Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/vpimmj50rM3b693dSW6yAkLWvvA.roa
File: vpimmj50rM3b693dSW6yAkLWvvA.roa (raw, json)
Hash identifier: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=
Subject key identifier: BE:98:A6:9A:3E:74:AC:CD:DB:EB:DD:DD:49:6E:B2:02:42:D6:BE:F0
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 019425FCEED70F6EEC59F18920F3B6883155
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/vpimmj50rM3b693dSW6yAkLWvvA.roa
Signing time: Thu 02 Jan 2025 07:48:40 +0000
ROA not before: Thu 02 Jan 2025 07:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15547
IP address blocks: 185.201.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ee:d7:0f:6e:ec:59:f1:89:20:f3:b6:88:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Jan 2 07:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be98a69a3e74accddbebdddd496eb20242d6bef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:f6:73:df:77:e5:b1:d5:9a:df:42:e3:59:
26:0d:af:04:7a:be:9f:42:0f:78:ff:b2:95:71:03:
30:60:56:de:44:22:49:56:f9:bb:eb:de:31:b1:29:
b4:83:8f:1f:59:8b:13:b7:03:d2:aa:0d:2f:76:55:
30:e0:e7:89:db:01:73:1e:98:90:bf:c8:b9:1c:79:
53:40:21:a5:01:2a:78:06:9e:93:03:8b:71:a5:38:
8f:ff:a4:c1:87:55:56:a5:ae:45:0f:b3:a2:07:51:
68:b7:92:80:80:a1:d2:1c:f7:03:e5:62:6e:31:80:
47:a2:90:e0:c6:5f:c6:2e:22:42:8d:8e:64:dc:fa:
fe:31:fe:36:1f:eb:c0:9c:e1:76:a7:68:6f:05:d3:
6d:4e:51:5c:30:ae:1a:2c:56:c1:87:62:81:bf:e4:
ce:53:fa:2d:d6:80:74:54:fe:60:78:65:6b:ab:2c:
2b:30:b5:f6:d4:5f:30:6b:91:41:5a:f6:66:66:fd:
eb:ac:7a:fe:79:d8:71:62:a7:18:4e:eb:df:86:b1:
f7:e8:f8:b6:42:46:ce:17:67:5b:d1:f3:09:75:f2:
fc:f4:ed:44:cd:3f:6e:3e:80:c1:8d:60:59:57:ee:
29:31:b1:ad:9c:1d:45:18:42:0e:47:9b:a8:4d:16:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:A6:9A:3E:74:AC:CD:DB:EB:DD:DD:49:6E:B2:02:42:D6:BE:F0
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/vpimmj50rM3b693dSW6yAkLWvvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.216.0/22
Signature Algorithm: sha256WithRSAEncryption
57:78:08:27:79:0f:40:73:e7:c7:2f:78:05:46:01:43:78:c5:
39:b2:b5:10:87:22:6b:27:ac:bb:24:71:27:c9:a1:4f:bd:3f:
6c:23:44:8d:01:69:09:87:3c:ac:50:3b:0f:f4:0c:0a:92:5d:
12:f8:01:ef:81:7b:aa:c6:7e:a4:81:b4:a9:74:1f:6c:05:98:
cb:ee:c1:39:c4:ad:8e:8a:5e:f2:74:1d:a0:15:d9:29:53:49:
e9:65:82:01:45:1a:4b:f5:b9:a2:0a:91:55:52:85:b5:0b:b1:
e2:54:01:80:92:14:5f:95:82:5a:9f:25:bb:f4:a7:55:42:b5:
a2:d5:ae:33:19:5b:e1:bf:78:8f:98:82:06:21:6a:88:90:4f:
4a:8b:1f:00:3c:cb:3c:9f:0e:fd:14:87:c5:e8:e9:24:74:95:
c0:e5:3d:79:6e:96:06:21:96:f2:f4:48:70:de:18:8b:2d:d2:
3e:74:2c:68:40:70:83:4e:ab:5c:6f:7a:e7:8f:68:3a:4f:fa:
a2:02:53:a0:23:f5:d2:2b:79:0d:49:b9:10:cc:cc:42:58:4a:
ac:3e:6f:65:7d:a7:5a:34:6a:85:a8:3b:f6:72:e9:a4:45:5c:
03:6a:98:28:2f:93:15:24:fe:33:95:fa:97:34:3c:4e:a0:b3:
21:1d:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:14 2025 by rpki-client