Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Vvvjd6ecfz_DRFl4N0BIYvVJ6RQ.roa
File: Vvvjd6ecfz_DRFl4N0BIYvVJ6RQ.roa (raw, json)
Hash identifier: dWvfT24WoQ560tg0h62380in2ZUu8Tz5wQSugHY3OKc=
Subject key identifier: 56:FB:E3:77:A7:9C:7F:3F:C3:44:59:78:37:40:48:62:F5:49:E9:14
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019700E6CB6B625893E793F6960604586B8A
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Vvvjd6ecfz_DRFl4N0BIYvVJ6RQ.roa
Signing time: Sat 24 May 2025 06:06:54 +0000
ROA not before: Sat 24 May 2025 06:06:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214357
IP address blocks: 81.30.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:e6:cb:6b:62:58:93:e7:93:f6:96:06:04:58:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: May 24 06:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fbe377a79c7f3fc344597837404862f549e914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:53:95:44:d4:11:3f:cf:9e:e0:3c:c7:15:
35:48:ce:bc:e4:1b:55:f1:20:e0:f7:db:d8:0d:2f:
28:24:98:34:b7:40:84:b8:71:7a:d5:fc:03:68:e9:
b4:72:2f:8c:90:4a:2c:0c:fb:ea:26:b6:9c:1b:82:
08:98:7c:a7:97:2c:b7:cd:d4:2b:01:8e:3d:86:f9:
57:86:a6:bc:f3:6a:59:1d:48:d0:34:7b:ad:96:b6:
c1:71:f4:2e:40:99:44:fd:35:79:20:14:94:66:cc:
9a:93:50:4f:d3:38:6a:7f:a4:bf:97:df:d0:9b:cf:
4a:9d:2c:7b:f3:57:d0:71:d0:53:e5:75:39:fb:5d:
fb:7d:8a:d2:cd:e1:36:7a:5c:88:d0:37:23:97:12:
ea:89:c2:a0:ea:f0:fa:84:70:a2:46:d3:09:77:f1:
44:96:cf:d4:91:f6:9a:6b:46:34:1b:9d:04:e2:99:
d2:5c:fc:cb:a2:52:90:44:31:59:58:af:3b:ca:27:
d3:1e:68:c7:32:7c:d3:d8:60:c5:ef:91:fa:10:f1:
c5:6b:6e:e8:60:a0:e4:0c:a6:79:46:12:fe:0b:09:
18:5d:0e:9b:d7:29:41:a9:d2:9a:e5:2b:16:f7:5b:
20:eb:9a:eb:3e:7e:c7:ef:0e:f7:7f:d6:9c:8b:18:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:E3:77:A7:9C:7F:3F:C3:44:59:78:37:40:48:62:F5:49:E9:14
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Vvvjd6ecfz_DRFl4N0BIYvVJ6RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.98.0/24
Signature Algorithm: sha256WithRSAEncryption
11:83:97:84:61:67:91:47:a8:f5:1d:3f:70:cc:bf:9d:55:05:
86:f0:55:97:ec:d3:14:fa:7f:e8:61:a6:7c:16:40:d0:26:1c:
1f:f7:c7:f5:c1:4e:44:23:4b:70:f5:13:f3:ac:c3:48:38:89:
d8:ba:de:96:b8:1a:ea:08:50:6c:ee:36:c0:13:f1:d0:a4:51:
41:13:34:1d:cb:d4:f2:df:e6:08:d6:92:d6:b9:63:ce:1d:33:
d6:34:6a:a6:e4:18:56:e0:f2:63:9a:7c:43:4a:1c:c4:3c:97:
c9:7b:c0:48:9a:4f:3c:47:a3:ad:0a:85:be:b0:ce:89:2d:25:
3e:3b:92:2d:7a:cf:68:20:76:55:76:ea:9d:c7:f0:94:77:88:
b5:81:75:a4:69:60:d9:bc:7a:66:2e:9d:f0:06:f5:b9:80:9c:
4f:76:cc:d5:17:34:78:fe:1d:03:5c:86:bc:8e:9b:c8:06:1c:
2f:86:93:12:49:f9:ac:fd:0a:4f:42:df:ff:25:82:64:c8:8a:
02:c3:f3:e8:be:62:66:4f:98:83:df:81:19:52:77:36:a7:a5:
43:27:c1:90:f3:5c:bc:5d:5a:b6:18:73:1c:01:54:54:6a:58:
48:c4:bb:ae:3f:3c:7b:da:c5:8e:7f:0d:a4:6e:c2:59:6c:05:
8a:54:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:22 2025 by rpki-client