Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VnKbkzMWAdNyZPCEQCwxH17zOTU.roa
File: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (raw, json)
Hash identifier: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=
Subject key identifier: 56:72:9B:93:33:16:01:D3:72:64:F0:84:40:2C:31:1F:5E:F3:39:35
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D4D83012D245E1BD0F8D56744ADE
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VnKbkzMWAdNyZPCEQCwxH17zOTU.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 88.80.142.0/24 maxlen: 24
88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d4:d8:30:12:d2:45:e1:bd:0f:8d:56:74:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56729b93331601d37264f084402c311f5ef33935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:60:16:74:b8:e6:db:90:33:0a:f4:62:0f:
1a:fd:94:8d:7a:64:ae:4d:dd:e8:3f:e7:55:10:5f:
04:94:c3:ad:37:73:44:4f:f2:39:cd:65:a1:ea:a6:
02:de:97:3b:ba:78:b7:8f:bb:6d:73:42:19:1b:fe:
2b:85:95:d9:bc:d1:35:a2:75:5c:e0:a4:c7:66:4c:
4b:4c:ed:3d:83:bd:20:8d:14:7d:a3:3c:bd:db:46:
ac:6d:d6:55:28:cf:3f:f0:3c:82:cd:bf:c7:0a:bf:
da:b5:f2:bf:94:27:2e:86:1b:cb:10:49:88:bd:f6:
0a:bc:1a:a3:0b:cd:5b:a5:6d:e5:6a:8d:56:21:85:
c1:3f:c7:cb:9e:86:45:d5:af:d8:15:74:fe:04:29:
ce:ab:8f:73:0c:d8:f9:2f:08:f4:c6:6d:d9:ad:44:
f1:70:ee:66:4e:cd:cd:e3:43:05:0b:a3:9e:a7:49:
80:3c:5f:ea:7f:9b:86:dc:e8:6d:56:6f:20:b2:33:
02:d2:12:35:38:e8:d6:7b:fb:cc:7f:b0:0f:5c:ce:
88:ae:32:31:8b:b3:0b:a3:8a:01:47:47:59:31:4e:
ff:83:e4:53:b4:33:ff:bf:0d:4f:6d:77:60:50:09:
b7:c9:b7:0e:19:a1:1b:bb:ac:21:ca:0d:3f:94:3d:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:9B:93:33:16:01:D3:72:64:F0:84:40:2C:31:1F:5E:F3:39:35
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VnKbkzMWAdNyZPCEQCwxH17zOTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
92:7b:20:f5:d3:85:8d:44:52:65:44:ff:dc:3c:1f:35:94:2c:
d5:60:6d:d1:2f:5d:fb:0f:68:a9:c8:e3:b0:76:09:22:f9:c2:
64:49:db:78:6b:38:53:6b:37:b4:7a:3f:dd:87:d4:47:c0:94:
8f:e6:75:f6:44:59:9f:06:8e:c7:89:e1:8b:ef:bf:71:46:b4:
9c:a4:6a:b2:f0:fb:4a:6a:3e:16:e1:c1:71:f7:4f:b1:5a:7b:
ae:42:a6:2f:ca:7b:ba:83:41:e5:97:18:f0:37:0d:29:dd:b1:
e8:ea:52:5f:76:5f:ab:af:b1:74:75:0b:99:5a:e4:72:9b:33:
eb:e8:74:5d:31:ec:74:0b:dc:3e:c3:a1:ab:73:a5:36:67:32:
a2:64:05:2d:b4:01:c6:c9:29:16:0d:cc:39:8a:0f:5b:75:39:
b4:dc:c6:92:1f:5b:8b:95:cd:b9:5c:6b:da:38:3c:e4:70:8a:
be:20:c7:fe:7d:81:4c:60:fa:0d:1a:29:19:af:7a:b9:46:0d:
e4:cb:d1:82:9f:75:61:77:67:b1:e6:cb:e6:77:d6:35:fc:a8:
79:9d:d1:fd:ff:f7:09:38:ef:e2:57:26:cd:d8:aa:0e:7e:6e:
02:43:98:4c:05:fd:0d:ef:38:b4:73:7b:22:34:12:71:a9:70:
df:a4:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:57 2025 by rpki-client