Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/vyg3yZoDE3lDITkNoY-QCGp_Waw.roa
File: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (raw, json)
Hash identifier: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=
Subject key identifier: BF:28:37:C9:9A:03:13:79:43:21:39:0D:A1:8F:90:08:6A:7F:59:AC
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 019517FE17CB8F4935340B9C5115A904659D
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/vyg3yZoDE3lDITkNoY-QCGp_Waw.roa
Signing time: Tue 18 Feb 2025 07:38:02 +0000
ROA not before: Tue 18 Feb 2025 07:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62382
IP address blocks: 80.72.216.0/21 maxlen: 21
80.72.216.0/24 maxlen: 24
80.72.217.0/24 maxlen: 24
80.72.218.0/24 maxlen: 24
80.72.219.0/24 maxlen: 24
80.72.220.0/24 maxlen: 24
80.72.221.0/24 maxlen: 24
80.72.222.0/24 maxlen: 24
185.37.188.0/22 maxlen: 22
185.37.188.0/24 maxlen: 24
185.37.189.0/24 maxlen: 24
185.37.191.0/24 maxlen: 24
193.143.96.0/23 maxlen: 23
193.143.96.0/24 maxlen: 24
193.143.97.0/24 maxlen: 24
193.143.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:fe:17:cb:8f:49:35:34:0b:9c:51:15:a9:04:65:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Feb 18 07:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf2837c99a0313794321390da18f90086a7f59ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:8f:45:27:12:e5:bf:f6:3c:e2:e5:b9:98:
57:12:36:c5:c2:04:f0:98:f8:33:8d:b1:57:9c:3e:
33:78:67:d2:c9:17:65:9c:ca:09:e0:9a:fb:2a:a2:
dd:e9:e8:6b:cb:62:12:46:ea:57:7c:1e:08:d2:48:
a7:51:77:39:da:16:30:08:ca:17:f2:16:f6:e7:f6:
30:95:9a:ce:b8:3c:7e:27:f7:8c:12:e9:a7:f0:07:
ef:d1:1b:16:c7:3c:9e:ae:b5:fe:98:24:63:23:e4:
5c:12:89:c6:d6:be:14:5f:d5:f1:68:80:7a:7f:93:
cf:8a:73:36:3e:15:92:b0:67:b3:d0:39:c7:40:3f:
cb:64:d5:ba:fa:1d:4f:1e:b4:92:b1:25:9c:09:70:
6d:f2:a1:5a:25:a6:11:ca:65:5a:53:13:8d:aa:df:
0c:24:b4:64:06:53:4e:70:38:71:06:57:16:0b:e2:
15:e5:2e:e6:af:30:45:6d:7e:46:9a:a7:e3:8d:e9:
08:b0:64:50:f2:a8:84:e4:28:74:e8:24:de:f3:2b:
99:1d:60:47:93:96:8f:6b:b4:c2:06:de:07:07:91:
c5:a9:3b:fa:85:26:71:12:13:d5:0b:87:ae:28:82:
dc:cf:d9:68:af:2e:d0:0d:9c:45:db:cc:94:88:d5:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:37:C9:9A:03:13:79:43:21:39:0D:A1:8F:90:08:6A:7F:59:AC
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/vyg3yZoDE3lDITkNoY-QCGp_Waw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.216.0/21
185.37.188.0/22
193.143.96.0/23
193.143.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:3d:c2:9c:cd:f0:ad:fc:b2:6e:98:f1:9b:a5:73:28:fd:aa:
f3:31:22:ad:db:d6:11:05:8e:2c:6f:e7:c5:ae:b4:9a:a7:41:
07:3e:71:f7:7a:a7:5e:05:b2:89:66:c1:07:5c:92:b7:de:ce:
29:57:5d:a4:ee:c7:4b:c1:9f:a7:32:45:48:f8:1a:53:a6:3d:
3d:a6:11:3e:86:4d:af:42:9f:2b:be:d2:22:ad:f4:74:a6:9b:
5b:f7:a3:00:20:7c:e7:3a:c1:77:b2:5b:af:2c:3a:ac:52:3a:
2a:e2:e3:66:9d:06:4f:82:80:fa:03:bb:88:36:3b:4c:92:78:
e0:9d:48:ee:b7:d4:53:01:56:9b:57:83:c1:3f:6f:df:99:05:
68:52:a3:d8:51:e3:0b:f1:d0:dd:c6:b4:5a:ab:40:6e:28:c9:
d4:02:00:11:b9:47:51:0c:e6:71:b0:e5:21:d4:f2:aa:4e:fd:
68:01:a3:fb:45:f3:2d:1a:6b:d4:79:50:be:99:ee:8d:01:2c:
5e:52:9b:52:92:92:77:fe:84:da:7c:cd:de:d9:6d:c0:46:c3:
4a:f0:8a:07:c5:9f:f1:7f:b4:10:8d:56:fd:6b:a6:83:2b:07:
5f:c7:af:01:0d:85:5c:17:da:b3:b7:e7:73:72:e8:b3:1a:59:
6e:5a:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 16:02:59 2025 by rpki-client