Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa
File: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (raw, json)
Hash identifier: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=
Subject key identifier: 54:F9:53:15:4D:AF:F7:FF:B9:51:ED:8A:9C:77:B6:85:64:AB:6E:F5
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0195A3D30249E17EEC2AB1E3EB3AE28E6348
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa
Signing time: Mon 17 Mar 2025 11:17:49 +0000
ROA not before: Mon 17 Mar 2025 11:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 143.223.99.0/24 maxlen: 24
185.98.168.0/24 maxlen: 24
185.98.169.0/24 maxlen: 24
185.98.170.0/24 maxlen: 24
185.98.171.0/24 maxlen: 24
212.104.214.0/24 maxlen: 24
212.104.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:d3:02:49:e1:7e:ec:2a:b1:e3:eb:3a:e2:8e:63:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Mar 17 11:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f953154daff7ffb951ed8a9c77b68564ab6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:93:32:f3:10:3e:ef:4a:eb:36:67:25:20:
8a:c4:8f:61:5e:42:de:ed:ff:51:d7:fc:38:ea:1a:
a4:da:33:33:97:7b:9c:51:53:07:bc:15:51:7b:8b:
4b:15:0f:b5:ed:3c:8f:05:eb:ff:29:b1:c1:ef:9c:
d7:67:35:17:a1:7e:63:f7:c1:df:24:8c:62:b5:42:
d8:d1:b2:30:c0:e9:df:56:c7:2a:15:b1:3c:ed:25:
49:2c:40:91:3f:bf:3a:87:be:dc:c2:c7:bb:95:e2:
28:26:03:68:77:f4:79:90:50:f3:4e:30:8e:03:16:
7f:d4:ac:bd:1b:6f:88:7d:28:2b:e0:3e:86:2d:7c:
7d:1f:9e:7c:39:df:59:eb:ab:75:cf:cf:0e:5a:b5:
03:c6:ba:76:82:8c:08:a6:7d:3f:95:9d:d0:c3:3d:
85:7b:30:b3:96:d5:66:1f:75:ba:83:58:e5:96:bb:
9e:0e:6a:f6:b9:96:cd:d9:81:6b:18:ca:c9:7a:e6:
37:01:1c:17:97:e6:7b:ee:19:8b:be:5a:e8:ff:e0:
b8:35:f9:27:e2:f0:ea:1f:d5:76:48:5a:28:c1:51:
bc:ce:7e:8c:2d:c1:aa:c2:8f:55:12:0e:69:f8:e1:
a4:db:55:4f:44:d9:e0:f8:a3:2c:08:2f:0f:e6:bb:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:53:15:4D:AF:F7:FF:B9:51:ED:8A:9C:77:B6:85:64:AB:6E:F5
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.223.99.0/24
185.98.168.0/22
212.104.214.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:34:31:48:e3:85:b5:dd:28:f8:90:4c:ce:a4:b5:6c:63:7c:
55:38:fe:08:7b:e2:0d:17:e8:3c:ba:e8:d1:76:04:fd:4f:07:
fb:19:5a:bf:ed:0c:dd:b8:55:d2:78:9b:7e:14:c1:04:c2:46:
c5:9f:61:42:13:7f:57:df:a4:4c:91:0c:ba:9d:56:28:7c:4f:
34:3e:5f:ef:fa:df:a6:bc:de:84:26:5d:58:4f:7a:a4:b7:6d:
18:0a:70:5d:69:5b:fc:20:29:23:e1:93:ee:88:41:94:80:e0:
39:f2:8e:e3:eb:10:38:f3:d7:9b:f8:07:e6:5d:d0:0e:4a:6f:
9f:ef:70:09:12:9e:19:4a:b2:5a:4a:3d:7c:12:53:1e:ae:68:
88:b1:b5:e0:48:dd:ca:d6:bc:7a:40:f5:10:d9:e2:89:20:d1:
59:11:eb:41:52:e9:29:0b:ff:42:a8:1e:2a:4c:76:45:46:5e:
df:78:3e:7b:c1:b6:9e:64:c0:8b:ad:7b:d9:aa:1e:0d:05:83:
a4:43:ad:f3:a8:e6:e5:f2:67:d4:0d:d5:54:40:e5:49:d5:06:
19:46:4e:c7:6b:42:0a:a7:88:18:2c:73:03:4c:b9:05:5b:aa:
d4:f5:4f:d7:d5:df:bc:ee:10:87:50:49:2d:3a:02:54:4f:5a:
44:03:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:35 2025 by rpki-client