Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/VJKr8K21Xfen5uk1xCfGFVJrqNs.roa
File: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (raw, json)
Hash identifier: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=
Subject key identifier: 54:92:AB:F0:AD:B5:5D:F7:A7:E6:E9:35:C4:27:C6:15:52:6B:A8:DB
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A3D02CB3FBC0718EB67DCEA04B1E5
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/VJKr8K21Xfen5uk1xCfGFVJrqNs.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209271
IP address blocks: 89.111.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:02:cb:3f:bc:07:18:eb:67:dc:ea:04:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5492abf0adb55df7a7e6e935c427c615526ba8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:b2:a9:54:74:27:d2:d2:6f:14:ea:a9:10:
a8:25:38:b5:91:5c:d1:5f:e6:57:d6:5c:70:10:a6:
dd:8b:c5:db:67:b6:41:42:5f:ef:25:a9:39:af:00:
76:c1:d7:66:77:7c:9d:8c:5a:92:3d:1c:5c:32:f7:
4e:73:9c:61:7b:1c:9d:a9:65:b5:c8:f2:0f:cc:6f:
d1:e9:a9:aa:89:ca:da:b3:c9:e8:bb:82:91:b8:c4:
c8:2d:18:2e:c7:57:2f:ea:22:a8:59:0a:22:e1:3c:
e6:49:00:35:42:bc:9c:df:2b:c8:a5:d5:d1:df:20:
32:4b:09:a2:3c:76:dc:07:ce:a3:70:35:61:08:86:
f3:96:3a:57:42:90:8d:01:a2:04:30:72:a2:8e:05:
b5:9a:c9:c2:45:22:0d:79:a8:13:ca:dd:6a:2c:f0:
83:55:7e:39:44:75:07:ee:93:71:a9:09:87:a0:b2:
b7:10:38:3c:8d:a2:5a:8c:01:c8:ee:2c:07:27:39:
42:38:84:15:cc:cf:43:52:b7:a1:6b:b9:f9:2b:ae:
88:cf:46:a5:f7:bb:96:46:b2:89:ff:93:bc:8a:23:
df:36:8d:bd:e9:c8:2e:83:3d:5a:f2:d2:7e:ff:b4:
9c:f4:d6:3b:52:3c:f4:50:3e:b2:fe:88:87:d8:96:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:AB:F0:AD:B5:5D:F7:A7:E6:E9:35:C4:27:C6:15:52:6B:A8:DB
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/VJKr8K21Xfen5uk1xCfGFVJrqNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:81:9c:a4:91:d3:3c:07:62:d5:d1:4b:5f:84:e7:9f:8b:40:
fc:c3:e7:f0:55:ee:d6:f2:ba:94:63:be:5c:bb:53:5a:50:38:
dc:5b:54:4f:b3:c2:e0:5a:7b:76:ce:13:cb:e1:1f:cb:47:a4:
b4:41:c8:20:8b:fd:4f:f7:e5:7e:4d:8a:84:1a:9e:4e:ad:e3:
d6:1d:e9:b5:ce:06:bc:09:86:6d:79:eb:26:81:04:31:7f:82:
51:fc:88:7a:05:03:8e:b4:96:69:01:a4:6d:c5:a2:b6:d3:0e:
1e:6e:d2:f7:f8:91:ec:6f:b3:a6:2a:67:f0:00:52:22:79:80:
ab:8a:db:d7:77:c9:ac:06:d0:62:48:03:c9:dd:9f:fe:34:18:
bd:50:39:f4:04:fe:6d:40:10:1c:eb:99:13:d6:d2:f5:1b:21:
37:45:eb:09:8e:c9:d6:1e:8d:bc:47:22:8a:d4:7a:be:e9:95:
70:6f:25:25:4e:c8:51:49:42:37:c5:c7:af:a7:42:56:e1:e2:
eb:6d:37:d8:d7:23:d9:ca:05:67:e0:bd:ae:e2:c1:f5:ee:2f:
8d:e1:23:4c:41:54:38:d3:a5:18:bc:63:ab:88:b0:60:e0:60:
ac:38:ac:2e:68:66:91:96:94:9d:b6:b2:8e:f0:a6:7a:ea:4c:
a6:01:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:06 2025 by rpki-client