Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/VvJo0lhVWVTAqGHGg1amh53Ljec.roa
File: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (raw, json)
Hash identifier: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=
Subject key identifier: 56:F2:68:D2:58:55:59:54:C0:A8:61:C6:83:56:A6:87:9D:CB:8D:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019420680ED426C4A6098C498F3D4E5C1E19
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/VvJo0lhVWVTAqGHGg1amh53Ljec.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202605
IP address blocks: 185.156.36.0/22 maxlen: 22
2a07:9a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0e:d4:26:c4:a6:09:8c:49:8f:3d:4e:5c:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f268d258555954c0a861c68356a6879dcb8de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:37:07:45:4f:a3:2b:4e:5c:92:9f:5b:94:
3e:d4:a6:7d:69:90:f9:92:59:d0:11:bc:d9:f4:78:
65:df:56:cb:28:fa:ae:9f:b0:51:c3:34:d1:98:78:
b8:64:68:8a:70:35:e5:3e:54:ca:85:9b:1a:a6:1b:
bf:71:94:81:32:b9:54:fa:a9:30:06:1e:37:22:ca:
23:3e:84:e4:cf:73:d0:7c:cb:84:ed:bc:c0:94:24:
9f:6f:b6:27:fc:a7:36:00:12:c1:ef:58:fa:37:95:
ec:e9:24:6b:c9:08:26:0b:f9:02:ec:f4:9f:a2:f0:
f9:8c:7e:6b:e3:c6:6d:48:9b:2d:e2:8e:fd:74:40:
89:1b:a2:3a:8f:b2:1c:1a:04:d3:25:53:b4:3f:b3:
25:a4:ca:5c:79:59:a7:b9:ce:69:5e:c6:99:2e:6e:
b0:40:d0:62:e1:bb:ba:f9:9c:63:d2:0a:0e:13:c5:
71:5f:70:53:fb:85:6a:ed:97:ee:91:60:54:83:54:
ae:f5:99:de:6f:16:8d:fe:1e:98:6d:1e:ed:58:97:
50:e9:d7:bc:fe:0f:65:81:0a:1e:d0:88:19:b2:cc:
d7:3d:15:5a:68:ce:a8:12:72:09:a4:ae:2a:15:67:
00:ef:9c:63:64:46:d3:f3:db:80:71:94:7c:bd:06:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:68:D2:58:55:59:54:C0:A8:61:C6:83:56:A6:87:9D:CB:8D:E7
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/VvJo0lhVWVTAqGHGg1amh53Ljec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.36.0/22
IPv6:
2a07:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
68:9a:a4:14:9a:09:15:67:59:93:a1:21:a3:54:a6:79:b9:54:
52:59:62:a8:bf:52:89:15:03:2b:d0:f7:b9:33:15:89:70:4b:
63:19:90:3d:ff:b5:bd:29:4b:3b:da:6a:b8:51:b5:37:e0:53:
5d:20:b3:e1:14:ba:cd:61:93:eb:a0:a3:bd:c8:67:f7:e7:3e:
44:d1:30:f8:95:c3:77:03:7b:5e:bd:96:a0:5b:5c:11:be:c4:
15:a9:01:94:b1:d2:3b:11:f2:46:78:0c:60:b0:bd:28:bc:b9:
4f:31:25:c2:c2:ea:af:bc:b2:d6:d6:11:54:17:bd:3b:28:df:
0c:8e:e8:4f:10:c0:96:15:5b:22:2a:33:ce:ee:b5:b1:2e:45:
09:1d:57:2f:a0:96:e2:ab:f8:78:27:dd:b6:3f:94:5f:5d:fb:
fb:af:b9:c1:a1:dc:75:48:71:a7:9a:92:b7:71:92:85:1b:84:
8b:34:d8:7e:0f:21:25:4a:d9:04:3d:84:6e:b3:fb:cd:45:ba:
e0:24:4f:ec:23:25:c5:cf:5e:d7:62:0a:53:ef:63:40:6f:e4:
82:71:34:15:db:e5:14:f8:3c:bc:1c:d3:c1:0a:c6:48:3a:dc:
d6:ab:04:d7:38:86:29:38:be:13:06:54:76:97:06:d0:8a:c2:
cf:c1:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:21:05 2025 by rpki-client