Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/VdtZIDR20QBsvLwRhmbNZAq9N1s.roa
File: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (raw, json)
Hash identifier: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=
Subject key identifier: 55:DB:59:20:34:76:D1:00:6C:BC:BC:11:86:66:CD:64:0A:BD:37:5B
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 0194266BAFB08DE10B504D02352D065775F8
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/VdtZIDR20QBsvLwRhmbNZAq9N1s.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43305
IP address blocks: 91.198.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:af:b0:8d:e1:0b:50:4d:02:35:2d:06:57:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55db59203476d1006cbcbc118666cd640abd375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:7c:1c:f1:58:ab:e4:69:12:e0:94:ae:54:
4f:0c:a9:cc:94:d2:6b:de:f5:49:ae:09:8a:1f:21:
fd:3d:d9:fb:48:90:bf:06:08:0b:6a:76:5b:b1:e1:
4c:dd:b5:f0:7d:f8:d3:2f:09:e9:0c:31:d9:0c:11:
80:dd:55:9d:af:13:0a:d0:58:60:f2:58:c3:e6:2c:
1e:61:0d:b4:06:3d:42:8e:bb:ac:94:ac:2d:20:63:
11:5b:d8:31:39:76:4b:d4:8e:c7:41:2e:c5:90:ab:
4d:fd:58:75:a8:25:9e:12:a4:d4:60:22:03:b5:6e:
ca:22:df:0a:14:fa:23:bd:50:35:84:02:54:d2:23:
f7:40:1f:98:b3:a3:3c:42:14:08:a7:a5:b0:2f:71:
a5:8d:76:2c:d9:7b:b4:fc:42:9f:24:c8:e5:18:d2:
9e:92:71:f7:5c:16:9b:a3:4d:fe:84:58:98:4e:a4:
a5:61:a4:88:25:c0:23:49:4a:04:00:ac:76:d4:82:
be:e3:18:14:ca:e9:1b:59:39:0c:37:2b:30:d7:35:
44:62:b4:37:0d:fd:a0:d9:d0:88:31:46:1d:a6:3b:
70:5e:29:3a:34:a1:9a:8f:42:aa:aa:5e:e5:de:dc:
25:3d:02:e4:5e:2d:00:a0:7d:34:3b:bd:bf:24:82:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DB:59:20:34:76:D1:00:6C:BC:BC:11:86:66:CD:64:0A:BD:37:5B
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/VdtZIDR20QBsvLwRhmbNZAq9N1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.35.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f1:c4:c5:bf:20:60:82:82:67:35:dd:df:d9:bc:e6:7d:36:
a5:63:04:d2:64:80:a2:7d:73:c8:fc:10:19:27:0f:93:5b:14:
20:cb:93:9f:24:ed:95:89:f9:db:ef:13:80:11:e9:ef:39:04:
aa:2a:c6:a6:0c:a0:cd:df:d4:35:43:6e:30:6c:9a:56:b6:3a:
19:b2:5c:00:12:b5:02:43:26:82:60:09:3f:4f:1a:9b:7f:0f:
7d:3d:49:00:6b:8f:5b:cc:a8:f0:be:fe:aa:d6:71:24:87:ec:
b3:04:b0:b4:7e:1e:93:a1:44:d8:6b:28:b6:9a:3c:be:e8:ee:
a6:5f:50:7b:50:39:04:aa:fe:38:a3:94:a9:a8:f5:75:0d:bd:
7e:86:2d:80:62:1b:6f:f2:df:3c:55:6b:d7:0d:53:18:64:a8:
ec:9c:1a:a3:38:eb:c8:96:3b:e9:6a:7b:9d:db:c5:ee:5a:14:
b8:bd:0d:92:dc:17:c7:50:22:42:fe:ba:b6:ec:a6:a4:8e:7e:
87:2b:d0:73:5a:58:40:d9:30:6a:1b:33:4b:ac:d8:a6:2f:1f:
d2:44:94:60:5d:4d:54:e8:04:38:86:15:bd:41:14:0d:09:a4:
19:6d:f7:65:36:9f:b6:4a:26:74:b5:6c:3c:29:f8:61:0c:ca:
4e:eb:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:54:53 2025 by rpki-client