Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/vjNiGGPMMIohREeXJHQsS5InGhc.roa
File: vjNiGGPMMIohREeXJHQsS5InGhc.roa (raw, json)
Hash identifier: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=
Subject key identifier: BE:33:62:18:63:CC:30:8A:21:44:47:97:24:74:2C:4B:92:27:1A:17
Certificate issuer: /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial: 019424B3992E6647C5AF826281A4D05F17F8
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/vjNiGGPMMIohREeXJHQsS5InGhc.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43435
IP address blocks: 78.155.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:99:2e:66:47:c5:af:82:62:81:a4:d0:5f:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be33621863cc308a2144479724742c4b92271a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:90:50:a9:b1:cc:ea:ef:9c:7a:95:ab:0e:
6b:ac:3d:70:b9:c4:31:2f:1c:0e:d7:45:1e:59:66:
5d:2f:38:dc:96:32:98:71:29:c2:ba:8f:d9:8c:04:
9c:37:2d:e8:f8:d8:30:de:49:61:25:3a:0c:8e:a4:
61:d3:4c:90:f9:bb:b3:90:d8:5d:df:91:db:c5:5f:
7a:5f:8e:fb:90:4f:89:a7:d5:73:c3:a4:ca:2f:64:
6e:5a:db:cd:2c:3d:fe:98:29:a2:25:4c:c9:3c:64:
45:1b:13:df:2a:37:e2:6c:38:97:80:09:0e:67:ef:
c0:11:ee:0f:ef:32:a2:9b:29:d8:9d:08:82:cb:15:
20:5d:58:22:e4:3d:3f:2f:10:c5:c9:12:be:7e:97:
1f:75:2c:39:fe:74:c6:c5:60:dd:aa:d0:c3:20:6c:
00:07:5d:01:71:3a:9c:aa:29:b3:4c:cb:47:da:21:
9f:5e:39:cb:33:5e:e4:45:c2:f4:2c:a7:53:e3:99:
52:74:d8:82:1a:67:3c:aa:bd:4f:94:0b:fb:0f:e3:
48:78:dc:30:e0:e1:e4:76:0d:54:e3:0d:1d:9d:94:
46:b7:7c:38:ba:df:2c:f0:16:37:97:da:ba:8e:d6:
53:c0:3d:ad:ba:7e:ad:89:ef:44:13:04:f6:50:20:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:62:18:63:CC:30:8A:21:44:47:97:24:74:2C:4B:92:27:1A:17
X509v3 Authority Key Identifier:
keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/vjNiGGPMMIohREeXJHQsS5InGhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.96.0/19
Signature Algorithm: sha256WithRSAEncryption
cb:c4:f7:d7:02:b4:ad:b1:1b:a5:a3:a1:8b:1d:f1:86:15:ce:
c1:d0:18:68:af:79:ee:17:0c:86:b5:97:7d:64:1d:91:45:7b:
97:05:6c:16:44:1e:7b:1a:59:00:c4:dd:20:10:64:44:bb:fb:
d2:25:af:b7:4a:23:83:7f:70:ed:19:18:75:e7:e9:f7:46:44:
de:47:0a:8d:68:bd:94:9f:aa:71:0d:ec:93:6d:29:0d:e7:27:
82:db:3e:89:b2:c3:b6:57:6a:12:de:10:c9:3b:30:ca:8e:cf:
b2:cb:fb:9d:2f:3e:b6:bc:1f:a6:e8:a0:73:8d:9f:11:df:e7:
7d:45:de:2d:4c:59:7a:5c:ca:bc:19:3f:a2:96:1e:cf:3b:52:
48:89:74:29:b8:8e:ba:9e:cd:92:30:36:3d:c0:74:2e:46:ae:
af:69:a2:ed:52:ac:14:00:01:ba:46:8d:7e:05:8f:ed:37:01:
d9:9a:1b:f2:b3:b9:57:f9:3d:b3:71:23:90:83:9b:14:52:19:
db:eb:07:1a:d7:d4:99:f6:b7:9c:7c:bd:e2:68:34:6c:5f:f0:
5a:96:2e:59:c3:46:5e:bd:28:bc:16:a5:92:ee:bc:68:59:ff:
cd:1e:a7:1f:fc:ad:84:64:86:d0:2b:b1:d9:b7:e6:08:00:f2:
c8:ee:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:32 2025 by rpki-client