Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/VTxMLl4t8UpjAWzaaDiTvOnIu4A.roa
File: VTxMLl4t8UpjAWzaaDiTvOnIu4A.roa (raw, json)
Hash identifier: dF8N1aQrk1i1D0JeRS1ACxfpviab5mvayBls/xTFPBQ=
Subject key identifier: 55:3C:4C:2E:5E:2D:F1:4A:63:01:6C:DA:68:38:93:BC:E9:C8:BB:80
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 019635D6798E3492BE570BC52252BEADC905
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/VTxMLl4t8UpjAWzaaDiTvOnIu4A.roa
Signing time: Mon 14 Apr 2025 19:46:10 +0000
ROA not before: Mon 14 Apr 2025 19:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208684
IP address blocks: 91.230.168.0/24 maxlen: 24
91.231.47.0/24 maxlen: 24
91.231.89.0/24 maxlen: 24
2a0b:2640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:d6:79:8e:34:92:be:57:0b:c5:22:52:be:ad:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Apr 14 19:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553c4c2e5e2df14a63016cda683893bce9c8bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:be:86:1d:5c:6d:d7:6a:6c:84:ca:a7:a0:
05:e1:b0:5c:93:42:5e:4e:25:87:ae:42:81:86:fd:
6e:95:58:12:53:5a:d1:a6:53:75:de:77:cd:16:f2:
96:eb:df:00:aa:ba:f6:a4:fd:46:5d:9f:c1:f5:17:
4c:58:59:b1:97:17:04:4a:36:90:7b:b1:36:3d:ac:
1b:24:e9:c2:36:da:4e:8c:a8:96:43:3b:f1:cb:f1:
2b:b2:69:83:85:db:4f:f0:39:72:e8:42:80:e5:d9:
c1:1e:af:a6:89:ab:31:50:f3:8c:34:d4:bc:b4:b4:
7d:17:5d:83:30:2f:85:83:89:02:fa:c1:da:a5:12:
6e:37:dd:c6:d7:57:69:90:d3:68:ad:c5:e8:a6:fd:
97:ee:e8:26:3f:65:b4:91:67:af:18:f7:7b:bb:7e:
e3:52:ba:ad:c6:a5:bf:fd:38:c8:a7:1e:3e:d8:1f:
b8:71:06:12:c5:85:c8:89:8c:c5:fa:fb:9d:cd:74:
cb:bb:d0:45:b0:f2:ec:6d:2d:f6:6d:0f:97:7b:32:
58:ab:a2:bb:3b:18:88:01:31:e8:2a:63:08:97:8b:
4b:e2:07:83:7d:18:da:84:2b:ef:29:d2:54:b0:e4:
9d:67:97:73:c5:31:8f:b7:78:19:a5:c2:e9:fb:43:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:4C:2E:5E:2D:F1:4A:63:01:6C:DA:68:38:93:BC:E9:C8:BB:80
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/VTxMLl4t8UpjAWzaaDiTvOnIu4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.168.0/24
91.231.47.0/24
91.231.89.0/24
IPv6:
2a0b:2640::/29
Signature Algorithm: sha256WithRSAEncryption
18:a7:48:cc:5b:9b:ef:87:f0:c7:e9:49:38:45:21:7a:f9:41:
90:b1:f2:e4:b7:d3:c6:d6:fc:fc:43:77:a4:5e:c6:4a:f2:2b:
13:2c:08:f3:4e:76:a8:95:df:66:ba:dd:0c:28:d6:aa:72:3d:
48:b0:b9:a6:42:96:51:53:5f:35:ac:96:27:82:b4:e5:3a:6f:
c7:dd:20:c8:05:66:79:25:69:de:4c:9d:c4:a4:2c:3a:e2:94:
07:a7:cc:85:46:d2:b1:60:fa:6d:90:3b:d3:03:a6:b3:fc:05:
79:f2:ad:2e:4e:63:6d:e1:68:b5:81:b3:39:3a:e5:97:2f:96:
42:38:a6:98:f0:a1:b5:9e:00:03:34:42:7b:2a:7c:8d:46:20:
20:10:a4:3d:89:ca:8d:6e:66:c3:83:90:08:33:6a:9f:b3:60:
d9:03:9c:64:18:12:db:64:42:bd:23:c1:fc:9c:fb:93:ef:a9:
82:52:53:c8:e7:88:14:66:5c:7c:f4:d6:39:3f:77:be:e9:05:
ff:15:e8:1d:08:50:ba:eb:86:ee:76:52:6f:b7:91:1e:f4:ed:
e0:66:96:7c:81:69:4d:d0:2d:1a:74:e4:62:d0:9a:23:13:63:
fd:75:d2:cb:3b:b1:6a:5d:63:18:7e:5b:d4:ab:ca:75:2d:56:
ad:24:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:49 2025 by rpki-client