Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/vkcH5EuwGj_ZFASLeHfVBft18NM.roa
File: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (raw, json)
Hash identifier: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=
Subject key identifier: BE:47:07:E4:4B:B0:1A:3F:D9:14:04:8B:78:77:D5:05:FB:75:F0:D3
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0194228DF0B5BACE80055C28074DB48A5552
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/vkcH5EuwGj_ZFASLeHfVBft18NM.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202491
IP address blocks: 37.61.148.0/22 maxlen: 22
37.61.154.0/24 maxlen: 24
46.37.87.0/24 maxlen: 24
46.37.95.0/24 maxlen: 24
89.32.114.0/23 maxlen: 23
89.37.75.0/24 maxlen: 24
89.39.18.0/23 maxlen: 23
89.39.20.0/23 maxlen: 23
89.39.152.0/23 maxlen: 23
89.39.157.0/24 maxlen: 24
171.33.238.0/24 maxlen: 24
212.225.228.0/23 maxlen: 23
212.225.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f0:b5:ba:ce:80:05:5c:28:07:4d:b4:8a:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4707e44bb01a3fd914048b7877d505fb75f0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:60:34:f8:69:40:15:b5:d7:e4:73:7c:fb:
94:46:d6:8f:d9:d8:c6:66:6f:4e:b4:18:85:26:c4:
c1:88:dc:ad:14:23:74:19:fd:e6:52:d6:d8:3e:9a:
ec:87:b1:e9:84:cc:eb:f6:3c:ef:29:98:1d:d5:74:
98:5c:ec:c6:23:47:91:65:24:4f:f2:eb:fb:46:52:
4f:c5:9a:bc:45:de:33:55:94:a1:3b:38:ba:49:e7:
04:0f:94:79:c2:53:13:40:27:cf:05:8f:63:2c:ab:
0d:bc:5d:94:74:da:fc:07:34:c4:2f:db:d9:2a:0a:
56:17:67:51:e3:8d:2a:79:67:cd:cf:c9:3d:84:3a:
43:08:91:83:b5:02:37:a8:63:d8:c8:22:f0:d3:82:
20:9d:f6:97:60:7c:6c:6b:83:dc:23:d2:5b:f7:e7:
94:e1:78:33:a7:c0:e4:75:1e:80:58:37:60:67:71:
b2:1b:bc:d5:fa:d4:dd:16:dd:71:8a:02:c0:18:be:
a6:4c:59:9c:9c:12:7f:39:fc:7f:dd:fb:6e:fb:48:
fa:5c:37:32:30:0b:6a:d5:a0:6f:00:57:fd:70:86:
b1:69:56:0a:1c:e6:97:8e:fc:a8:9f:d0:f4:4a:4d:
7f:43:07:27:c8:bf:5d:48:a5:e8:41:3f:02:b0:21:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:07:E4:4B:B0:1A:3F:D9:14:04:8B:78:77:D5:05:FB:75:F0:D3
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/vkcH5EuwGj_ZFASLeHfVBft18NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.148.0/22
37.61.154.0/24
46.37.87.0/24
46.37.95.0/24
89.32.114.0/23
89.37.75.0/24
89.39.18.0-89.39.21.255
89.39.152.0/23
89.39.157.0/24
171.33.238.0/24
212.225.228.0/23
212.225.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ab:af:bb:47:02:72:6b:25:9f:36:f8:e3:85:b9:f5:89:01:
91:c2:44:13:7c:38:26:9c:e3:27:0c:c6:c2:ec:e1:af:28:40:
73:ba:2b:ba:bc:de:dc:94:16:97:af:5b:2c:b6:5f:1a:68:0d:
bc:ea:61:f0:b3:52:94:ef:af:32:a4:73:8d:7e:62:b8:b6:71:
eb:98:6e:d2:4e:06:0a:76:dc:5e:3b:12:21:a1:f4:81:9b:01:
75:9b:00:da:ea:ed:65:ba:54:60:99:2e:d4:fc:9f:45:4a:e6:
b6:9e:ac:9f:56:58:69:d0:5e:5c:58:c3:a0:94:6d:73:06:2c:
8e:9b:0c:79:5d:79:a4:50:3b:05:19:f7:30:d0:27:5e:a0:c4:
93:a8:28:fc:d3:ab:d8:c7:d6:00:0c:b8:8f:25:77:10:4a:75:
95:69:1e:d0:77:8a:73:9a:e4:7b:19:90:56:78:f7:da:81:bc:
ea:f9:c1:f4:9c:46:53:23:4b:76:f6:e6:7b:10:47:c2:43:45:
66:9d:bf:9e:48:a4:f8:f6:c4:28:6e:9b:78:b8:75:10:ba:29:
16:7a:0b:ee:df:a1:36:d2:a1:3a:29:dc:17:18:36:75:e1:a2:
27:db:e8:c7:49:76:9a:cc:b6:e7:ab:97:74:4a:86:34:67:4f:
8a:a1:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:04 2025 by rpki-client