Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/Vuv4D49Do3ihPrgPrplFw5fVmzc.roa
File: Vuv4D49Do3ihPrgPrplFw5fVmzc.roa (raw, json)
Hash identifier: jtLLMKBGV7msWBJkQMiWYOk1XXEmcC3ekc6iXglJO4U=
Subject key identifier: 56:EB:F8:0F:8F:43:A3:78:A1:3E:B8:0F:AE:99:45:C3:97:D5:9B:37
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0196F3059FD6750B50844740EED2F527E01C
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/Vuv4D49Do3ihPrgPrplFw5fVmzc.roa
Signing time: Wed 21 May 2025 13:25:54 +0000
ROA not before: Wed 21 May 2025 13:25:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 62.146.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:05:9f:d6:75:0b:50:84:47:40:ee:d2:f5:27:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: May 21 13:25:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ebf80f8f43a378a13eb80fae9945c397d59b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:77:90:10:72:53:2a:d2:1c:3a:f4:59:57:
2c:ee:a4:ca:27:21:37:58:c6:c8:f9:06:32:6d:a8:
70:e6:10:37:38:2a:de:61:f3:fb:39:25:67:0b:46:
8b:59:a4:b3:ec:ab:5e:aa:a0:19:c3:05:4a:f6:6d:
6e:19:0e:78:9e:73:07:3d:d3:9b:c5:b4:33:88:09:
87:e6:a1:39:85:c1:cc:bb:b5:dc:3b:e8:f7:22:5e:
a8:24:0d:c1:6d:04:22:1e:ae:40:5f:f3:04:c1:f6:
11:f4:ba:45:c3:42:be:53:cd:f0:2e:0d:6b:71:df:
cb:fe:f5:84:19:56:52:be:b1:81:bf:fa:be:01:97:
a7:ec:7c:70:0c:a9:c4:fd:98:fa:3a:0d:5e:9a:d0:
6e:02:c2:49:93:1a:61:01:b6:90:32:c2:59:37:37:
92:b3:75:02:c1:98:e0:61:da:65:32:2e:29:6d:01:
52:f7:9d:5e:47:b7:d0:66:f9:00:e3:30:b3:60:e5:
4e:6b:b9:23:33:d8:0f:25:02:16:38:f0:37:e1:65:
56:2c:17:15:58:e2:8b:ab:bb:d4:2e:97:c5:62:18:
8b:8b:8a:16:24:f6:b7:4b:20:6d:60:0c:f9:87:25:
34:f8:35:9f:74:8b:32:b2:51:0d:04:a5:72:cf:2f:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:F8:0F:8F:43:A3:78:A1:3E:B8:0F:AE:99:45:C3:97:D5:9B:37
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/Vuv4D49Do3ihPrgPrplFw5fVmzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8c:de:6d:e9:eb:94:a7:40:87:2f:71:9b:5e:e0:99:37:c8:
3a:3b:85:b8:38:2b:3d:4d:4d:47:8e:2e:22:0b:01:5d:79:f9:
bb:7a:23:3a:a1:69:5b:e1:35:b6:e7:28:e1:81:e1:ea:41:b7:
74:d0:02:92:40:b7:dc:1a:50:6d:4d:f6:7a:2c:97:6e:f5:b9:
d4:86:99:c0:07:9a:a0:2b:e0:0c:af:04:2e:24:36:fa:ee:ad:
e5:0e:e0:7c:81:c6:07:c3:b5:35:9c:a3:56:a4:3a:95:d1:31:
ba:f4:a1:9c:55:5b:0b:e3:c6:1d:fa:ea:cb:5c:54:49:30:4b:
c8:2c:25:0b:ea:61:5b:24:20:f1:63:e0:36:c7:18:e4:e1:62:
e8:63:47:d5:22:c5:a4:d7:2f:ff:55:9c:99:fe:c4:81:53:08:
21:1e:79:9f:4a:a0:6c:e3:7e:e3:37:cb:c5:98:05:61:16:7a:
82:ff:f3:ec:52:a5:0a:22:61:1d:6f:13:fb:82:24:8c:04:55:
32:d2:a8:47:8b:e1:16:9e:69:b4:9f:cf:f9:ab:3a:81:6a:dc:
de:6b:d0:eb:09:76:a5:a8:1c:15:a2:08:a5:6e:63:b1:93:ec:
89:e8:91:56:47:6b:43:7f:1a:cb:c8:8b:c0:a9:e3:83:31:00:
0b:b5:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:39 2025 by rpki-client