Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmX90fMTCgDEM7SReaYtKyUumJ4.roa
File: VmX90fMTCgDEM7SReaYtKyUumJ4.roa (raw, json)
Hash identifier: yXd1QjAMTk/ikuxbWCkZuVBMRmWiAX1z8MwgZUXVqQk=
Subject key identifier: 56:65:FD:D1:F3:13:0A:00:C4:33:B4:91:79:A6:2D:2B:25:2E:98:9E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8947DA830EA38E813E54BFF15D74
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmX90fMTCgDEM7SReaYtKyUumJ4.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8381
IP address blocks: 95.46.2.0/23 maxlen: 24
95.46.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:89:47:da:83:0e:a3:8e:81:3e:54:bf:f1:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5665fdd1f3130a00c433b49179a62d2b252e989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:69:71:96:54:10:5e:eb:20:ff:10:89:64:
68:57:1e:1b:a0:12:82:76:aa:d8:c7:41:cd:75:ac:
e6:ed:33:7a:24:6d:39:26:14:c7:f1:85:b5:61:d0:
a2:43:40:39:fd:5b:d0:62:1a:3b:a6:cb:14:81:1c:
ff:79:02:b9:68:31:8e:30:65:be:7b:7c:1d:fc:41:
3c:90:20:1e:f3:66:c9:a4:c7:af:3c:5c:c3:cb:df:
aa:2b:9c:4d:a7:41:b9:f9:47:f5:a1:49:e5:e5:49:
64:fc:f0:41:e3:22:53:d7:6c:1b:1e:ef:02:73:d5:
a6:cf:62:b3:55:b6:d4:d8:1f:0d:2d:ab:61:55:18:
fe:11:97:c3:11:90:67:11:cb:b5:3e:04:5c:4c:11:
66:e1:16:d2:f4:0f:2a:2a:b0:80:77:68:57:63:76:
5f:c9:41:3a:3c:44:1d:0d:42:fb:76:9a:1e:30:1f:
f3:82:4e:92:3b:0e:83:1d:81:60:92:c9:c1:57:07:
e1:6a:40:b5:46:12:a4:55:4a:3c:be:84:71:04:17:
29:e1:ff:83:f1:29:99:e8:d9:2f:89:c6:a1:a9:21:
7d:10:18:8e:90:39:bc:af:eb:cb:0d:8c:a0:bb:16:
53:b0:5c:34:2d:67:4f:05:4e:73:9c:2d:9f:aa:4c:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:65:FD:D1:F3:13:0A:00:C4:33:B4:91:79:A6:2D:2B:25:2E:98:9E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmX90fMTCgDEM7SReaYtKyUumJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.2.0/23
95.46.122.0/23
Signature Algorithm: sha256WithRSAEncryption
79:50:40:15:85:2f:94:32:45:70:c1:e9:91:f4:4a:06:98:16:
1d:34:54:6d:e4:39:88:fa:ef:e8:2b:12:5b:ec:03:f1:1b:69:
fd:7c:d1:7c:35:07:8f:96:99:b4:3a:af:f3:56:42:75:2b:44:
ef:0b:1e:66:20:aa:e4:23:b4:c1:ae:08:6e:3b:ab:f8:a8:b8:
af:c1:77:fa:38:bd:9e:79:b4:b5:14:d5:7c:6a:15:bc:6a:63:
4f:8e:08:d5:ac:ed:fc:ab:15:3b:f2:49:e1:0c:f8:4b:93:52:
0e:bd:a8:df:89:5c:cf:b2:8e:f3:28:d6:28:73:5b:de:0f:a0:
7b:95:57:96:75:7b:6c:42:5f:73:a8:38:66:48:2a:c2:5b:47:
d2:d8:d9:f0:2d:30:db:93:74:12:1b:3d:ea:b7:18:db:4a:56:
b2:b4:48:ed:6a:af:df:7a:15:58:c3:de:ba:a3:71:b5:6b:4d:
a6:a8:23:1f:f0:fb:5d:40:9e:a2:0e:86:f6:a8:05:32:4b:7c:
76:cb:dd:c7:5c:61:ce:11:22:af:af:e5:f7:14:f1:75:1c:3f:
dd:d5:b3:b5:52:3a:64:a5:b1:ee:6d:20:03:c4:d9:9f:5f:30:
02:97:4b:3f:18:c5:0b:46:5a:7d:38:10:03:7a:cb:d4:2e:12:
eb:c5:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:11 2025 by rpki-client