Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa
File: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (raw, json)
Hash identifier: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=
Subject key identifier: BD:62:80:7A:52:FF:34:1D:14:BF:74:0B:E1:E8:B2:1E:05:7C:29:61
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 0194266C1E6BF3B07943219BCDDF39851C05
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42830
IP address blocks: 91.193.160.0/22 maxlen: 22
176.105.128.0/20 maxlen: 20
185.212.164.0/22 maxlen: 22
2a0b:78c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1e:6b:f3:b0:79:43:21:9b:cd:df:39:85:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd62807a52ff341d14bf740be1e8b21e057c2961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:fe:98:78:18:76:16:30:30:a9:c2:a2:9a:
3c:5c:d6:13:68:b1:d5:93:ff:66:dc:f0:64:b3:d5:
38:60:e0:e2:0e:b9:b4:f4:b1:dd:1f:69:e8:f5:25:
23:d1:cb:c7:cf:e4:54:8d:89:a7:be:a4:18:8c:4e:
21:3b:f0:62:2c:4c:39:c5:34:0b:9f:ac:41:06:fa:
bd:41:77:d1:2c:2b:3c:5a:85:26:59:d7:79:79:d5:
0c:fd:4a:98:37:c0:92:ea:3b:fe:8c:d2:a0:08:f1:
44:df:8f:fa:e4:0d:53:26:ff:5b:3b:8a:1c:b0:b5:
6a:39:12:c6:50:ae:bd:99:d4:39:c7:1e:4a:0a:d0:
26:58:d1:69:f9:1a:8a:1b:4b:73:08:9f:9e:b1:e2:
e5:cb:91:78:26:bb:42:93:81:d3:3b:e3:88:14:3d:
46:49:0a:e8:d5:10:6f:1c:b2:dd:51:f3:f8:f3:00:
4b:5d:f7:2b:0d:40:51:73:e9:df:c7:99:23:1e:55:
38:1a:6f:25:51:87:f3:9e:09:db:86:c7:2f:f5:17:
2e:36:2f:4c:3e:0e:20:10:fd:91:3f:71:6d:8c:17:
0c:51:9f:e9:e0:4e:2d:ad:16:1b:08:c7:4f:51:93:
3f:8f:4d:6a:e5:67:ef:fa:a0:5c:8a:e7:96:1e:cd:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:80:7A:52:FF:34:1D:14:BF:74:0B:E1:E8:B2:1E:05:7C:29:61
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.160.0/22
176.105.128.0/20
185.212.164.0/22
IPv6:
2a0b:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b8:ba:e7:9a:80:48:ae:43:9b:fb:db:c4:8b:21:4f:4d:4c:
a4:3a:36:b1:d2:91:2a:d4:28:39:2f:da:10:da:1b:f8:b1:8d:
d3:b7:28:24:92:02:60:96:f1:91:9f:2a:84:89:e8:c9:57:29:
90:ab:ed:55:c7:02:c9:c5:a8:e9:88:a0:d6:96:b4:86:c3:3a:
fb:f1:a5:c8:e1:4f:e6:e9:e2:6a:46:ad:f5:ce:d0:81:38:b2:
f4:e3:1f:f8:52:1d:6e:85:ea:b9:59:d7:da:a1:13:98:90:19:
4e:1c:46:c4:ef:9a:75:5f:5b:a8:70:bd:7e:b7:5c:f9:e0:da:
24:81:09:a5:33:14:65:28:69:41:50:eb:76:4e:ff:fe:36:93:
50:9e:05:99:fb:82:be:79:8a:08:8b:60:60:e6:71:fe:b3:3e:
e6:dc:89:6e:46:a3:fc:2a:31:4e:47:3a:75:86:bf:99:ac:b3:
a2:91:ef:ab:47:89:21:75:35:87:b4:8e:d5:03:4e:0e:80:fc:
9b:c6:65:26:0e:00:05:a2:54:13:47:fc:6e:e0:ef:24:ab:1f:
60:db:8a:22:7b:3a:67:0d:9f:d2:32:66:99:04:1e:60:25:4e:
fd:f1:6b:10:38:80:6e:4d:40:dc:69:f8:61:27:d9:42:67:8a:
68:5c:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:15:05 2025 by rpki-client