f6:33:63:71:e3:7c:dc:ba:36:cf:
ce:c7:a7:73:f6:09:ca:50:5a:5e:24:fa:6d:30:ea:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:27:DA:3D:65:63:20:55:17:F7:6C:22:C3:5C:7B:A3:34:F1:05
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/vtwn2j1lYyBVF_dsIsNce6M08QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.53.0-85.203.55.255
Signature Algorithm: sha256WithRSAEncryption
a7:e2:00:e2:95:d8:31:8c:13:3b:57:d0:ce:86:3e:1f:02:30:
d5:45:67:31:d0:45:64:5a:ef:d4:0e:a7:7d:8e:5f:7d:be:fa:
a6:31:f9:1a:1c:c6:ea:dc:82:98:2b:13:77:98:8b:73:69:44:
37:a0:c5:78:8b:bd:83:4d:71:dd:75:64:01:b1:11:60:89:bb:
b2:1f:90:71:d1:8a:5d:91:e3:cc:96:dd:94:47:95:1a:54:86:
5e:3d:c1:d2:0a:bb:c5:d0:9f:00:04:63:c9:0a:3e:ac:b7:70:
97:20:87:26:9c:e5:6d:01:8f:97:5d:e2:7e:e3:9d:b0:52:9a:
21:45:7d:a3:7b:56:64:a3:ba:7e:4d:dc:2a:65:63:70:c1:1c:
5b:f0:24:c5:25:7c:ac:21:ce:f6:06:db:51:ef:07:a5:98:5d:
76:b1:04:51:5b:a6:a0:a8:72:39:ca:2b:35:8a:6d:5d:2c:16:
cb:1c:57:81:19:cc:5b:8c:24:a7:f4:38:be:fb:3c:f8:0f:9a:
aa:0c:75:9a:c6:31:3f:0b:0f:c9:78:01:66:b0:01:6e:08:5f:
6d:d9:98:37:c4:d3:a7:98:40:23:c7:2c:14:66:d5:c4:a8:d5:
b7:f1:ba:f5:cb:ab:5f:19:79:10:3a:1c:50:31:0c:29:eb:3d:
b0:72:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:05:10 2025 by rpki-client