Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VgDY9zN_B3grCrz_H8xjNykqXTQ.roa
File: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (raw, json)
Hash identifier: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=
Subject key identifier: 56:00:D8:F7:33:7F:07:78:2B:0A:BC:FF:1F:CC:63:37:29:2A:5D:34
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0194236A04DAEC7CF453C9E5BD90106A36A8
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VgDY9zN_B3grCrz_H8xjNykqXTQ.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56754
IP address blocks: 94.176.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:04:da:ec:7c:f4:53:c9:e5:bd:90:10:6a:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5600d8f7337f07782b0abcff1fcc6337292a5d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:ee:62:3b:07:d1:49:b2:99:9d:f2:48:8b:
56:b9:27:08:3e:91:28:b0:2e:76:f8:a6:0d:b8:b3:
20:ee:bd:87:b5:47:72:71:91:9e:6b:03:41:62:fb:
59:a5:f9:8f:52:68:15:98:81:af:89:fe:56:60:63:
6e:d7:06:0c:59:fb:ee:c1:92:60:17:24:6f:5b:a8:
a2:96:2d:27:ee:bf:6e:7e:62:1f:33:ab:2e:67:42:
e9:f9:3d:5b:44:6f:01:8f:1f:d1:7d:5f:20:83:19:
88:08:a2:13:d4:55:97:9d:d9:f3:8e:c3:a3:7c:14:
9a:28:1a:8e:8b:6a:1b:55:6d:ce:41:61:f7:b0:c1:
ed:38:8e:3c:60:9b:95:5f:e8:62:ff:d3:02:98:54:
7d:6a:5c:9e:bc:b7:bf:7c:5e:20:bb:0f:85:0e:5e:
44:d6:d5:a6:9e:d3:95:78:5c:48:58:e3:14:95:90:
76:d6:dc:25:6b:e3:66:08:af:69:66:f9:1b:34:d8:
38:72:ed:75:15:08:9f:ad:c0:b7:b8:c3:27:d6:11:
c3:3d:1e:ca:4c:d6:a0:45:74:c9:17:db:49:92:03:
2a:63:f5:6a:27:94:b3:14:d7:d4:3e:52:e6:f4:90:
52:f4:54:0c:e5:e8:0f:d8:bb:16:c1:ac:ae:52:e6:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:D8:F7:33:7F:07:78:2B:0A:BC:FF:1F:CC:63:37:29:2A:5D:34
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VgDY9zN_B3grCrz_H8xjNykqXTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.184.0/23
Signature Algorithm: sha256WithRSAEncryption
67:64:6f:97:83:4a:d5:6f:41:c6:aa:bc:95:a4:57:8b:79:49:
48:02:3b:1f:30:a2:1d:d2:6e:46:a7:c3:a2:b0:89:09:63:5d:
4f:f9:f6:61:59:1d:0e:aa:34:07:15:79:bf:7b:98:a2:b5:82:
dd:8d:c4:d0:c0:0f:09:f3:6c:29:3d:70:b4:a0:d5:1a:9c:a6:
77:77:d8:c8:0c:92:e4:06:4b:1a:8c:80:45:01:8f:ac:81:2b:
6d:75:ff:1c:d8:5a:73:c9:7e:c3:08:65:13:36:ad:9f:f6:bf:
84:ac:ad:ce:91:e3:36:12:6a:16:fe:a9:d8:fe:7f:8b:3e:78:
d2:11:12:f1:c7:0c:36:c7:51:88:a2:b4:9f:23:a3:ef:99:2a:
91:b1:cc:9b:d7:5e:1d:17:b7:73:d2:13:40:5c:aa:19:eb:19:
df:a9:a3:4c:24:83:66:9f:de:e0:12:7a:df:e9:b8:d8:62:49:
06:fe:05:5f:e7:39:23:14:7c:c0:65:0f:16:c4:88:08:36:ca:
14:59:dc:e7:28:8d:85:81:45:1b:48:76:9c:7e:a1:38:03:ad:
7b:ea:ee:48:ff:de:d4:77:cd:7a:e3:a7:69:ab:a8:5a:d6:ac:
29:25:9c:97:55:da:a4:88:e3:8a:09:93:3d:b4:71:55:24:c0:
67:97:9f:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagTa7Hz0U8nlvZAQajaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjUwMTAxMTk0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjAwZDhmNzMzN2YwNzc4MmIwYWJjZmYxZmNjNjMzNzI5MmE1ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/uYjsH0UmymZ3ySItWuScIPpEo
sC52+KYNuLMg7r2HtUdycZGeawNBYvtZpfmPUmgVmIGvif5WYGNu1wYMWfvuwZJg
FyRvW6iili0n7r9ufmIfM6suZ0Lp+T1bRG8Bjx/RfV8ggxmICKIT1FWXndnzjsOj
fBSaKBqOi2obVW3OQWH3sMHtOI48YJuVX+hi/9MCmFR9alyevLe/fF4guw+FDl5E
1tWmntOVeFxIWOMUlZB21twla+NmCK9pZvkbNNg4cu11FQifrcC3uMMn1hHDPR7K
TNagRXTJF9tJkgMqY/VqJ5SzFNfUPlLm9JBS9FQM5egP2LsWwayuUuaPWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYA2Pczfwd4Kwq8/x/MYzcpKl00MB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvVmdEWTl6Tl9CM2dyQ3J6X0g4eGpOeWtxWFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXrC4MA0G
CSqGSIb3DQEBCwUAA4IBAQBnZG+Xg0rVb0HGqryVpFeLeUlIAjsfMKId0m5Gp8Oi
sIkJY11P+fZhWR0OqjQHFXm/e5iitYLdjcTQwA8J82wpPXC0oNUanKZ3d9jIDJLk
BksajIBFAY+sgSttdf8c2FpzyX7DCGUTNq2f9r+ErK3OkeM2EmoW/qnY/n+LPnjS
ERLxxww2x1GIorSfI6PvmSqRscyb114dF7dz0hNAXKoZ6xnfqaNMJINmn97gEnrf
6bjYYkkG/gVf5zkjFHzAZQ8WxIgINsoUWdznKI2FgUUbSHacfqE4A6176u5I/97U
d81646dpq6ha1qwpJZyXVdqkiOOKCZM9tHFVJMBnl5+X
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:17:50 2025 by rpki-client