Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa
File: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (raw, json)
Hash identifier: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=
Subject key identifier: BE:91:EF:26:38:E0:C3:83:B7:47:3F:2B:D9:91:6B:DB:93:8C:B9:E9
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01958962846A28AA20D3F1129F3A8F29332A
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa
Signing time: Wed 12 Mar 2025 08:04:49 +0000
ROA not before: Wed 12 Mar 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:62:84:6a:28:aa:20:d3:f1:12:9f:3a:8f:29:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Mar 12 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be91ef2638e0c383b7473f2bd9916bdb938cb9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:47:96:26:1e:70:b0:02:57:1d:eb:89:91:
38:87:97:d4:46:bd:97:43:0d:43:b0:15:01:e1:14:
89:df:dc:07:18:72:ef:80:19:b3:17:8f:e7:24:1b:
02:2f:22:08:ff:98:d2:21:71:a1:ef:b9:07:5e:22:
ef:bf:62:24:6f:1f:a4:ce:bc:00:65:54:32:63:eb:
ce:ed:0b:8b:bd:a4:8b:4f:00:7c:69:9c:65:96:b2:
9d:c0:f2:a4:70:bd:ca:80:cd:ab:6f:7a:65:50:dc:
a6:5e:96:a4:a8:21:40:d9:4c:c1:03:53:cb:96:f8:
c6:06:fa:09:5d:07:1c:3c:1f:4d:47:22:d2:76:20:
55:1c:ca:7f:aa:d2:4f:0b:ea:5b:7b:80:57:d4:0a:
f8:36:fd:e2:fd:9b:29:a0:da:6d:e7:0d:bd:35:4a:
ac:0a:71:9c:4b:f3:24:a6:3a:85:df:d8:ae:85:af:
8b:bd:31:59:92:20:7f:80:f0:fd:53:fb:3f:9b:6d:
34:1b:01:ec:36:73:b7:d0:22:68:95:16:25:e7:f6:
31:de:f7:1e:82:68:36:db:76:0a:cf:c2:83:34:31:
9f:e7:a5:12:ae:2a:e8:dc:02:74:6a:7f:18:76:86:
45:e9:79:44:3d:af:a4:9a:aa:70:7d:7e:9b:13:9b:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:EF:26:38:E0:C3:83:B7:47:3F:2B:D9:91:6B:DB:93:8C:B9:E9
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:85:ac:b5:18:d7:6f:9a:57:c4:e5:20:d2:aa:12:61:22:14:
96:a6:8c:06:73:16:1d:dd:e6:21:7d:44:ad:91:2d:bc:81:b8:
03:9b:cb:bb:d4:30:07:1c:5c:94:00:37:1a:93:b4:ac:13:d1:
77:49:ef:9d:6f:80:8c:62:3a:8f:75:ad:25:52:e0:3f:b2:17:
58:5c:d8:a8:a7:73:24:40:6d:eb:32:88:70:68:ea:cb:4f:24:
68:19:3b:88:0e:dd:af:db:35:71:73:46:7d:df:43:f8:09:f2:
8e:84:7d:91:6a:46:58:7a:53:0f:6c:06:94:46:7f:fd:ff:3e:
d9:d8:e9:51:55:4d:ba:aa:39:c9:a8:b9:a4:c4:96:b0:d7:c1:
b2:ce:5b:6b:81:8f:10:cc:9f:65:22:3c:ea:18:ab:33:be:a4:
b8:65:61:28:40:2a:22:0a:41:f5:26:20:58:80:db:ba:99:2b:
42:2c:94:94:a3:54:c9:f2:74:a8:5c:c9:78:0d:05:d3:38:a5:
f6:d4:f2:67:37:6d:d5:9c:07:64:9b:79:ba:46:7d:d7:de:36:
85:8c:0c:be:e8:38:92:41:80:39:60:71:e6:95:41:8e:ea:2b:
d9:64:7f:0e:cc:12:39:1c:a1:18:57:b5:df:0e:5c:75:f4:16:
13:f0:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:42 2025 by rpki-client