Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/_VrWIzeeb6E8sDSdAStFjFktgds.roa
File: _VrWIzeeb6E8sDSdAStFjFktgds.roa (raw, json)
Hash identifier: XW7KS/0ycwvajLuTV4nzdbjjjJAo77rPpbsld42wLs4=
Subject key identifier: FD:5A:D6:23:37:9E:6F:A1:3C:B0:34:9D:01:2B:45:8C:59:2D:81:DB
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 019421B2063B071D7B0C4DFC77855B3BC68F
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/_VrWIzeeb6E8sDSdAStFjFktgds.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207616
IP address blocks: 91.193.56.0/23 maxlen: 24
185.190.26.0/24 maxlen: 24
194.48.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:06:3b:07:1d:7b:0c:4d:fc:77:85:5b:3b:c6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd5ad623379e6fa13cb0349d012b458c592d81db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:00:fb:25:2e:40:36:e6:ce:7a:bc:40:6b:
ad:42:95:8a:fc:af:6c:63:86:1a:3d:54:5f:60:bd:
94:14:c9:9f:0e:a8:56:c6:d0:75:30:2e:45:d0:b0:
ef:19:54:1f:fa:dc:25:db:b2:82:47:41:69:40:51:
e9:f7:f0:ef:f2:17:7b:7c:95:4f:a5:ba:4c:a1:32:
74:fc:db:be:d1:cb:73:a6:e8:2f:f2:3a:93:f8:a5:
cc:f4:ac:6d:50:27:80:d4:78:ac:56:e4:de:b0:66:
ae:46:90:50:5c:41:e5:a3:f6:89:0d:8e:82:0b:1f:
37:6b:f8:58:15:22:56:98:0e:8c:1b:31:fe:19:01:
c1:13:68:d2:c3:f3:25:66:9b:26:9c:d4:fa:ab:ed:
e9:54:10:0e:4f:0f:30:be:33:26:9c:d9:19:7a:e8:
00:91:4d:23:65:59:e5:5b:ed:71:77:10:bd:d3:49:
2c:27:fe:5e:5d:2b:2d:95:d2:79:7c:84:0f:e8:86:
e9:e2:b2:3c:27:c4:47:c3:16:89:33:c8:94:32:f6:
3b:24:a2:96:03:21:61:40:6c:8b:3e:0d:f3:86:23:
c4:13:6d:2b:f3:67:76:2c:e6:06:ca:9c:c5:3e:58:
85:df:0a:ad:f2:39:45:3c:54:58:77:0f:22:19:e1:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:D6:23:37:9E:6F:A1:3C:B0:34:9D:01:2B:45:8C:59:2D:81:DB
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/_VrWIzeeb6E8sDSdAStFjFktgds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.56.0/23
185.190.26.0/24
194.48.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:31:27:a8:4a:a7:63:18:eb:1f:15:f2:5b:68:7a:4b:14:92:
95:74:04:15:af:c9:83:ea:9b:91:13:3f:28:d3:8f:9f:f2:f0:
68:ce:cb:d6:91:33:08:5e:44:5e:c6:2c:f9:02:53:b8:ae:5f:
32:ba:1f:ce:2f:19:6c:17:a7:52:b5:ef:79:4c:e5:a7:0e:63:
b0:d2:85:78:10:ba:65:58:6b:e5:67:96:84:06:3d:86:3f:e6:
4b:79:4b:a6:18:5d:04:bf:67:32:91:ce:53:f2:60:5d:6e:88:
5f:52:89:e8:ff:ad:23:e0:26:c0:39:2a:f6:91:3b:d5:7b:b6:
43:d0:f7:e1:4f:d4:e8:26:8b:6b:31:69:89:37:b3:43:8f:1f:
62:5a:16:86:95:32:14:cb:be:6a:2e:5a:1f:b7:d4:a4:67:25:
8f:72:b7:03:78:2d:32:e3:87:30:aa:f3:71:ee:8e:28:a7:7c:
7e:91:9c:88:1d:2b:1e:8e:89:57:ab:41:91:b3:f5:e4:fd:97:
73:c0:fa:23:f8:09:c2:8c:c8:20:8a:b2:c9:50:d3:7f:a9:1e:
ec:61:c2:5c:f2:ad:bc:d5:8a:e4:39:4d:d1:ee:8e:26:ad:98:
2e:cc:8d:82:4d:1d:c3:fa:ee:20:96:20:7e:5b:65:cb:40:65:
23:ff:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:37 2025 by rpki-client