Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa
File: VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa (raw, json)
Hash identifier: FrKooKPN8B42nu5wk7iHVN6k1WQH71cGopIkNxiN9ZM=
Subject key identifier: 55:47:2C:22:2F:FD:F9:BF:11:CC:4C:27:0C:3E:A3:19:56:93:43:43
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1FBCDFF1DB2BFFC562969AB1681D
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205148
IP address blocks: 93.159.187.0/24 maxlen: 24
2a00:1578:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:bc:df:f1:db:2b:ff:c5:62:96:9a:b1:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55472c222ffdf9bf11cc4c270c3ea31956934343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:f9:73:15:da:1c:24:2e:69:5d:4c:bb:48:
80:da:65:18:b0:6c:ad:30:2f:10:96:22:43:95:e7:
17:42:1a:c7:de:72:9b:6c:96:35:01:03:40:a1:2e:
c7:be:f5:00:3a:25:ed:ee:4b:f2:6c:43:71:e2:0b:
38:d1:d8:4f:60:bf:fe:47:9e:46:7d:5f:8e:38:45:
a5:33:ef:4f:7f:94:cb:d5:14:01:c7:63:c9:ec:d5:
3c:9c:14:ef:d7:93:e9:9f:dc:6c:d5:9e:58:de:c4:
d9:f2:20:45:70:92:18:79:01:3b:a1:2a:37:7f:9d:
71:8f:58:00:f1:44:1e:d7:cf:b1:8b:a7:8c:72:46:
7b:e0:aa:59:87:5b:6d:38:be:2d:f6:bd:44:1e:93:
59:3e:b5:28:1d:b6:6f:0c:23:05:81:57:5e:fd:3b:
4b:5d:ab:22:76:8e:dc:77:b1:ae:8e:d9:49:d1:99:
e7:a7:84:7b:44:f5:1c:59:b1:0e:01:be:14:14:f3:
3d:5f:ba:f4:2a:21:bd:33:92:30:2d:93:56:88:d8:
ee:96:81:f1:e5:a8:7d:17:59:77:cb:7a:1b:ea:85:
b0:f9:c7:e8:41:55:e6:de:44:42:cb:db:31:ba:af:
7b:a3:66:76:78:61:bd:96:6e:53:c6:8a:06:a8:45:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:2C:22:2F:FD:F9:BF:11:CC:4C:27:0C:3E:A3:19:56:93:43:43
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.187.0/24
IPv6:
2a00:1578:100::/40
Signature Algorithm: sha256WithRSAEncryption
48:fc:24:77:7e:bc:e5:cd:f4:a7:3d:16:76:cd:f4:a8:c5:06:
7d:51:00:60:e4:c1:a3:ff:24:2c:9d:e6:98:b1:bb:2a:65:21:
5f:f1:06:60:94:bb:a5:c4:2c:5d:a9:98:84:da:29:43:18:10:
9b:11:ea:76:90:e4:f0:43:e5:3a:68:dc:9a:b8:f0:7e:57:cc:
1a:f4:86:c9:48:5c:24:57:a4:89:2a:54:aa:dd:5b:46:24:35:
40:51:09:eb:c3:45:a7:ce:04:e4:6c:2f:fa:41:4b:3a:72:43:
7f:9a:21:7a:55:00:88:c2:fc:e5:70:17:20:d2:2b:61:b4:86:
6d:cc:44:11:9b:11:ce:c2:a8:e6:92:72:0e:48:8c:3d:a7:df:
68:49:e8:4a:b3:8f:24:be:12:d8:cb:64:8e:29:81:6c:16:a8:
1e:c1:7d:5d:95:0a:a1:14:b0:53:60:6e:9b:0c:f9:c6:e9:c5:
c0:a1:69:c9:a7:c5:42:8e:44:52:6f:ee:21:3e:bd:e4:36:c0:
b9:6d:90:04:cf:de:48:cc:8b:c3:79:28:0d:d9:35:53:bc:70:
44:89:db:3b:5f:63:90:02:33:66:a1:61:b9:5b:a1:c3:e2:5e:
4b:24:f5:11:53:66:e7:df:85:29:a5:64:3d:82:83:ae:bf:ea:
6c:f5:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:54:52 2025 by rpki-client