Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa
File: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (raw, json)
Hash identifier: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=
Subject key identifier: 55:41:81:FD:A0:B2:38:B0:35:43:A2:52:C8:02:0A:F1:79:26:CA:67
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01942521FE877083573553231A7F95185DE0
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34683
IP address blocks: 87.254.96.0/19 maxlen: 19
185.69.216.0/22 maxlen: 22
195.137.228.0/23 maxlen: 23
212.24.192.0/19 maxlen: 19
212.24.193.0/24 maxlen: 24
2001:1698::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fe:87:70:83:57:35:53:23:1a:7f:95:18:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554181fda0b238b03543a252c8020af17926ca67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:72:26:32:97:10:07:8f:a5:03:bb:fd:e1:
fc:de:34:30:cd:72:f1:da:64:7b:95:51:9b:b8:75:
4c:03:da:3e:54:02:36:2f:7f:5e:1a:1d:ed:5a:59:
e9:1d:4e:5b:1a:b8:d9:4d:3a:b3:d6:e3:9f:ab:86:
57:ad:11:5f:3c:2f:25:c9:ce:79:e1:02:a5:7b:c9:
91:99:d9:46:99:82:04:ee:67:c2:43:71:11:b3:d7:
cd:65:80:7b:f8:53:58:1c:55:8e:da:f9:69:26:d8:
2d:49:f8:e6:29:b7:7c:92:9b:b6:25:a8:9c:f0:0f:
f3:7a:62:0c:db:64:e9:f9:51:9f:c8:3f:57:85:be:
49:d3:89:17:a4:2c:69:f6:63:28:71:74:13:d9:ad:
f8:fc:06:36:ef:73:0c:81:43:3b:52:ee:13:4f:2a:
18:cb:3a:ed:6d:a5:f0:d5:b4:3e:b0:ef:c5:cf:ca:
86:56:27:91:8c:0f:8b:5d:08:0a:e9:9d:aa:57:fc:
90:3b:c1:d1:a1:77:6d:3d:0b:eb:fa:60:d3:83:d4:
0e:4b:21:c6:17:19:e9:79:9d:0d:af:06:35:d5:dd:
91:18:66:69:2d:de:50:57:70:76:18:fe:8d:04:f1:
c4:1f:5e:f2:5b:97:48:4f:9b:87:38:be:92:3c:37:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:81:FD:A0:B2:38:B0:35:43:A2:52:C8:02:0A:F1:79:26:CA:67
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.96.0/19
185.69.216.0/22
195.137.228.0/23
212.24.192.0/19
IPv6:
2001:1698::/32
Signature Algorithm: sha256WithRSAEncryption
13:b8:0e:ee:b8:3c:1c:eb:a2:48:ac:00:67:32:3b:a3:76:a7:
95:f0:88:d9:f5:4f:2d:49:2a:df:95:3b:ae:cd:af:a5:57:aa:
ef:e9:a2:b8:97:d0:10:c4:82:48:12:f5:f3:dc:69:f1:f1:c3:
42:44:82:9d:a7:c7:a7:4c:c1:df:1f:13:e7:28:0d:7d:19:87:
6e:7d:96:cf:a6:ef:01:1b:c1:34:e5:e5:d3:ef:3e:ca:9d:80:
b6:6c:81:00:f9:bd:4d:76:8c:a2:5e:64:ef:a9:ba:0e:bb:c2:
d9:30:21:9b:ca:66:bc:90:8a:b6:7f:1b:e2:a1:a7:0e:7a:61:
52:07:2a:96:7b:bc:b9:13:ef:00:f3:a4:a0:fb:3d:14:03:3a:
4b:ff:5a:ba:be:8b:7a:93:41:99:72:32:7e:79:3e:ac:58:9c:
97:1a:e1:f8:68:05:2d:99:61:e2:40:a9:13:6f:6d:31:0a:70:
10:1f:37:2e:b2:1c:80:c8:18:b0:d4:e8:84:1e:30:cc:75:0c:
0b:43:e9:e3:7d:89:5a:8e:7b:82:2a:ad:97:43:5c:bd:fc:ac:
73:84:b4:8d:c2:e9:f4:ba:a5:47:51:dc:39:d6:c1:32:de:09:
2f:e0:cb:60:13:eb:cb:58:93:77:e7:cb:2d:66:b4:2e:4e:20:
a4:17:83:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:19 2025 by rpki-client