Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VTXHl8dG32EYcH_6gVGECNfv4HE.roa
File: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (raw, json)
Hash identifier: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=
Subject key identifier: 55:35:C7:97:C7:46:DF:61:18:70:7F:FA:81:51:84:08:D7:EF:E0:71
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0196115CB2962D1F3195339720FF69121040
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VTXHl8dG32EYcH_6gVGECNfv4HE.roa
Signing time: Mon 07 Apr 2025 17:46:49 +0000
ROA not before: Mon 07 Apr 2025 17:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 92.119.60.0/24 maxlen: 24
92.119.61.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:5c:b2:96:2d:1f:31:95:33:97:20:ff:69:12:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Apr 7 17:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5535c797c746df6118707ffa81518408d7efe071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:5f:91:4f:29:90:9a:05:71:cb:99:d2:df:
55:69:5f:2e:9c:51:39:a9:ea:3f:64:7c:75:6c:ce:
be:00:32:2f:3a:23:23:ca:3f:5a:9f:60:19:26:40:
9d:1d:d1:f0:d7:9e:0b:67:62:87:47:ae:c2:b7:7a:
d0:c9:c2:46:e5:3f:90:e3:c9:be:bf:b7:d7:ee:84:
fe:8b:85:51:ce:43:3e:52:69:8a:6f:af:95:4c:4f:
d9:58:a3:51:8e:5f:11:b4:fe:a9:de:32:7a:f3:4d:
6a:ce:65:50:5b:4c:6c:a1:87:19:2e:b2:18:ae:39:
52:00:38:7d:39:ab:be:ea:99:8b:f2:df:71:98:db:
7f:68:7c:89:02:d3:c0:50:e4:4f:33:1f:1c:5b:ea:
96:b0:23:96:e0:32:52:c1:66:27:32:d8:6a:28:c5:
af:60:2e:db:5a:de:bb:2e:b2:ad:a7:db:07:80:79:
a6:0d:1f:bd:c1:1a:14:38:ce:a2:da:2a:3c:c8:ce:
81:67:4e:03:b8:5e:89:69:4c:32:f1:f4:af:d1:36:
31:8b:9d:16:f5:4e:da:9e:0f:9e:68:85:2b:5e:f9:
25:c6:d8:40:f3:c1:e8:f0:81:57:50:00:e4:cf:55:
63:48:f4:23:27:6f:a9:84:7e:45:94:a5:28:c2:eb:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:C7:97:C7:46:DF:61:18:70:7F:FA:81:51:84:08:D7:EF:E0:71
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VTXHl8dG32EYcH_6gVGECNfv4HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/23
92.119.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e9:bc:0c:15:d1:e1:42:2f:af:a6:a5:73:82:5e:50:32:d9:
67:da:25:c3:cb:4f:8f:4a:ee:8d:46:a2:1a:f4:c7:53:2e:95:
83:92:ee:c5:26:15:bb:fb:dc:56:14:d5:cb:97:7e:65:9a:02:
b1:0c:ff:d1:4e:52:93:61:cf:0e:3c:84:20:24:54:c8:fa:5a:
75:2e:d3:b4:b8:f1:54:50:f4:00:05:a7:17:81:51:22:4c:0e:
f5:04:a2:13:ab:e6:93:30:ba:92:25:8d:72:42:ff:33:2f:2d:
7e:4b:d1:f8:b3:93:80:5f:93:72:85:b8:2e:24:e6:32:36:2f:
34:c0:b9:9a:bc:e1:e6:25:a1:34:d7:80:f8:69:0f:f2:00:e7:
a4:61:2a:d2:9a:98:ef:8a:e0:f3:d1:24:b5:02:a2:9a:13:fc:
15:e4:38:d5:15:60:29:76:84:37:65:d8:58:d4:be:f2:23:06:
a8:32:b8:f0:7f:0b:5f:d7:7c:4c:5a:d6:fb:49:25:d2:d0:16:
c4:16:4f:2c:2c:02:53:0a:66:d4:3e:d0:da:62:b4:1b:4b:b6:
48:65:7d:1b:37:f3:40:c7:33:6f:45:4b:81:76:83:61:11:f6:
fe:43:ab:6a:6d:16:5e:a2:ad:ca:09:dc:0f:6d:65:e6:55:e1:
29:32:27:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYRXLKWLR8xlTOXIP9pEhBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh
YWUxNGYwHhcNMjUwNDA3MTc0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTM1Yzc5N2M3NDZkZjYxMTg3MDdmZmE4MTUxODQwOGQ3ZWZlMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3BfkU8pkJoFccuZ0t9VaV8unFE5
qeo/ZHx1bM6+ADIvOiMjyj9an2AZJkCdHdHw154LZ2KHR67Ct3rQycJG5T+Q48m+
v7fX7oT+i4VRzkM+UmmKb6+VTE/ZWKNRjl8RtP6p3jJ6801qzmVQW0xsoYcZLrIY
rjlSADh9Oau+6pmL8t9xmNt/aHyJAtPAUORPMx8cW+qWsCOW4DJSwWYnMthqKMWv
YC7bWt67LrKtp9sHgHmmDR+9wRoUOM6i2io8yM6BZ04DuF6JaUwy8fSv0TYxi50W
9U7ang+eaIUrXvklxthA88Ho8IFXUADkz1VjSPQjJ2+phH5FlKUowusQpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFU1x5fHRt9hGHB/+oFRhAjX7+BxMB8GA1UdIwQY
MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct
ZDRmMTJiMzdhMzE4LzEvVlRYSGw4ZEczMkVZY0hfNmdWR0VDTmZ2NEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4
LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXHc8AwQA
XHc/MA0GCSqGSIb3DQEBCwUAA4IBAQBu6bwMFdHhQi+vpqVzgl5QMtln2iXDy0+P
Su6NRqIa9MdTLpWDku7FJhW7+9xWFNXLl35lmgKxDP/RTlKTYc8OPIQgJFTI+lp1
LtO0uPFUUPQABacXgVEiTA71BKITq+aTMLqSJY1yQv8zLy1+S9H4s5OAX5Nyhbgu
JOYyNi80wLmavOHmJaE014D4aQ/yAOekYSrSmpjviuDz0SS1AqKaE/wV5DjVFWAp
doQ3ZdhY1L7yIwaoMrjwfwtf13xMWtb7SSXS0BbEFk8sLAJTCmbUPtDaYrQbS7ZI
ZX0bN/NAxzNvRUuBdoNhEfb+Q6tqbRZeoq3KCdwPbWXmVeEpMifK
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:00:58 2025 by rpki-client