Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VZe0VZbzvhihfryQwBZWP9qmilk.roa
File: VZe0VZbzvhihfryQwBZWP9qmilk.roa (raw, json)
Hash identifier: eJRqR5DUk3+tMloi976bezTVbiAkNS9Gom/PY++T4jE=
Subject key identifier: 55:97:B4:55:96:F3:BE:18:A1:7E:BC:90:C0:16:56:3F:DA:A6:8A:59
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3B1ACBB03CAD5412498E3727EA27E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VZe0VZbzvhihfryQwBZWP9qmilk.roa
Signing time: Thu 02 Jan 2025 15:47:55 +0000
ROA not before: Thu 02 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b1:ac:bb:03:ca:d5:41:24:98:e3:72:7e:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5597b45596f3be18a17ebc90c016563fdaa68a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:e8:3d:14:72:83:7a:4d:a2:34:b0:c0:c0:
97:0e:4a:7e:01:7c:7f:a7:aa:7b:37:04:70:85:b2:
06:b0:24:ba:44:99:56:10:7a:bd:f2:44:c8:30:bb:
12:87:78:1f:6b:7e:36:26:7e:0d:6e:94:b5:54:ed:
fc:fe:b1:03:1e:97:e9:a1:c1:f5:a2:ca:3f:f9:05:
72:4b:b5:b6:1d:92:07:57:c3:80:3b:5c:51:f3:ab:
18:90:fe:7b:2d:f9:0b:4f:be:91:90:71:6f:5b:7c:
63:d5:ff:bc:4a:36:56:c3:09:a5:7a:5e:ae:90:f5:
4b:a2:e3:73:03:70:78:84:1c:b4:60:81:2d:20:2f:
03:a3:3f:80:3b:d4:a6:4b:c8:14:36:c0:c1:bd:e1:
40:02:e9:51:5b:8b:88:9f:0e:f1:84:d1:63:69:b9:
bc:10:da:04:95:22:8e:5c:be:3e:80:b9:d6:eb:33:
d9:5f:c8:9c:63:4c:65:07:15:30:82:1d:37:c5:32:
fc:71:66:a4:57:f0:a4:ab:85:8b:7a:84:85:6a:65:
bc:0c:99:af:da:db:87:0a:5a:ff:f0:7c:03:e2:1d:
f2:7d:ce:5d:97:8e:c0:1d:44:6a:cb:ef:19:5f:94:
1c:97:31:d8:b6:77:39:86:64:28:10:8a:8f:55:24:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:B4:55:96:F3:BE:18:A1:7E:BC:90:C0:16:56:3F:DA:A6:8A:59
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VZe0VZbzvhihfryQwBZWP9qmilk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
136.144.26.0/23
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e2:28:18:f6:e6:b0:9f:0a:8b:85:3f:5b:12:c6:fb:e5:e5:
8e:0e:f5:f5:df:d3:4d:73:95:04:5f:85:1f:75:93:32:f9:78:
de:64:11:87:8d:b2:23:3b:f5:0c:53:b1:0f:1f:73:9c:eb:7d:
58:ab:5f:3e:83:df:de:81:ed:19:14:36:bf:1b:17:e9:f9:03:
e0:aa:17:7a:8a:48:d9:5b:a2:a4:e1:65:38:ab:15:f0:00:f3:
68:de:21:b8:a0:85:7e:3e:90:95:48:f7:4e:e9:bc:20:6d:d0:
4b:a5:25:15:a6:a7:a3:f9:a1:52:25:94:e8:49:11:56:f7:37:
3d:aa:ca:8d:20:2c:18:5e:12:ca:f3:11:95:e3:1a:81:e8:fa:
15:91:73:6b:ef:d3:c8:68:8c:d3:fb:0b:f2:0d:67:01:94:d8:
47:2a:67:55:08:f4:ce:54:7b:84:12:97:48:d1:e3:ff:70:65:
d3:b7:09:65:b7:9d:0e:27:f9:10:16:ab:a0:a8:f3:2b:13:82:
83:25:14:00:6f:a0:23:a6:9f:f6:1c:da:92:10:21:00:ab:d7:
d9:fd:6f:e3:fb:c6:69:75:08:ca:c3:fa:df:b4:65:42:96:6c:
14:7d:82:27:84:c6:4a:22:83:cd:65:7c:bc:8e:a5:9a:55:a5:
34:45:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:48:33 2025 by rpki-client