Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_vcj5hH5PQmqE-mf4-B7kcWGpfg.roa
File: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (raw, json)
Hash identifier: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=
Subject key identifier: FE:F7:23:E6:11:F9:3D:09:AA:13:E9:9F:E3:E0:7B:91:C5:86:A5:F8
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0195C8225C66D58357BB48E620901CFC969B
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_vcj5hH5PQmqE-mf4-B7kcWGpfg.roa
Signing time: Mon 24 Mar 2025 12:30:49 +0000
ROA not before: Mon 24 Mar 2025 12:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 158.46.128.0/18 maxlen: 24
158.46.132.0/22 maxlen: 22
158.46.136.0/21 maxlen: 21
158.46.144.0/20 maxlen: 24
158.46.148.0/24 maxlen: 24
158.46.152.0/24 maxlen: 24
158.46.156.0/24 maxlen: 24
158.46.158.0/24 maxlen: 24
158.46.160.0/23 maxlen: 23
158.46.164.0/22 maxlen: 22
158.46.168.0/21 maxlen: 21
158.46.184.0/23 maxlen: 23
158.46.186.0/23 maxlen: 23
158.46.188.0/22 maxlen: 24
158.46.192.0/19 maxlen: 24
158.46.204.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.207.0/24 maxlen: 24
158.46.250.0/23 maxlen: 24
178.171.0.0/17 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.36.0/23 maxlen: 23
178.171.86.0/24 maxlen: 24
178.171.103.0/24 maxlen: 24
178.171.105.0/24 maxlen: 24
178.171.106.0/23 maxlen: 23
178.171.108.0/23 maxlen: 23
178.171.112.0/23 maxlen: 23
178.171.114.0/23 maxlen: 23
178.171.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:22:5c:66:d5:83:57:bb:48:e6:20:90:1c:fc:96:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 24 12:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef723e611f93d09aa13e99fe3e07b91c586a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e2:c5:b3:ee:31:34:e3:46:74:15:42:95:fb:
e1:58:0e:48:50:e7:b1:dd:95:5c:5b:1d:ef:7b:99:
54:9a:8b:47:e8:b1:30:61:a5:e3:43:e4:93:5f:6f:
db:ba:26:37:09:31:62:8b:ed:08:41:61:ab:c2:d9:
bd:e5:09:bc:6f:63:a7:b5:16:3c:64:d0:22:7f:2d:
f8:4d:b4:50:db:2c:f2:45:1c:99:4c:e9:5c:8c:1a:
14:33:a9:0e:76:dd:6c:67:08:c1:12:35:0f:ca:a6:
76:65:c8:56:a3:1d:68:bf:2f:c5:bc:3b:84:2a:65:
64:63:52:0b:18:d6:31:07:d5:e9:25:39:02:10:b0:
42:d6:18:f9:32:b3:86:f3:cf:17:64:ec:88:b3:2b:
ba:45:c7:13:07:f7:4e:09:49:de:51:0d:36:3f:70:
34:bd:7f:2b:1c:d9:90:b3:53:88:26:bc:30:d5:3c:
1d:55:88:eb:eb:b4:c1:db:cf:76:0e:70:ad:89:c6:
b7:a1:57:93:a1:b0:dc:ed:cf:36:59:12:22:e5:94:
4e:d9:2d:97:8d:9e:62:35:00:fc:25:a8:71:27:57:
9f:81:f9:fb:70:11:b2:f7:11:14:24:23:c3:c5:4a:
93:0c:e5:4f:22:a8:6e:6d:78:e8:90:76:ba:a6:44:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:23:E6:11:F9:3D:09:AA:13:E9:9F:E3:E0:7B:91:C5:86:A5:F8
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_vcj5hH5PQmqE-mf4-B7kcWGpfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.128.0-158.46.223.255
158.46.250.0/23
178.171.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:ef:ef:2d:46:e6:c3:ee:d5:45:86:6e:89:07:4b:bc:25:76:
dd:50:ae:bc:5c:2c:be:71:4d:1f:31:73:d1:40:ad:61:90:d4:
89:0b:ba:df:42:27:f2:1b:13:b4:ed:c9:4f:e8:4d:99:47:dc:
5a:92:6b:25:ba:1a:ec:64:80:17:45:0c:62:d3:8f:32:5c:c7:
0c:a6:d2:3f:78:6b:0c:f9:c0:59:fc:2c:b9:bf:85:52:ef:77:
af:3d:49:40:bb:97:de:b1:37:b4:c8:94:75:90:df:ca:c7:d2:
e8:6f:8e:92:56:61:59:a2:1f:3f:4b:64:8c:e4:a3:a2:aa:8c:
91:04:45:fb:58:1e:be:81:bb:2b:b1:b6:69:2a:01:6d:b8:00:
28:53:3c:a1:1e:15:89:89:f6:0f:e7:03:a4:08:b0:c6:ea:5e:
24:87:d4:fa:3d:9d:a9:a6:bc:92:86:a3:52:18:1d:9a:47:87:
71:e5:7c:3b:be:f4:dc:66:34:5c:16:df:c9:91:50:e5:ee:43:
9e:ae:8d:f4:f8:42:38:4a:71:60:c1:27:88:08:6c:b2:a2:80:
7a:94:e5:c3:e4:fa:e4:6a:d4:d7:24:e0:1c:cf:5c:ec:24:11:
fa:27:2b:ab:65:37:7e:0e:4f:f3:29:63:18:09:77:2b:e6:02:
42:df:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:51 2025 by rpki-client