Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VPM0OMnO2wh_LplFrkKADXd1WFM.roa
File: VPM0OMnO2wh_LplFrkKADXd1WFM.roa (raw, json)
Hash identifier: Csf4TdEM18vdqkEgq7rnyfeE+MEntO/Z/RN2hUDrVBY=
Subject key identifier: 54:F3:34:38:C9:CE:DB:08:7F:2E:99:45:AE:42:80:0D:77:75:58:53
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3ACEB318B457A62BACCC6525CF872
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VPM0OMnO2wh_LplFrkKADXd1WFM.roa
Signing time: Thu 02 Jan 2025 15:47:54 +0000
ROA not before: Thu 02 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209014
IP address blocks: 45.149.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ac:eb:31:8b:45:7a:62:ba:cc:c6:52:5c:f8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f33438c9cedb087f2e9945ae42800d77755853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:c2:17:29:a7:6d:96:95:e7:dd:f2:b2:54:
c1:32:56:04:fd:85:0a:77:c6:19:41:f4:17:29:fd:
be:01:fd:97:f3:d0:d4:c2:1a:cf:64:98:a9:34:97:
04:00:22:9e:65:3b:7e:69:c1:96:1c:d5:15:8d:4a:
82:37:f6:51:6a:59:61:b3:c5:6b:8d:5c:cd:cf:c6:
f8:d7:0d:fe:13:84:7d:f4:cc:a5:16:8b:f9:a9:1a:
23:14:19:38:71:87:2a:a4:40:ae:a9:ab:6d:bb:ba:
e8:dd:dd:71:52:e6:46:8b:24:db:6b:f9:75:a0:f4:
d7:95:ad:6b:31:5e:10:13:38:4e:49:49:3b:24:f4:
a2:42:20:c6:e6:94:ba:8a:37:87:c1:0f:a7:b9:ea:
be:81:a7:df:09:8c:0a:d8:c2:3b:a2:dc:f6:5b:ee:
97:bc:ee:fd:2b:3a:23:ee:09:74:34:71:c8:15:32:
fa:83:62:57:b2:35:b3:48:9b:ed:41:8b:ae:34:3a:
66:b9:76:c4:c3:88:95:89:78:cb:e9:33:67:be:1e:
e6:1a:6b:dc:c8:6e:fc:bf:5b:52:55:ec:3f:de:b1:
a7:3f:59:71:01:54:fd:cc:dc:79:e8:43:24:6a:4f:
e3:35:fa:5b:a0:b3:58:b2:80:08:c9:0c:cc:4b:4f:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:34:38:C9:CE:DB:08:7F:2E:99:45:AE:42:80:0D:77:75:58:53
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VPM0OMnO2wh_LplFrkKADXd1WFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f5:80:f4:48:6e:84:20:e9:2c:a4:17:cf:f4:5c:00:bd:e5:
31:ae:b0:f9:46:c9:e4:42:0b:73:3c:1f:a9:a8:5d:54:43:e0:
a5:f2:0f:06:86:7d:57:f6:85:75:17:a6:60:ca:4d:5c:74:5b:
a5:d8:68:a6:7c:4d:5b:16:f1:b5:9f:1c:ad:b5:75:de:cd:06:
43:12:8f:6a:8b:11:92:73:67:a1:6e:1a:01:69:6e:d6:c9:96:
64:fa:6a:59:98:2c:dc:c3:f5:28:cf:94:55:2d:e5:d4:1c:f0:
66:c9:8f:0f:41:3d:9f:12:73:17:22:84:fb:e3:eb:c2:e8:06:
97:44:de:48:ea:8e:7c:ef:f8:62:42:22:43:1f:8e:47:72:b4:
4b:29:99:23:dc:03:bc:ca:10:10:c3:0a:3a:20:7e:a5:a6:92:
dd:d9:13:a5:69:dd:32:1e:5e:f9:ae:4e:05:e2:a2:3a:1e:05:
36:7a:80:39:11:13:fd:6c:11:69:64:c6:45:4a:a2:9c:3f:3b:
c8:8d:8d:c9:02:97:a8:ca:6e:80:87:81:77:27:92:34:44:08:
25:7f:46:df:b9:80:48:13:c8:57:81:ce:c1:57:09:56:dd:e2:
68:40:c2:8a:cf:f1:a6:16:f4:2e:e3:b8:b2:b1:3e:45:c2:f6:
ad:a9:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:04 2025 by rpki-client