Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/vosIopFKuVooFEnT_WoSvrVtBQk.roa
File: vosIopFKuVooFEnT_WoSvrVtBQk.roa (raw, json)
Hash identifier: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=
Subject key identifier: BE:8B:08:A2:91:4A:B9:5A:28:14:49:D3:FD:6A:12:BE:B5:6D:05:09
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0194228D7F39E61B4C389DA0453AF943B8CB
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/vosIopFKuVooFEnT_WoSvrVtBQk.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198232
IP address blocks: 91.232.175.0/24 maxlen: 24
195.60.240.0/23 maxlen: 23
195.60.240.0/24 maxlen: 24
195.60.241.0/24 maxlen: 24
195.60.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7f:39:e6:1b:4c:38:9d:a0:45:3a:f9:43:b8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8b08a2914ab95a281449d3fd6a12beb56d0509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:ab:17:d5:24:50:0a:72:49:dd:1f:e1:fd:
96:74:60:2d:62:3b:17:9f:7d:b3:8c:df:84:a3:0a:
d2:05:78:73:cc:97:dd:de:42:6f:40:52:9a:ef:d8:
e8:96:f1:3b:50:8d:05:7c:82:fe:ca:14:84:31:47:
b3:8c:33:2a:92:f6:27:0e:3b:21:93:04:6f:36:f5:
ae:53:4e:6e:f1:ab:55:19:5c:95:66:06:d8:2e:01:
57:0b:4e:f0:d9:2c:48:2c:25:6f:90:e9:00:91:c4:
4d:c8:b3:5c:db:00:56:8a:60:16:f4:14:42:01:5a:
7a:90:f4:9a:44:be:af:3f:8a:a7:59:13:b1:12:f5:
82:ba:22:f6:30:e6:2e:10:ea:56:9a:24:f3:bc:d1:
1d:15:ef:28:7c:0b:cc:86:d5:76:ff:a6:2e:a8:af:
0c:61:c7:73:38:97:85:b1:af:4d:fd:6a:a9:12:70:
85:ed:d6:d2:33:5e:4a:92:b1:35:6b:5c:b2:a5:cb:
b7:8e:02:54:57:c6:6f:ba:3b:d9:42:a2:72:e0:ea:
44:b8:34:25:63:da:b5:53:16:fb:0a:77:7a:02:e2:
50:78:e6:00:51:f0:31:71:e4:1c:98:d3:78:f1:69:
fb:e5:e1:51:21:35:49:f0:ba:47:09:0b:14:fa:bb:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:08:A2:91:4A:B9:5A:28:14:49:D3:FD:6A:12:BE:B5:6D:05:09
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/vosIopFKuVooFEnT_WoSvrVtBQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.175.0/24
195.60.240.0-195.60.242.255
Signature Algorithm: sha256WithRSAEncryption
6d:4e:15:c0:e9:23:1c:c6:96:38:c0:df:ba:f5:9f:ee:df:30:
fa:a7:14:0e:d7:87:de:a7:44:65:82:05:56:3e:27:45:dd:5f:
86:9f:b6:2d:e9:29:b7:23:1e:d4:2e:75:36:06:f4:9c:06:11:
7a:4c:88:59:fb:a1:2b:32:39:2a:e6:a7:41:1b:6d:ac:d3:d7:
01:ee:05:df:cb:26:76:32:4e:69:9f:19:77:1a:e1:61:ee:da:
30:95:67:89:68:91:64:c8:42:53:11:32:be:4a:4c:29:64:24:
e8:84:32:0e:07:a4:4e:f1:df:c1:7e:c5:dc:9e:54:88:47:16:
15:10:46:d6:45:29:46:8c:d8:42:6a:56:dc:70:f4:af:e2:4b:
a1:62:27:7c:f1:aa:46:8b:d5:93:9f:3f:4f:1c:1e:d0:4b:3e:
40:60:51:cf:af:43:28:6b:2c:f4:e7:25:1e:f2:60:83:2a:d1:
dd:3e:8c:5e:1e:38:83:16:8e:3f:83:b8:e0:4d:6f:a8:dd:17:
d7:48:dd:9f:79:99:7d:4d:10:e8:6d:61:08:64:17:5d:48:7f:
8c:93:cf:9b:e3:55:2e:69:94:cd:d3:34:00:1d:56:b8:72:a8:
bc:d2:c1:b4:d3:56:db:c2:3a:d7:cf:75:c2:8f:0c:a5:b7:69:
cf:ba:12:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:48:10 2025 by rpki-client