Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/vhaCW0twv6M6-2zpbCqh7ISIylE.roa
File: vhaCW0twv6M6-2zpbCqh7ISIylE.roa (raw, json)
Hash identifier: UAEgEgdU1O1Fn/EwiOd9/xUaWf/QSUK/jq51sDBklgs=
Subject key identifier: BE:16:82:5B:4B:70:BF:A3:3A:FB:6C:E9:6C:2A:A1:EC:84:88:CA:51
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5EF16CB769B87CC6CAA7B532AA055
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/vhaCW0twv6M6-2zpbCqh7ISIylE.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21245
IP address blocks: 144.208.204.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
185.2.176.0/24 maxlen: 24
217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
2a05:8900:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ef:16:cb:76:9b:87:cc:6c:aa:7b:53:2a:a0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be16825b4b70bfa33afb6ce96c2aa1ec8488ca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:7b:d7:68:9a:91:94:2c:c5:b0:e5:5c:05:
2c:10:f2:c2:06:25:89:9d:14:68:81:fa:81:a5:01:
49:65:e6:bb:5d:e8:9b:30:89:ef:9b:99:31:15:0a:
d1:2c:a1:ab:83:97:23:bf:27:2e:3f:76:c1:9e:66:
30:a1:2f:13:bf:1e:e9:4c:ea:64:52:0b:2d:ea:58:
30:5a:b6:fb:e6:63:1f:31:73:ce:37:e4:21:1b:a1:
12:34:52:b0:c3:f8:5f:5a:b9:64:6c:47:ad:cc:8e:
3f:3a:1f:b8:94:7a:60:c4:b8:e9:e3:69:6f:82:c9:
65:ec:7e:b9:af:1b:c3:db:bb:99:70:40:72:12:00:
da:5e:c5:68:c4:16:23:4c:d1:a1:30:0d:3e:e7:9d:
6f:55:00:a6:13:52:fa:8b:12:56:46:ba:74:66:b8:
d8:01:54:0e:4f:aa:13:23:46:d6:78:64:45:a1:76:
c4:37:50:30:79:e4:63:38:9b:77:37:2c:f9:f2:3c:
3d:fb:72:2d:9c:84:79:76:3d:20:a9:ed:10:0e:7d:
4b:ac:a2:aa:9f:25:0a:4c:02:f8:4d:a7:c9:d4:3f:
23:2a:86:f0:82:b2:07:06:14:2e:d4:ec:25:d5:cc:
fc:26:07:3d:cc:5f:7d:36:25:2c:4c:4c:50:54:b2:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:82:5B:4B:70:BF:A3:3A:FB:6C:E9:6C:2A:A1:EC:84:88:CA:51
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/vhaCW0twv6M6-2zpbCqh7ISIylE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.204.0/24
144.208.206.0/24
185.2.176.0/24
217.146.6.0/23
IPv6:
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
c1:fc:7b:0e:c9:1f:66:1b:84:8c:42:70:a7:7d:ec:37:14:ce:
2a:ea:b0:a4:24:fc:21:d9:99:2a:6a:4b:90:e5:e7:bd:b6:38:
98:44:2f:7e:08:c3:8d:c5:af:10:e8:d4:f9:ea:fe:10:cf:67:
c3:4f:e9:e1:d6:e8:8d:c7:aa:93:1f:38:0e:dd:21:dc:d5:4a:
91:a5:50:e9:1d:be:57:bd:3b:dc:53:f8:d2:a6:ff:0b:eb:1a:
ca:b6:3b:ec:cb:41:93:7b:ea:a9:91:bb:62:4d:f9:e0:c2:43:
23:e9:af:db:c0:63:6e:37:80:56:cd:7c:72:3a:c1:45:17:12:
6d:22:99:37:ce:a5:d5:f1:ba:14:41:d7:21:04:65:1f:2c:ab:
4a:a2:3e:6a:32:5c:69:f8:04:ab:6e:4e:65:08:a4:ab:99:11:
33:01:e0:e7:c6:20:a1:59:aa:00:dc:a9:04:6a:18:55:af:f2:
b8:9b:f4:d7:c9:0d:4c:52:d1:51:23:91:03:bb:12:fe:e0:43:
f4:36:1f:97:d9:aa:ab:9e:69:88:72:f8:b8:72:ea:99:39:c9:
67:08:3c:c7:34:44:81:01:e3:26:cd:f6:4f:72:c4:fa:77:96:
b6:0d:6c:2c:96:82:1b:c3:f5:d9:b4:00:e8:c4:4d:46:07:33:
11:75:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:03:47 2025 by rpki-client