Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Vxlq2Z39A9F-eaPA57TXXEurwJs.roa
File: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (raw, json)
Hash identifier: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=
Subject key identifier: 57:19:6A:D9:9D:FD:03:D1:7E:79:A3:C0:E7:B4:D7:5C:4B:AB:C0:9B
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01942067EE57D6A095E0178AB286314FCDD8
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Vxlq2Z39A9F-eaPA57TXXEurwJs.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61295
IP address blocks: 91.214.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ee:57:d6:a0:95:e0:17:8a:b2:86:31:4f:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57196ad99dfd03d17e79a3c0e7b4d75c4babc09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:8d:b0:d5:63:08:e2:0d:26:68:cf:cd:54:
60:17:63:f3:fe:0b:a8:03:a2:5e:6f:b1:ba:fc:d8:
14:4e:6f:76:d4:cc:14:28:00:db:e8:e5:99:8c:ed:
74:58:74:07:20:b7:c9:a0:55:ff:91:9b:9f:d6:c3:
93:2c:24:e7:8c:d1:2d:ff:4a:b7:2b:d4:c6:5b:d0:
44:01:23:78:32:7c:f2:ae:ec:0d:fc:97:1b:af:d6:
28:a2:2b:d0:66:7a:0d:e7:3e:c2:d6:07:7d:d0:79:
21:6b:f9:f2:70:d1:86:ad:6c:b3:d2:3d:bb:a0:1c:
8c:ef:dd:56:13:41:db:af:f6:b0:01:51:92:6b:de:
3a:f3:61:52:7c:7e:5f:1f:28:cb:6d:98:eb:31:42:
55:a0:75:eb:f2:ac:02:5a:d4:e5:bc:e6:c3:ce:fd:
73:67:5f:8d:c8:28:cc:c6:88:e1:f2:cf:ee:e7:35:
71:b1:0f:f4:9f:82:22:e7:17:f3:f6:1a:26:82:21:
61:74:6b:c8:54:92:e6:a9:2b:73:25:5b:7e:c5:9d:
6e:44:eb:ed:5d:46:60:01:61:ef:1c:49:e9:30:5b:
95:83:8b:83:ce:56:84:eb:85:6b:0c:d4:56:9f:21:
5a:de:31:c4:f2:fa:cc:e9:de:8b:8a:e7:9d:c1:26:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:19:6A:D9:9D:FD:03:D1:7E:79:A3:C0:E7:B4:D7:5C:4B:AB:C0:9B
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Vxlq2Z39A9F-eaPA57TXXEurwJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.46.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5a:c7:53:94:1a:ea:c2:f7:14:0c:8d:e2:88:72:83:ad:0f:
4b:64:4f:82:a6:46:73:b2:05:f0:fe:bd:ac:52:00:91:02:95:
a5:37:cf:c8:bb:74:45:ac:b3:36:b1:ac:f1:90:8a:24:23:f0:
1c:2f:dc:5c:57:b8:ab:c8:3a:97:59:12:8f:e7:43:d9:05:b0:
3b:14:f9:8d:64:1b:0c:91:70:f7:bb:e7:96:3e:c5:82:6e:14:
fe:65:90:1f:66:58:bc:f8:8d:6a:1e:28:30:79:2a:c6:c3:e8:
58:c9:19:a1:6f:20:e7:d2:ff:bd:fd:bd:16:73:f5:17:13:17:
d1:cc:f5:5a:30:86:b1:e9:71:d8:2a:96:b4:af:a8:08:24:34:
6e:a1:3d:d9:0b:bc:7e:a1:cf:da:b1:3b:98:07:08:9c:f1:aa:
e0:d3:4f:b5:c9:35:0d:52:4b:e7:11:90:0a:9f:b8:7d:d6:6d:
00:2c:7c:34:85:92:fa:f0:59:a8:18:61:06:fc:f7:8a:b6:81:
c7:7b:48:40:f1:d5:69:e4:b3:c8:6b:c6:fb:51:c9:7a:da:38:
93:9b:de:9c:fa:03:dd:ac:3a:ad:03:1f:d3:46:39:00:ea:5c:
ba:6f:84:1b:21:a7:40:82:9a:ff:ca:a4:93:8e:bd:2a:b0:91:
74:87:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:53:29 2025 by rpki-client