Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/vtVkCOLjDQSopCb33az0PmasrbI.roa
File: vtVkCOLjDQSopCb33az0PmasrbI.roa (raw, json)
Hash identifier: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=
Subject key identifier: BE:D5:64:08:E2:E3:0D:04:A8:A4:26:F7:DD:AC:F4:3E:66:AC:AD:B2
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 01941F8C374B5043058D7A5702AC7D415AE8
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/vtVkCOLjDQSopCb33az0PmasrbI.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 109.205.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:4b:50:43:05:8d:7a:57:02:ac:7d:41:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed56408e2e30d04a8a426f7ddacf43e66acadb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:d5:12:9c:ca:47:be:e3:6b:d5:a7:44:93:
0d:30:ee:6e:05:a9:be:a9:3c:c6:72:5c:7d:5c:f0:
30:e4:bf:dc:74:6a:cb:14:be:2c:8a:fb:9c:0e:93:
ca:6d:74:3e:86:77:f0:f5:0a:df:ab:fe:b2:90:21:
f6:02:30:d0:1c:bd:c0:d3:f9:8e:3e:ad:44:34:20:
68:c9:11:c9:9f:3a:3b:a6:b9:1f:50:60:60:09:7e:
67:9e:2a:d2:e1:f2:59:3e:0b:44:3b:b9:21:5a:81:
1e:3a:f4:6f:aa:98:3b:de:34:4a:c2:17:46:a3:58:
6f:a4:df:7a:38:cf:58:2e:33:6c:7e:39:94:43:09:
dd:6c:28:33:5f:21:de:14:7c:7a:70:82:50:fc:c7:
fd:d1:ba:04:ed:de:13:17:21:00:28:65:bf:09:b6:
e5:3d:f1:43:de:66:ee:d6:25:b0:68:58:e3:21:a1:
32:2d:c3:d6:53:56:c1:06:ae:3c:46:fd:87:be:94:
29:aa:0b:ad:05:2a:ea:e5:76:ac:05:61:5d:de:99:
8f:54:18:1f:30:3c:94:7f:1d:e3:91:94:3f:83:e1:
8c:de:a8:e4:7e:c9:9e:cb:1e:ba:0e:34:15:29:2e:
1c:14:e9:41:2e:25:8d:53:23:7e:0b:8a:8a:6b:29:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:64:08:E2:E3:0D:04:A8:A4:26:F7:DD:AC:F4:3E:66:AC:AD:B2
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/vtVkCOLjDQSopCb33az0PmasrbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.158.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ed:e9:64:2a:db:11:a8:d9:8e:cb:fd:f6:69:19:b1:87:d5:
a5:76:d2:6c:c1:de:41:ca:bc:aa:98:00:12:79:d6:f3:ad:01:
6c:0f:4c:bf:a8:5e:df:ef:a0:07:71:bd:2a:64:0f:3e:25:16:
35:b0:e5:65:f6:32:e8:1c:1e:e1:b1:a4:db:3f:ad:0d:74:1e:
f0:2e:d9:dd:7c:55:13:b9:43:fd:a7:cc:9f:80:4c:b0:c6:4d:
7c:b0:aa:e0:a1:c3:22:d5:ef:26:8f:22:f7:ee:c5:27:3a:ba:
2c:33:59:82:a6:0a:72:f0:98:c7:ff:bc:84:6d:3e:4f:45:ac:
a6:ce:cf:17:2f:ae:7f:6c:1f:13:08:66:a4:46:a0:62:63:fa:
24:02:6f:ae:ca:08:9b:62:2a:12:2d:52:14:5c:cd:f8:5a:6b:
91:52:14:6d:c4:da:8c:cb:de:74:ce:17:7f:b9:ba:bb:fb:6d:
67:fe:f5:91:f5:25:ac:57:e7:94:a4:05:6e:7a:d0:40:43:3a:
c5:a6:d9:fd:64:39:23:4f:f1:b9:ab:80:60:5f:35:4b:a0:0d:
35:2d:74:10:c3:33:db:a2:51:76:e3:99:9f:a9:ea:55:50:c5:
2d:cb:45:90:23:5d:13:14:b0:8c:0b:e0:8f:7e:31:f2:79:0e:
fc:6d:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:26:12 2025 by rpki-client