Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/jF6aKXBNyHTawjaz9GVexS6_Vps.roa
File: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (raw, json)
Hash identifier: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=
Subject key identifier: 8C:5E:9A:29:70:4D:C8:74:DA:C2:36:B3:F4:65:5E:C5:2E:BF:56:9B
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211C40A2A9F3E07F5EFBF8906B388C
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/jF6aKXBNyHTawjaz9GVexS6_Vps.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 89.107.10.0/24 maxlen: 24
146.19.207.0/24 maxlen: 24
176.126.103.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
217.114.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1c:40:a2:a9:f3:e0:7f:5e:fb:f8:90:6b:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5e9a29704dc874dac236b3f4655ec52ebf569b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:59:fe:6f:95:38:92:bf:ef:4b:b3:1a:d6:
ee:79:ea:4a:42:7e:ca:ae:81:8f:af:8e:47:dd:d4:
e2:d2:59:db:c8:b2:c4:96:65:cb:75:f2:08:64:86:
fc:c9:5e:af:f8:05:eb:9b:d8:8a:6f:83:9c:39:52:
2f:07:f8:30:ed:d2:8b:ff:b4:66:e3:21:70:3f:de:
72:c0:00:07:cb:a7:60:9e:86:9c:df:af:2e:42:97:
be:ad:a2:36:56:f8:da:02:5f:f5:18:31:3e:69:ac:
ab:81:96:85:85:67:9c:db:2c:d0:7f:dd:63:40:44:
e9:21:1a:a9:4a:07:ed:df:25:98:2d:0f:b5:6d:5d:
cf:30:0f:70:b8:b2:99:96:ce:17:5f:71:f5:93:60:
f1:a7:49:53:d4:9f:5b:86:1f:c9:b3:f0:9a:f9:37:
4a:8e:58:fb:02:9f:f1:df:51:6d:7c:16:19:f7:e2:
72:7a:83:e6:75:99:41:0f:d6:1f:c7:6c:b9:0d:d0:
68:16:d3:56:f5:7d:65:e7:3f:77:9d:de:b5:8a:51:
b7:99:5b:5c:1a:5c:59:6d:4a:5d:7b:39:59:f8:dd:
a1:a8:a8:3d:36:4d:66:6c:06:7c:ba:83:dc:c0:02:
ef:d0:ea:2e:80:6e:f7:e0:29:36:e1:15:38:7c:6f:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:9A:29:70:4D:C8:74:DA:C2:36:B3:F4:65:5E:C5:2E:BF:56:9B
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/jF6aKXBNyHTawjaz9GVexS6_Vps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.10.0/24
146.19.207.0/24
176.126.103.0/24
178.250.186.0/24
178.250.191.0/24
217.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f7:41:89:55:31:cc:28:fc:3e:63:f4:ef:aa:c9:4d:63:30:
f4:b4:bb:68:3d:b0:50:1a:16:2f:32:d8:78:9a:b4:1a:3c:79:
fc:ef:09:e8:ef:ad:5e:28:30:f9:12:53:69:d6:6c:3c:26:a8:
53:8a:b4:ae:e7:70:a6:c2:6e:e0:76:16:e6:84:be:c2:3a:bc:
2b:b1:53:db:45:57:e7:ce:07:9f:e3:d6:7d:fd:79:cb:ac:91:
e3:fd:8d:ab:2a:6f:2e:ac:25:c0:5b:55:11:e0:be:0e:4b:da:
c5:f5:1d:d9:58:96:fe:fb:c5:3d:7c:be:0b:0c:e5:78:18:b5:
5f:b3:0d:0d:41:7c:d5:85:b0:82:f8:2e:da:50:b5:e8:64:de:
c5:45:f3:6c:af:6a:75:11:cf:f4:08:27:1c:2c:35:03:e1:4d:
70:ee:05:0e:3c:b1:51:78:c9:c1:9b:19:13:fa:d1:02:2c:ae:
2f:6b:2a:94:11:92:09:50:9d:f4:e5:d4:a4:e2:1a:21:0f:9b:
94:a1:41:c0:60:d0:53:59:8f:7e:9b:58:0d:c2:e7:63:af:35:
be:32:29:4f:e8:69:b9:9e:31:c9:d6:3b:a1:df:2c:84:96:b2:
df:7a:3c:1d:23:a3:dd:ab:73:4b:9d:50:ef:12:67:e4:64:bd:
24:59:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:01 2025 by rpki-client