Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VycPS26qUqObmZvpfvm-yvOyLmc.roa
File: VycPS26qUqObmZvpfvm-yvOyLmc.roa (raw, json)
Hash identifier: O9YWqWZT8AghprUewjQYi6jD6ISQ/6RR3DsVj16H20Q=
Subject key identifier: 57:27:0F:4B:6E:AA:52:A3:9B:99:9B:E9:7E:F9:BE:CA:F3:B2:2E:67
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C05BAD47138B2E26AC5592F2D3A1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VycPS26qUqObmZvpfvm-yvOyLmc.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47193
IP address blocks: 109.248.64.0/19 maxlen: 20
109.248.112.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c0:5b:ad:47:13:8b:2e:26:ac:55:92:f2:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57270f4b6eaa52a39b999be97ef9becaf3b22e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:0d:7f:cb:c1:da:d5:7f:1c:6a:56:a3:d4:
73:45:1b:48:e0:e6:9f:55:6a:ee:47:c1:0e:61:02:
b0:3d:16:cc:bc:6c:ec:85:62:5a:a9:78:dd:93:47:
f4:04:89:61:8f:28:a8:64:cd:e8:b1:90:68:e5:ae:
41:54:c3:bd:69:6b:a5:85:11:bc:a3:72:30:7e:93:
f5:cf:2c:3e:ab:45:82:66:a3:c9:34:18:5b:85:40:
99:cd:e1:fb:d1:6c:0a:3c:81:83:4f:21:6a:f2:d9:
ab:93:ca:20:f9:d3:bd:90:f3:7d:c7:41:0b:84:5d:
eb:67:49:f7:f7:a4:58:bf:1d:66:61:16:f2:ff:a0:
a3:b6:17:8b:65:56:43:b8:81:67:eb:df:bb:1a:f0:
e2:ae:45:ad:3b:bd:39:06:65:f5:31:a4:72:72:dd:
34:81:0d:03:c8:23:04:a2:9a:40:43:e5:23:65:08:
5b:d0:91:4e:2a:b0:58:88:bf:ff:8c:a1:aa:8e:64:
fb:3e:70:4a:25:00:1d:d3:a3:ca:0f:e6:a9:f8:b5:
ba:bb:70:2a:b4:b5:0c:11:66:93:d7:95:96:96:1d:
ea:f6:ad:a7:87:d3:23:7f:e3:e4:f9:8d:15:75:9b:
7d:fd:87:93:d7:63:a5:6a:c6:5c:69:34:73:57:d3:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:0F:4B:6E:AA:52:A3:9B:99:9B:E9:7E:F9:BE:CA:F3:B2:2E:67
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VycPS26qUqObmZvpfvm-yvOyLmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.64.0/19
109.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
58:34:5c:7b:42:00:da:40:fa:8d:29:84:85:48:03:bf:94:bd:
80:0d:e2:dc:b4:f8:55:54:dc:8c:bb:d6:cd:ee:73:aa:25:50:
b5:93:06:78:e4:43:10:d3:b1:d5:d9:12:49:51:a6:f9:f3:d3:
f3:af:82:97:a8:5d:2f:5c:c6:c1:11:d1:07:64:cf:b0:81:33:
b5:54:8b:ec:68:a4:01:41:80:7b:83:d9:98:1a:25:43:42:88:
ba:b1:78:59:b0:3b:f8:e7:e4:e1:8d:70:51:e6:ea:72:0a:48:
42:67:bb:ca:ac:12:78:41:94:93:6f:7d:02:54:07:66:bb:f7:
c1:17:ca:ab:29:d1:5f:41:01:78:6b:98:c3:55:10:7b:01:58:
ba:91:a5:ca:ca:54:ed:f7:ad:dd:ad:24:d6:36:76:53:08:41:
90:ea:78:2d:87:26:e0:96:b0:b3:9e:91:ef:d0:1a:ac:54:9f:
cc:69:dd:c5:66:e9:d5:74:04:68:60:a7:73:a0:e5:51:55:47:
b6:94:5f:97:76:c5:ab:b0:14:9c:f0:87:ae:4b:67:55:20:a5:
b7:a7:42:cb:e9:83:6d:ae:01:25:9c:e4:0c:7e:7f:1d:30:72:
ae:58:15:de:6d:74:35:ac:0d:52:b1:5b:a2:c7:fc:86:57:ba:
0e:19:30:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR8BbrUcTiy4mrFWS8tOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzI3MGY0YjZlYWE1MmEzOWI5OTliZTk3ZWY5YmVjYWYzYjIyZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHUNf8vB2tV/HGpWo9RzRRtI4Oaf
VWruR8EOYQKwPRbMvGzshWJaqXjdk0f0BIlhjyioZM3osZBo5a5BVMO9aWulhRG8
o3IwfpP1zyw+q0WCZqPJNBhbhUCZzeH70WwKPIGDTyFq8tmrk8og+dO9kPN9x0EL
hF3rZ0n396RYvx1mYRby/6CjtheLZVZDuIFn69+7GvDirkWtO705BmX1MaRyct00
gQ0DyCMEoppAQ+UjZQhb0JFOKrBYiL//jKGqjmT7PnBKJQAd06PKD+ap+LW6u3Aq
tLUMEWaT15WWlh3q9q2nh9Mjf+Pk+Y0VdZt9/YeT12OlasZcaTRzV9MPBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFcnD0tuqlKjm5mb6X75vsrzsi5nMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVnljUFMyNnFVcU9ibVp2cGZ2bS15dk95TG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFbfhAAwQE
bfhwMA0GCSqGSIb3DQEBCwUAA4IBAQBYNFx7QgDaQPqNKYSFSAO/lL2ADeLctPhV
VNyMu9bN7nOqJVC1kwZ45EMQ07HV2RJJUab589Pzr4KXqF0vXMbBEdEHZM+wgTO1
VIvsaKQBQYB7g9mYGiVDQoi6sXhZsDv45+ThjXBR5upyCkhCZ7vKrBJ4QZSTb30C
VAdmu/fBF8qrKdFfQQF4a5jDVRB7AVi6kaXKylTt963drSTWNnZTCEGQ6ngthybg
lrCznpHv0BqsVJ/Mad3FZunVdARoYKdzoOVRVUe2lF+XdsWrsBSc8IeuS2dVIKW3
p0LL6YNtrgElnOQMfn8dMHKuWBXebXQ1rA1SsVuix/yGV7oOGTD/
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:37 2025 by rpki-client