Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/VXw6UdBxXA-7nRf32K-vpMGkPlc.roa
File: VXw6UdBxXA-7nRf32K-vpMGkPlc.roa (raw, json)
Hash identifier: QzJre4EdHsiyKrTcYmbfZ0cHsJk3xWmL9K5cUgcsYIU=
Subject key identifier: 55:7C:3A:51:D0:71:5C:0F:BB:9D:17:F7:D8:AF:AF:A4:C1:A4:3E:57
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0195651A092B0B5C4A3FC021DE4F3B7F38F2
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/VXw6UdBxXA-7nRf32K-vpMGkPlc.roa
Signing time: Wed 05 Mar 2025 06:59:19 +0000
ROA not before: Wed 05 Mar 2025 06:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12993
IP address blocks: 37.203.32.0/21 maxlen: 21
37.203.32.0/23 maxlen: 23
37.203.37.0/24 maxlen: 24
37.203.38.0/24 maxlen: 24
37.203.39.0/24 maxlen: 24
81.94.224.0/20 maxlen: 20
81.94.229.0/24 maxlen: 24
89.111.0.0/18 maxlen: 18
89.111.38.0/24 maxlen: 24
178.16.16.0/20 maxlen: 20
185.34.24.0/22 maxlen: 22
185.34.24.0/23 maxlen: 23
185.34.26.0/23 maxlen: 23
185.219.156.0/22 maxlen: 22
193.108.144.0/22 maxlen: 24
193.108.144.0/23 maxlen: 23
193.108.185.0/24 maxlen: 24
194.9.175.0/24 maxlen: 24
2a00:17c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:1a:09:2b:0b:5c:4a:3f:c0:21:de:4f:3b:7f:38:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Mar 5 06:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=557c3a51d0715c0fbb9d17f7d8afafa4c1a43e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:99:6b:c5:cb:d9:59:55:23:1d:23:96:e4:
6e:56:22:68:13:bd:f2:1e:aa:14:c1:06:5c:e1:1b:
c6:97:d4:f6:09:b2:48:55:f8:5a:79:c7:d5:0b:76:
c4:f8:4c:36:be:9d:08:08:1c:22:12:61:4e:57:cc:
7c:6d:fa:59:ce:0e:3a:75:4a:29:39:26:58:6a:08:
f3:d9:61:01:75:83:a1:6a:4c:53:c6:8f:e2:8c:18:
49:c4:9a:52:fa:93:bd:30:9d:58:49:ee:22:13:2d:
d5:e0:83:c4:57:65:94:f8:93:18:c2:94:6c:61:a7:
85:01:b5:79:be:ac:c6:e6:7b:65:e8:37:8c:dc:57:
03:30:20:c2:31:a3:4f:ad:b9:d7:f9:67:1b:79:5e:
85:e3:4d:67:54:3f:13:5a:7f:2d:4e:dd:43:08:41:
b9:04:a7:50:2e:af:50:cb:a2:11:a6:f1:56:05:55:
08:d1:ca:8f:32:c2:01:e2:00:25:65:77:d7:d5:ba:
28:09:96:6a:e7:61:68:2c:c2:07:a2:35:33:ef:6e:
50:3b:84:aa:ea:8e:9a:dd:f8:c2:57:43:18:49:97:
02:4d:08:e4:f4:4f:63:3a:8a:82:2a:05:eb:dc:a4:
40:24:d3:f3:2e:e7:89:f7:0e:cd:d9:34:25:18:01:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:3A:51:D0:71:5C:0F:BB:9D:17:F7:D8:AF:AF:A4:C1:A4:3E:57
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/VXw6UdBxXA-7nRf32K-vpMGkPlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.32.0/21
81.94.224.0/20
89.111.0.0/18
178.16.16.0/20
185.34.24.0/22
185.219.156.0/22
193.108.144.0/22
193.108.185.0/24
194.9.175.0/24
IPv6:
2a00:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
65:3c:74:a4:ad:d1:f4:d8:2f:a2:6a:77:6a:97:87:35:54:e7:
b6:93:d5:21:9c:e6:3e:88:c6:ba:ce:cf:5b:de:85:b9:c4:94:
e3:a3:da:b5:f2:7f:e2:39:46:ba:3e:9f:d8:46:eb:08:72:22:
4c:6e:04:cf:47:cf:66:c6:45:67:5d:8b:e9:99:68:03:57:59:
1c:16:10:36:4a:e9:43:f5:e9:49:1a:14:2f:8e:0c:83:02:69:
df:c5:a3:0d:15:17:1f:4b:a4:c2:a9:ed:b3:2a:7d:f8:34:2c:
c6:e0:80:02:cc:aa:1f:fb:91:cc:d5:ff:36:d3:e3:c7:00:48:
91:66:b7:ac:21:21:c0:7e:54:4e:8c:26:37:f2:5e:3a:0e:ee:
70:ed:a5:a7:6d:65:cd:99:5d:98:1e:72:72:a7:22:2e:c7:a0:
20:37:13:bb:f5:64:d8:b0:33:28:8e:2e:6f:df:14:99:85:63:
26:4f:70:97:8e:ac:0c:15:23:25:4a:27:31:c8:b1:05:1a:e2:
b3:f3:a5:7d:f8:17:e2:5f:ff:17:7f:60:30:47:4c:7b:12:a4:
bd:be:4a:2a:71:ff:9c:f9:95:c9:c0:9a:db:c0:f6:0e:04:86:
68:aa:e6:7e:ce:af:5e:24:c3:04:a8:b5:03:b7:f6:d4:a7:0a:
e7:6f:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:16:47 2025 by rpki-client