Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Vhllw2glaqL8EoPQw5XUwOXiBGo.roa
File: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (raw, json)
Hash identifier: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=
Subject key identifier: 56:19:65:C3:68:25:6A:A2:FC:12:83:D0:C3:95:D4:C0:E5:E2:04:6A
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F63962CA51F5D5BC5834C196EE9E
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Vhllw2glaqL8EoPQw5XUwOXiBGo.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203639
IP address blocks: 91.193.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f6:39:62:ca:51:f5:d5:bc:58:34:c1:96:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=561965c368256aa2fc1283d0c395d4c0e5e2046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:eb:0a:98:aa:85:14:66:58:60:5a:8a:09:
e4:84:d7:74:a8:c4:9e:f7:1f:4c:72:38:49:a7:6c:
aa:5b:09:0d:0e:8b:44:12:15:44:51:a2:41:6e:60:
2d:fa:8d:be:70:17:a1:9d:5d:f4:5f:a5:a6:ce:6d:
a2:02:72:94:eb:8a:3b:1c:2b:99:e2:ad:1c:2c:5d:
c2:43:3b:dd:b7:35:b0:f7:70:39:8f:0b:f7:af:8b:
3a:72:97:90:58:42:58:60:c5:35:c0:bd:86:57:a0:
a1:49:ca:28:49:ae:95:24:e4:70:e3:27:2e:7e:00:
21:b8:58:4d:da:0c:bb:ea:78:44:31:ae:cf:5e:04:
58:08:be:a7:61:0c:35:90:a2:ac:0b:6a:da:98:0d:
6b:f9:63:80:94:1e:70:ef:be:b6:d9:28:c3:2c:05:
25:b6:ac:24:95:66:b8:70:ce:4d:61:a1:3b:69:6b:
bf:c8:28:64:fa:10:f1:f3:44:d5:2a:84:62:e7:47:
91:23:13:a4:7d:a8:15:68:5f:ad:35:7c:c1:a1:2f:
21:19:a2:6f:f7:b6:bb:17:a3:e7:70:41:2d:cd:17:
65:68:6c:69:79:8f:0b:5c:bb:75:36:b2:5a:22:3b:
19:5d:aa:13:6c:d3:1f:54:78:2a:08:4c:65:de:41:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:65:C3:68:25:6A:A2:FC:12:83:D0:C3:95:D4:C0:E5:E2:04:6A
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Vhllw2glaqL8EoPQw5XUwOXiBGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b4:3f:3f:85:e7:9e:48:eb:20:f8:af:d1:51:10:80:be:d9:
e2:e1:a7:b0:f2:6c:ec:34:ec:0c:90:bd:dd:fb:46:36:a2:f8:
0c:8f:51:7f:c6:ac:5d:a9:c6:94:1a:d0:7e:65:2a:cd:04:a3:
a0:0b:4b:5e:4d:4f:07:91:11:d7:7e:fc:38:8a:a4:e9:92:09:
bb:8f:50:dd:2b:df:1e:79:2c:46:e1:11:2d:6f:4c:00:f9:1b:
17:b8:e7:1f:16:fe:04:3c:03:1a:e5:a5:93:4f:b7:21:0a:7e:
fd:90:de:5a:d4:94:6c:9b:e6:55:ce:5e:52:cf:de:74:c0:ce:
3e:c6:e7:1c:eb:f1:bf:34:7d:f4:bd:21:27:4a:d6:0e:18:46:
e2:e0:7d:d4:ab:65:74:08:c4:07:36:ae:06:bb:89:cf:94:89:
f1:0b:aa:14:90:05:f3:3b:4a:a5:a6:9e:88:6e:0c:8f:34:f0:
dd:cb:63:5c:f7:40:b9:31:5f:4b:2b:f4:e8:53:52:57:c7:b6:
47:d9:c9:a9:06:16:d9:e5:74:d8:72:0c:2a:0d:81:29:be:b2:
9d:ac:f4:28:ab:f2:33:15:49:f0:cf:3a:fa:f5:59:26:ff:3f:
0a:26:98:33:bf:a6:cb:f8:f8:e0:a6:52:b2:b9:58:04:d1:70:
68:5d:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client