Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/VWhVpICVoAdzB9EQIkXWDcCWifs.roa
File: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (raw, json)
Hash identifier: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=
Subject key identifier: 55:68:55:A4:80:95:A0:07:73:07:D1:10:22:45:D6:0D:C0:96:89:FB
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019424449456D99A823E82753E46C8F60BEA
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/VWhVpICVoAdzB9EQIkXWDcCWifs.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205430
IP address blocks: 91.106.28.0/24 maxlen: 24
94.240.41.0/24 maxlen: 24
94.240.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:56:d9:9a:82:3e:82:75:3e:46:c8:f6:0b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556855a48095a0077307d1102245d60dc09689fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:7e:20:4d:43:8c:65:e5:eb:b2:6b:e1:6c:
6b:5a:51:c1:65:51:96:f0:ef:bb:90:eb:99:73:d9:
7a:db:2b:7c:06:65:30:88:eb:ed:7e:ae:07:f1:54:
99:5c:04:97:10:8c:ea:c3:c5:4f:a8:bc:dd:c6:d1:
64:af:e1:92:b8:d3:d7:a8:ad:2d:4f:1c:4f:f7:9f:
c9:da:a5:25:a8:f3:72:80:f1:2f:49:df:f9:a3:54:
13:14:f0:37:2a:30:2a:85:0a:8d:fe:cc:26:c9:7e:
63:46:52:9e:97:da:c0:d6:24:d0:e3:42:65:81:79:
2c:25:03:2a:f3:e9:8d:97:06:67:29:d1:8e:3c:7f:
b3:e7:ca:17:71:b8:77:83:d7:5d:78:c5:d0:60:ae:
7d:6f:08:dd:56:15:21:28:36:2f:5a:d0:6d:3d:02:
9f:38:c6:5c:3b:16:69:8e:4c:8f:0e:ee:3a:90:59:
a9:07:8c:22:3d:65:2d:0b:b7:01:21:25:f3:59:69:
53:e0:21:f7:04:d5:48:62:47:c9:12:c1:45:77:6b:
c9:d0:73:a9:a1:c7:9b:44:1d:6a:cc:b9:84:8b:d3:
ae:f6:6b:90:a0:6b:69:e6:d2:07:a3:71:8b:7f:4d:
1f:39:a5:04:c8:d1:ad:fd:d0:9f:3a:e7:36:e9:92:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:55:A4:80:95:A0:07:73:07:D1:10:22:45:D6:0D:C0:96:89:FB
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/VWhVpICVoAdzB9EQIkXWDcCWifs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.28.0/24
94.240.41.0/24
94.240.43.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bd:c2:74:85:35:c0:f9:07:0f:d9:6f:1c:1b:50:be:b4:17:
19:ea:cd:90:98:45:56:1a:ac:e5:2d:eb:08:47:9f:0d:76:28:
68:33:97:fc:45:99:9a:39:41:31:f5:80:9e:12:98:ea:ae:95:
85:0e:44:d0:05:99:1d:8e:08:3b:46:24:0c:d9:74:a5:98:62:
47:90:cf:28:eb:75:56:9b:cc:c0:68:7c:ed:e8:68:17:59:c4:
6d:0b:bd:4f:3a:91:1e:07:83:50:6a:a2:86:2c:16:62:4d:82:
9a:27:cd:9e:c3:52:47:2c:17:97:05:0e:21:77:e8:c8:66:4d:
15:07:7b:2f:b7:2e:f6:3f:36:5a:34:9d:c3:c9:5e:07:31:ed:
71:b8:ae:9b:37:ca:e2:95:b9:81:38:92:f5:c2:2b:cb:39:d9:
2f:cd:a9:97:8d:b8:e5:70:6a:6e:98:dc:2e:2e:bc:b4:8a:51:
59:92:67:54:bc:f2:c9:0d:df:c5:46:40:9b:5f:2d:8e:81:20:
34:5d:68:43:5b:a7:4c:d3:bd:c0:57:f3:01:8a:e2:d3:83:fc:
6e:c4:08:a9:b6:44:ac:d9:20:d6:c7:ce:35:d7:98:23:f9:45:
8c:07:f4:e4:a1:31:b1:ed:83:cb:d9:58:2e:ce:f1:87:f5:75:
a6:2d:0e:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRJRW2ZqCPoJ1PkbI9gvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjUwMTAxMjM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTY4NTVhNDgwOTVhMDA3NzMwN2QxMTAyMjQ1ZDYwZGMwOTY4OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp31+IE1DjGXl67Jr4WxrWlHBZVGW
8O+7kOuZc9l62yt8BmUwiOvtfq4H8VSZXASXEIzqw8VPqLzdxtFkr+GSuNPXqK0t
TxxP95/J2qUlqPNygPEvSd/5o1QTFPA3KjAqhQqN/swmyX5jRlKel9rA1iTQ40Jl
gXksJQMq8+mNlwZnKdGOPH+z58oXcbh3g9ddeMXQYK59bwjdVhUhKDYvWtBtPQKf
OMZcOxZpjkyPDu46kFmpB4wiPWUtC7cBISXzWWlT4CH3BNVIYkfJEsFFd2vJ0HOp
ocebRB1qzLmEi9Ou9muQoGtp5tIHo3GLf00fOaUEyNGt/dCfOuc26ZKyfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFVoVaSAlaAHcwfRECJF1g3Alon7MB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvVldoVnBJQ1ZvQWR6QjlFUUlrWFdEY0NXaWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW2ocAwQA
XvApAwQAXvArMA0GCSqGSIb3DQEBCwUAA4IBAQBlvcJ0hTXA+QcP2W8cG1C+tBcZ
6s2QmEVWGqzlLesIR58NdihoM5f8RZmaOUEx9YCeEpjqrpWFDkTQBZkdjgg7RiQM
2XSlmGJHkM8o63VWm8zAaHzt6GgXWcRtC71POpEeB4NQaqKGLBZiTYKaJ82ew1JH
LBeXBQ4hd+jIZk0VB3svty72PzZaNJ3DyV4HMe1xuK6bN8rilbmBOJL1wivLOdkv
zamXjbjlcGpumNwuLry0ilFZkmdUvPLJDd/FRkCbXy2OgSA0XWhDW6dM073AV/MB
iuLTg/xuxAiptkSs2SDWx84115gj+UWMB/TkoTGx7YPL2VguzvGH9XWmLQ4X
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:24 2025 by rpki-client