Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VMWn0gvah89CbgK3HtTcVGEyCBY.roa
File: VMWn0gvah89CbgK3HtTcVGEyCBY.roa (raw, json)
Hash identifier: NaaNVU/8yoepnNFjN1UFqh3ehlOm/phoDvdKqsxvg1s=
Subject key identifier: 54:C5:A7:D2:0B:DA:87:CF:42:6E:02:B7:1E:D4:DC:54:61:32:08:16
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747EEB609F11B265B0FB82F78423298
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VMWn0gvah89CbgK3HtTcVGEyCBY.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44586
IP address blocks: 83.228.89.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
2a01:5a8:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ee:b6:09:f1:1b:26:5b:0f:b8:2f:78:42:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54c5a7d20bda87cf426e02b71ed4dc5461320816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:ad:22:4b:fe:24:2d:d4:38:d8:46:e3:d9:
d0:d7:cb:eb:f1:5a:d8:13:73:d3:44:38:bf:35:5a:
bc:75:03:e7:5f:25:27:9a:cb:eb:07:e4:58:fa:9a:
f8:fb:bf:cd:2f:a1:df:b2:14:48:67:be:f9:61:c8:
1f:af:5e:e7:f6:24:7e:9f:8f:05:66:f3:8f:a8:b9:
f6:05:6a:b7:2e:b8:ed:5e:6c:48:f5:c3:52:ae:75:
12:3b:52:0f:5a:56:5b:34:e7:49:ef:d0:ff:08:05:
07:f9:ac:81:c0:07:9f:ed:5c:dc:37:35:5d:a5:2b:
ae:d8:66:01:be:63:91:f8:1d:b1:9e:03:63:49:65:
b0:2a:18:dc:3e:26:81:2c:36:9e:f7:9d:41:4b:81:
4c:c2:ea:66:ea:f1:fc:5c:3f:88:d3:01:e7:4c:b6:
70:eb:d5:3d:09:68:e0:bc:8a:f5:ca:7f:ac:06:c9:
3d:26:8c:9d:7c:00:66:28:17:3f:10:57:92:cf:b5:
3c:e6:70:30:6e:d6:aa:69:87:5f:0f:60:96:25:8c:
d2:50:a8:81:f1:d3:f3:b6:80:1c:94:a9:8b:05:9a:
49:5e:f2:6e:bf:54:61:3c:a0:0e:65:76:f7:06:fb:
4d:b3:51:4e:8b:e5:49:4e:2c:e5:5f:f1:ff:4d:28:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:A7:D2:0B:DA:87:CF:42:6E:02:B7:1E:D4:DC:54:61:32:08:16
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VMWn0gvah89CbgK3HtTcVGEyCBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.89.0/24
213.91.173.0/24
213.91.191.0/24
IPv6:
2a01:5a8:8::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d1:e6:ed:d3:98:98:73:bd:4d:20:55:f5:7b:63:4f:d5:92:
6e:41:1f:17:44:4d:15:93:31:2a:71:12:9f:f6:4a:67:da:76:
74:e6:4a:5d:2c:91:de:88:ea:8d:7b:1a:51:99:d3:46:4b:57:
6e:97:82:20:88:42:3d:f6:8e:89:dc:2f:ae:89:46:fa:f1:46:
96:1c:3b:dc:e7:bc:8e:2d:19:31:b9:36:9c:3b:bc:7f:17:b5:
3a:a6:6d:04:4b:9b:80:64:4f:a7:25:6d:2d:33:0c:f3:f8:69:
be:18:4d:33:1f:a2:9a:68:ab:f1:1f:6e:5c:51:9e:e7:17:4f:
8e:03:90:cc:5d:49:3f:c0:4f:9a:8f:b2:bf:3a:34:26:b6:92:
ec:f4:ed:9a:f9:67:6e:69:33:ac:e4:6b:55:c8:6d:80:f0:d4:
4f:3e:5a:ee:d3:59:3e:01:4e:45:5a:65:81:a2:36:a9:f3:9c:
9c:20:4c:84:b6:cb:51:0f:59:57:9c:5e:77:79:aa:fa:21:a6:
1a:16:b8:5d:42:e7:e1:b0:ec:4f:36:6f:66:0f:db:3d:52:97:
34:1c:70:fb:44:11:02:e8:fe:de:b0:d0:04:2d:5a:e0:e1:af:
1d:e3:e0:29:8c:46:ab:80:ce:72:46:6a:5e:cf:a2:58:c9:5c:
f7:ce:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:48 2025 by rpki-client