Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa
File: VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa (raw, json)
Hash identifier: 3XlfyZJkOhAphIjfT5R1eRXgrv3AJ140+2q4XOEf3nY=
Subject key identifier: 56:48:C2:E9:95:D4:21:9C:E3:F2:DB:CB:E8:AE:CC:85:C2:42:91:06
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 019420682047C8C323E88624FD2C72F8E48F
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12649
IP address blocks: 194.191.108.0/24 maxlen: 24
195.48.70.0/24 maxlen: 24
195.49.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:20:47:c8:c3:23:e8:86:24:fd:2c:72:f8:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5648c2e995d4219ce3f2dbcbe8aecc85c2429106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:cc:4f:e9:d1:7d:fa:b5:67:c6:35:bf:48:
a5:1d:1c:0d:93:8a:24:93:72:16:9d:54:02:85:0a:
a5:6d:0d:7f:8b:77:ae:32:9f:4c:3f:8e:2f:26:31:
4b:e0:92:43:40:ab:dc:30:a4:00:64:68:9b:b0:62:
7f:cf:88:5e:0a:27:33:b5:b3:59:c6:15:31:4a:f0:
43:83:10:c3:e2:83:09:98:3b:97:62:d3:c2:a2:4b:
25:17:5a:05:19:3a:25:48:57:ee:00:6d:d8:f0:86:
b4:8e:d5:1f:cb:d8:c9:e6:b0:59:16:bb:d4:34:89:
21:9b:4a:71:c7:8b:27:a0:ac:01:e8:02:4b:1c:4d:
5b:56:c2:a5:ef:d8:09:ae:5c:d3:6a:39:f9:bb:c1:
6c:5f:29:11:99:bf:77:f1:71:25:b8:87:ea:ee:02:
86:d4:c1:34:23:1c:00:52:04:b9:5c:ba:d9:94:81:
86:c7:ef:68:2e:70:b6:d5:c3:51:4e:8f:49:ae:bc:
70:2c:17:bc:50:88:03:8d:04:30:61:ae:02:00:43:
e1:4c:a6:24:ff:b0:0c:6d:c3:f0:14:54:44:c2:ea:
30:17:c0:bc:7f:d6:fe:70:58:80:78:e7:33:a2:2b:
f1:3c:cd:12:2d:0e:91:b8:b2:5b:cd:66:c7:6f:62:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:C2:E9:95:D4:21:9C:E3:F2:DB:CB:E8:AE:CC:85:C2:42:91:06
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.191.108.0/24
195.48.70.0/24
195.49.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:30:b8:e5:67:ef:2d:2d:6c:1e:81:38:7b:96:cd:93:e0:cf:
62:95:d4:e7:2e:20:d3:3a:1e:96:29:4a:d1:bc:20:6f:72:6d:
82:3a:1f:04:bf:8f:7c:03:bc:4a:7e:9b:84:10:c3:33:08:2c:
bc:c6:0b:da:86:d9:11:bd:c0:2c:01:d4:eb:20:0c:6a:ae:1e:
4e:74:d4:93:9c:a0:e9:c5:af:a9:63:76:e8:97:a0:5e:b9:09:
d2:47:0b:0a:db:51:69:ac:23:41:a1:0d:43:41:35:4f:11:72:
bd:19:2e:e9:62:40:e4:80:a1:d7:08:39:a9:bb:65:d6:45:39:
ba:f1:7c:45:ec:3f:28:1c:17:d6:62:35:b7:16:bc:2f:6d:aa:
61:94:72:8d:c2:40:09:92:f4:51:2a:f2:21:a7:8f:bf:10:33:
03:69:57:f1:53:0b:75:16:6b:3b:89:dc:ef:7b:1c:ee:bb:1c:
ec:98:45:9c:da:f0:1a:92:67:26:ac:69:14:c3:a4:d2:b5:ad:
04:df:28:85:fe:3c:39:c7:60:67:18:96:00:70:c5:04:d9:aa:
ae:15:b0:3f:32:8b:42:82:09:78:f7:6f:5e:7c:64:ea:03:d7:
2e:54:88:a5:2d:81:47:6f:91:d2:62:87:ef:a6:37:24:f2:f3:
52:9a:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:23 2025 by rpki-client