Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VT40h2H0SWWP0EttS3szee5IDrs.roa
File: VT40h2H0SWWP0EttS3szee5IDrs.roa (raw, json)
Hash identifier: hWfFO7yeXFmMpH8i82+pyEC+AeMoX8JFATWy1zRf5JQ=
Subject key identifier: 55:3E:34:87:61:F4:49:65:8F:D0:4B:6D:4B:7B:33:79:EE:48:0E:BB
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65BAB493832BB4C25032BEF355683
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VT40h2H0SWWP0EttS3szee5IDrs.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 77.81.1.0/24 maxlen: 24
89.42.215.0/24 maxlen: 24
94.177.27.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5b:ab:49:38:32:bb:4c:25:03:2b:ef:35:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553e348761f449658fd04b6d4b7b3379ee480ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:9e:ed:51:ca:2d:30:09:89:d5:d3:09:4b:
3c:44:25:76:cf:a3:27:a5:bc:60:29:e4:47:7b:b3:
aa:97:8a:2d:52:0a:e6:b4:91:be:f2:89:31:b4:81:
92:12:3c:26:1f:3a:4d:3d:b2:20:ce:d9:fc:d2:9a:
1d:df:e2:e8:80:97:ac:04:b0:54:4e:36:7d:8c:94:
6e:5f:5b:37:1e:d4:2a:1e:18:eb:11:76:29:63:51:
af:80:bc:1e:05:4b:52:74:71:e4:1c:8b:d5:a4:60:
d5:ab:c3:d7:2c:f9:bc:9a:0b:a1:c8:dc:b3:33:99:
ab:aa:a3:13:e6:7b:19:6c:d4:9d:42:3d:21:c5:96:
80:b7:d7:f0:53:b7:bb:ce:a7:c2:fd:4f:71:b3:c9:
d4:58:96:73:77:73:88:83:25:ed:01:df:28:f3:4a:
8b:c3:c0:b7:3e:3c:b6:b1:b5:7c:f9:01:ce:5e:e0:
d2:7c:c2:ee:32:d8:d4:19:00:b8:e0:b9:37:bd:f1:
b0:3a:52:2b:fb:23:65:36:f8:61:6e:e7:8c:cb:61:
2b:0b:b5:f9:04:99:91:98:e5:20:1b:57:68:2f:1d:
d4:3a:c7:bf:d1:a4:f5:ba:9f:64:0f:77:fe:f5:84:
87:4e:b2:5e:28:a8:2b:6d:61:32:ea:28:19:9f:36:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:34:87:61:F4:49:65:8F:D0:4B:6D:4B:7B:33:79:EE:48:0E:BB
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VT40h2H0SWWP0EttS3szee5IDrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.1.0/24
89.42.215.0/24
94.177.27.0/24
176.223.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:64:f5:ef:b7:89:53:f2:d2:0e:66:37:90:24:ec:38:6e:fc:
78:ef:87:20:1a:03:f5:45:43:0d:70:c0:96:f8:09:74:9b:4a:
4e:3b:96:37:dc:78:cf:55:76:6d:07:64:cd:25:6c:55:f0:7f:
11:fd:72:89:0b:9e:b0:f0:28:d1:c7:45:30:9b:0a:ca:4d:80:
5d:08:72:60:75:1f:85:7d:e4:41:92:79:b7:c8:e9:a0:07:94:
3f:e6:ab:e5:20:4a:59:14:43:97:87:4e:8c:12:bd:d1:71:28:
fd:23:c8:37:f7:41:d6:e3:12:a2:37:59:9a:5d:4b:ca:6c:c1:
cf:76:33:b9:0a:cb:0e:f6:44:ce:36:4d:60:02:02:8c:20:28:
d8:b8:81:7b:a5:7d:e7:a5:75:d6:46:99:bf:c1:00:a5:94:9a:
8a:4e:12:01:6d:75:5f:2b:85:c4:b5:f5:c3:8d:20:8e:ff:cd:
11:d8:6d:72:b8:43:ca:57:a8:51:72:a0:a8:bb:ab:cf:1d:10:
76:9a:4f:8d:17:fe:4c:f2:b8:53:22:07:64:4c:d9:81:60:3a:
22:b9:a0:da:66:ad:e5:12:37:cf:b7:86:7b:96:7f:55:a7:2d:
ea:9b:a4:67:58:e3:70:21:fc:35:84:52:17:f8:89:31:ee:7b:
2d:6f:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:00:10 2025 by rpki-client