Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/VThOfYn2yicDk7nCFvApHsO86Wg.roa
File: VThOfYn2yicDk7nCFvApHsO86Wg.roa (raw, json)
Hash identifier: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=
Subject key identifier: 55:38:4E:7D:89:F6:CA:27:03:93:B9:C2:16:F0:29:1E:C3:BC:E9:68
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019426D941428C77528552CD876A3F9BBB8E
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/VThOfYn2yicDk7nCFvApHsO86Wg.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 213.128.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:41:42:8c:77:52:85:52:cd:87:6a:3f:9b:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55384e7d89f6ca270393b9c216f0291ec3bce968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:04:e9:7f:c3:b7:d1:cd:6e:2c:3c:07:e1:
96:23:98:c9:dc:51:95:e8:a0:34:d6:65:5e:24:14:
93:f0:14:40:d2:54:01:1b:88:a8:bb:f7:a8:af:1e:
4d:6b:d8:d5:80:fc:11:c5:93:d3:88:31:e1:35:f4:
c2:2f:32:a1:44:9d:10:31:e4:63:31:3b:e4:70:c7:
86:aa:b9:a8:ce:02:03:69:fe:e9:2e:0d:ad:26:97:
04:45:83:b1:90:60:6f:84:df:e3:e2:46:80:1c:e3:
4e:22:ea:d4:df:7d:0b:85:0e:1e:ba:8a:b5:90:4f:
3d:8f:00:2c:d4:3d:e4:33:29:cb:06:67:5b:c4:5a:
09:0f:f4:33:da:ea:25:d0:03:83:91:56:2e:a3:c4:
b4:af:2e:6b:90:ab:7c:2a:d1:85:81:89:69:29:39:
c3:b8:79:ea:1b:3c:fd:59:e9:06:66:f2:06:a6:39:
80:93:26:c0:7e:66:1c:93:e6:24:ca:b8:16:29:e5:
55:0e:4d:ac:54:36:5a:a2:59:98:a6:18:9d:4b:8a:
1f:86:4b:e0:e5:7a:2d:84:a2:86:6c:39:55:93:ba:
61:d6:1d:44:cc:53:46:80:ea:26:46:57:4d:44:4f:
34:89:7f:bc:4c:13:9c:99:6f:87:b3:b9:57:5f:d2:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:4E:7D:89:F6:CA:27:03:93:B9:C2:16:F0:29:1E:C3:BC:E9:68
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/VThOfYn2yicDk7nCFvApHsO86Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f8:79:d3:98:34:b7:fd:31:c3:10:f1:b2:ff:19:01:ba:3c:
b1:ea:d1:f2:7d:c0:d1:8c:b3:fb:7c:89:b6:45:e6:bd:e9:15:
67:6e:11:c8:7e:ed:f4:63:f3:c1:59:27:22:87:e3:6f:61:17:
16:85:2c:25:77:02:19:be:03:8c:7d:af:f7:d9:41:fe:75:30:
9a:9f:12:1f:aa:03:d0:8b:cd:29:cd:57:c3:b5:3a:37:0b:65:
9f:03:4b:0b:48:f9:ee:58:b1:7c:04:63:a5:86:6b:64:b7:d1:
8c:21:48:19:3b:c9:95:43:f3:e6:6c:80:5e:03:86:96:1e:8a:
83:18:36:d0:af:2c:aa:39:fe:1d:57:de:bd:02:8b:b2:d8:60:
c5:94:c5:6f:c7:dc:fd:e2:43:30:2e:fd:f3:b9:22:9c:2c:a1:
b6:35:01:97:43:fb:e1:da:70:b4:33:10:dc:6b:f0:7f:0a:00:
91:97:9c:6a:73:93:80:a0:04:80:32:9e:16:09:58:73:8a:66:
a4:3b:75:0d:1b:4d:7f:ff:58:77:65:85:16:1e:6c:17:a6:86:
88:b3:e7:b9:86:6d:20:a0:40:d0:77:e1:50:fb:b2:aa:6e:cc:
e3:d5:fa:16:b8:90:58:50:34:13:4e:83:27:58:0e:3d:03:49:
eb:01:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:44 2025 by rpki-client