Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VUUcb-LMlaFTguNG8ROQ9j95kzw.roa
File: VUUcb-LMlaFTguNG8ROQ9j95kzw.roa (raw, json)
Hash identifier: JhVJC2VQbfjdfboVQUv4XySnQ6DAL0wPnusc2HF3cBc=
Subject key identifier: 55:45:1C:6F:E2:CC:95:A1:53:82:E3:46:F1:13:90:F6:3F:79:93:3C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E9D034D40CDF5DFB0FC9A0E177B3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VUUcb-LMlaFTguNG8ROQ9j95kzw.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 213.210.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:d0:34:d4:0c:df:5d:fb:0f:c9:a0:e1:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55451c6fe2cc95a15382e346f11390f63f79933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:ab:bf:48:51:4a:0f:45:ea:67:fb:ab:9e:
85:37:2f:41:11:e7:04:ec:4c:6a:42:b6:b4:f5:9b:
9a:28:e5:7b:f7:23:01:0c:b9:21:2b:28:87:61:3f:
f1:10:01:51:76:a1:6b:d1:1c:32:77:ec:24:09:ed:
fc:2f:a7:58:5d:b5:c2:25:2c:d5:f6:c8:4b:ed:3d:
50:08:ad:a8:5e:07:18:54:48:c6:2e:b8:98:c6:fe:
4e:67:52:5b:63:4e:69:c6:d8:af:93:7b:56:04:5c:
cd:a5:80:8d:6e:1f:ae:42:36:a7:ed:22:b8:67:7b:
69:8d:6c:ee:45:10:89:8e:eb:e3:5a:8b:47:50:10:
0d:99:2e:c2:34:db:3d:48:8a:a9:61:2e:ce:a7:03:
64:31:ba:80:33:d1:c0:9c:31:d0:b0:c7:b5:a6:9e:
19:b9:c3:4e:20:fa:3b:4a:5b:c2:a4:f6:ac:a1:87:
9f:f4:e4:27:e3:4d:62:f4:db:ac:78:b4:e2:37:8a:
69:63:ea:56:f4:3c:02:5e:0b:5f:32:af:8c:a4:a2:
0e:82:9a:5b:85:ed:25:1d:c5:84:bb:95:dd:3c:be:
d9:5e:69:2e:64:5a:73:3a:30:2a:3c:1c:7b:db:3a:
bf:fb:cf:b3:03:8e:ee:df:c7:eb:96:94:da:85:be:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:1C:6F:E2:CC:95:A1:53:82:E3:46:F1:13:90:F6:3F:79:93:3C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VUUcb-LMlaFTguNG8ROQ9j95kzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:64:7d:ab:98:a7:1e:c0:75:80:8b:d3:8d:f0:ad:b4:39:
df:a9:40:a8:9a:e6:5d:7d:02:aa:c7:b9:12:9e:0d:5e:c3:ec:
fc:65:07:5d:1f:00:a5:f2:a0:d1:e5:20:61:8b:34:ed:fb:26:
3d:35:4c:41:6d:96:ee:d8:08:4c:54:0b:a0:d5:34:07:4c:92:
d5:74:26:8b:21:f0:39:29:36:00:ed:be:c3:45:20:4c:be:97:
23:ef:4a:5b:78:38:62:61:b9:d4:25:60:0f:65:c8:0b:25:fd:
10:e9:45:cd:08:a6:2c:d7:fe:c4:93:70:1b:78:21:9b:75:86:
19:7c:8a:97:bb:d2:ce:44:d1:72:7a:a7:57:5d:50:0d:ba:bb:
40:4c:d9:2a:26:8d:49:4e:87:9b:af:d7:71:fa:c4:9d:12:0a:
7d:a3:93:08:35:47:c9:6e:21:62:56:25:83:18:6c:05:81:5b:
b2:42:15:e9:8f:84:95:9f:6f:11:a0:8d:bb:da:81:00:3c:e0:
b7:5a:17:67:c8:73:ab:2f:c7:c7:e3:f0:fa:6a:2a:4b:df:75:
1e:47:3a:44:97:30:d1:59:a1:d2:50:f8:d1:91:2d:b5:0c:a1:
2e:aa:4c:ca:1c:35:f7:7b:08:48:2c:1f:26:73:1e:06:9e:7d:
3a:d5:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:37 2025 by rpki-client