Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa
File: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (raw, json)
Hash identifier: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=
Subject key identifier: 56:14:D8:87:D2:30:E4:F5:48:FB:ED:86:33:A3:10:B8:B4:25:1D:FC
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0195141CBD7FAA7D2CD4F2155D661DB62AA6
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa
Signing time: Mon 17 Feb 2025 13:33:02 +0000
ROA not before: Mon 17 Feb 2025 13:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28785
IP address blocks: 213.222.192.0/19 maxlen: 19
213.222.192.0/21 maxlen: 21
213.222.192.0/22 maxlen: 22
213.222.192.0/24 maxlen: 24
213.222.196.0/23 maxlen: 23
213.222.196.0/24 maxlen: 24
213.222.200.0/21 maxlen: 21
213.222.201.0/24 maxlen: 24
213.222.204.0/24 maxlen: 24
213.222.205.0/24 maxlen: 24
213.222.206.0/24 maxlen: 24
213.222.207.0/24 maxlen: 24
213.222.208.0/21 maxlen: 24
213.222.208.0/24 maxlen: 24
213.222.209.0/24 maxlen: 24
213.222.210.0/24 maxlen: 24
213.222.211.0/24 maxlen: 24
213.222.212.0/24 maxlen: 24
213.222.216.0/24 maxlen: 24
213.222.217.0/24 maxlen: 24
2a03:7580::/32 maxlen: 32
2a03:7580::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:1c:bd:7f:aa:7d:2c:d4:f2:15:5d:66:1d:b6:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Feb 17 13:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5614d887d230e4f548fbed8633a310b8b4251dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:af:68:36:62:1c:17:3d:59:dc:b0:6a:0d:
2a:1f:3e:87:ff:8d:0c:e3:5a:f7:93:16:01:59:fc:
35:5f:2f:24:fb:97:a3:0f:03:07:f3:bf:b9:56:03:
5b:c1:f7:82:4b:ac:67:c3:c3:3f:5e:94:37:e9:2f:
2b:d7:a1:1e:f2:75:8b:9d:4d:e3:69:fa:ac:4e:c3:
0c:a9:24:82:a6:ab:fc:a9:fb:92:2a:be:f0:b8:de:
9a:40:4f:13:35:21:3e:f7:7c:c7:58:15:49:f2:d1:
4c:b4:7f:4f:c7:e4:f8:5e:8d:a8:a2:ba:0b:bb:5b:
97:b9:ee:10:f8:07:e6:ac:e1:cb:b8:5b:05:38:d8:
20:4b:48:a3:50:ee:e7:77:12:f7:ae:8b:3c:70:18:
14:d4:d0:eb:61:e0:d9:25:00:be:36:10:94:0f:24:
f2:7f:39:c8:9a:1c:b8:39:60:ec:30:8e:7c:24:68:
c9:29:9d:c6:80:73:66:85:94:17:cf:8b:9a:1b:4c:
b6:16:30:5a:82:d3:44:c5:23:7f:2d:f6:15:6c:60:
c0:fc:a4:db:0c:21:ce:ff:58:ae:56:22:f7:50:89:
3e:e0:4f:74:35:d0:7e:60:36:db:5b:fe:8e:89:3b:
44:18:78:98:61:58:fe:05:f6:53:7e:8a:39:b8:74:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:D8:87:D2:30:E4:F5:48:FB:ED:86:33:A3:10:B8:B4:25:1D:FC
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.192.0/19
IPv6:
2a03:7580::/32
Signature Algorithm: sha256WithRSAEncryption
31:f5:c3:6e:81:f5:b9:09:97:96:1b:ff:c8:93:ca:0b:91:b2:
d9:c3:28:d9:6a:6a:0e:fa:2b:9f:dc:9f:df:1b:0b:c8:85:5b:
9e:0e:c6:dc:84:ac:21:00:eb:99:c4:0e:76:ab:c8:5a:56:a2:
1b:17:9a:38:35:be:0b:cb:d3:5f:f3:e6:b2:c4:ba:72:7d:d1:
14:16:10:ee:cd:3d:6e:da:33:f3:af:63:e0:d7:a5:97:bc:5f:
00:07:7f:dc:41:54:f6:d1:d5:25:18:18:dd:19:3b:3a:77:7d:
16:a8:5f:91:7a:b9:82:04:93:b9:e3:81:d5:51:36:d9:60:e5:
5a:6e:f4:aa:1e:f9:a9:d8:87:ba:e2:7e:40:d0:04:81:30:6b:
e9:6e:f7:1b:2d:e2:f4:98:a3:aa:63:81:da:10:50:c2:c0:6a:
53:90:0a:d3:d7:6c:9e:6b:82:1c:f7:70:b9:bc:7b:53:d3:0c:
13:fd:c3:bb:e4:7d:d4:36:f0:07:91:e8:06:0b:4e:c9:3f:24:
ee:96:e3:5b:e1:5d:83:fb:f1:8c:53:7b:b0:c0:ce:ea:a7:c8:
10:68:35:a9:7b:94:2f:35:8c:81:c3:52:77:26:fa:09:e2:86:
b5:84:f4:c7:c0:18:3a:43:99:01:af:c5:af:7c:12:73:a7:25:
83:d0:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:31 2025 by rpki-client