Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/vkoeIYHKBiHw3JW2EwGeByZF2OI.roa
File: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (raw, json)
Hash identifier: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=
Subject key identifier: BE:4A:1E:21:81:CA:06:21:F0:DC:95:B6:13:01:9E:07:26:45:D8:E2
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019422FB6D20753B7E0852EED3DA530E5788
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/vkoeIYHKBiHw3JW2EwGeByZF2OI.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199723
IP address blocks: 45.157.12.0/22 maxlen: 24
185.41.128.0/22 maxlen: 24
185.252.180.0/22 maxlen: 24
193.160.33.0/24 maxlen: 24
2a01:59a0::/29 maxlen: 48
2a05:8580::/29 maxlen: 48
2a0f:3880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6d:20:75:3b:7e:08:52:ee:d3:da:53:0e:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4a1e2181ca0621f0dc95b613019e072645d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:9b:ec:c4:66:d2:5a:d8:5f:f4:da:e2:2c:
fd:25:f9:59:7d:62:b5:ff:2a:b1:e3:39:14:27:77:
cd:38:35:58:7c:b7:be:41:35:db:98:3a:da:2b:93:
5f:79:bb:e2:5a:2d:99:d6:68:94:c4:a1:00:14:c8:
32:6a:e6:6b:a3:97:17:75:3b:f8:55:22:2c:fe:b0:
81:2f:72:3b:9c:80:ec:35:79:49:53:84:d4:67:ef:
fa:60:6b:43:70:2f:8a:92:10:f5:60:df:46:1a:9a:
27:7b:c0:df:12:05:0c:58:ce:cf:c1:9a:42:ce:ce:
17:86:f0:90:47:e1:50:67:a8:0b:45:2c:66:e2:55:
73:7b:6c:2e:47:f9:7c:52:7e:d3:5b:0a:68:74:6a:
57:a7:e6:c0:1b:40:43:4e:f8:91:47:c7:3a:5e:51:
85:c8:22:b6:1f:3d:36:77:64:f9:60:60:f1:28:19:
ca:b2:09:2f:b9:12:97:3b:ee:9e:82:d7:a2:4c:b2:
ca:18:7c:bb:09:a7:66:80:d5:57:55:1c:24:4d:d5:
fc:25:3b:03:e8:b8:37:e6:57:02:98:d9:02:2a:fd:
af:e4:ff:a6:9e:ef:1c:c2:9f:d3:47:3c:9c:13:89:
89:de:83:37:55:7e:6f:bf:57:be:bb:f0:f1:7b:cd:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:1E:21:81:CA:06:21:F0:DC:95:B6:13:01:9E:07:26:45:D8:E2
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/vkoeIYHKBiHw3JW2EwGeByZF2OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.12.0/22
185.41.128.0/22
185.252.180.0/22
193.160.33.0/24
IPv6:
2a01:59a0::/29
2a05:8580::/29
2a0f:3880::/29
Signature Algorithm: sha256WithRSAEncryption
59:2c:b7:b1:82:91:bc:66:68:41:67:11:ec:09:5f:9c:cc:35:
21:4b:1a:c8:0d:12:14:2f:7b:0e:f6:e5:ba:47:3f:8c:d8:9d:
43:0d:84:ae:d4:3c:e9:2d:35:5c:a3:43:ef:fc:50:40:be:41:
43:f5:0a:3b:e5:98:8e:71:15:f3:9c:01:c7:42:a0:89:55:81:
b1:08:4e:e7:c5:a4:d6:d4:f7:03:69:06:aa:a7:42:ec:af:11:
c5:90:fa:62:42:78:f5:d4:19:dc:23:d1:a8:23:4b:9c:b8:d3:
8d:8e:f3:c7:95:a0:34:b7:29:fe:7d:ec:fa:ea:51:50:03:c3:
ee:b4:a2:6e:fc:c9:71:fd:9f:fe:22:e6:26:51:3f:0f:b7:90:
ec:2d:3c:71:07:9a:a2:cb:c4:37:35:79:51:c2:50:68:b8:cd:
8e:59:ad:49:2e:3c:d6:1e:66:00:aa:4b:2f:9b:a5:eb:57:20:
af:cc:09:87:77:f8:dd:77:cf:87:2a:61:19:ed:d3:07:6d:74:
c4:c7:81:27:13:6d:83:66:09:29:47:83:1e:7f:7a:5f:0a:7c:
66:c0:f1:01:0b:07:fa:21:01:42:48:7e:50:3a:e4:cf:36:3e:
62:c4:96:ff:30:ff:af:79:44:d6:f4:b9:19:03:ee:02:c9:f8:
93:1a:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:22 2025 by rpki-client