Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa
File: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (raw, json)
Hash identifier: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=
Subject key identifier: 55:65:26:B7:5F:8B:73:D9:B0:5A:4C:E9:5C:55:0C:0D:B6:F6:52:A1
Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial: 019424B369C3D1CAAEAB5A17E579B5159E58
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47886
IP address blocks: 62.3.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:69:c3:d1:ca:ae:ab:5a:17:e5:79:b5:15:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556526b75f8b73d9b05a4ce95c550c0db6f652a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:08:09:1e:78:9a:68:33:ec:12:d6:87:e2:
4f:33:4f:7a:1d:d0:12:1f:cb:26:98:9b:41:80:1e:
1b:9a:14:0c:24:da:ac:2e:a4:3c:c3:62:40:3f:37:
b9:f5:08:9c:4c:5c:27:a0:8c:20:04:a0:fd:75:ec:
89:fc:03:c6:f8:52:64:54:c7:60:6f:eb:b4:73:fd:
c9:f9:20:33:e1:bc:26:d2:4c:c2:50:6e:17:16:05:
eb:2f:cf:e6:47:67:b1:11:3c:0f:8c:01:3b:5b:af:
a8:41:e0:f1:3e:17:b0:7e:aa:65:0d:d8:98:0b:a3:
18:03:84:0d:4e:0e:79:8e:ae:d0:8b:1b:3d:69:f6:
25:15:2b:14:09:df:8d:b9:96:33:4e:55:70:64:89:
1c:f3:a8:73:96:76:48:67:42:7d:86:10:84:57:16:
46:9d:30:08:9f:1f:58:61:25:06:c3:89:59:9b:f5:
55:ec:ad:61:f6:bb:46:c1:5f:46:b5:a2:11:ed:db:
00:2d:eb:f6:66:24:e4:d1:14:a6:6e:87:b8:b5:23:
e2:91:85:cd:e6:1f:07:73:c3:82:19:87:2e:72:2e:
09:48:5b:3c:0e:42:3d:12:3f:4e:32:45:f7:80:b6:
ee:9b:c9:54:c0:5c:b3:27:b6:18:31:30:be:e4:1b:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:26:B7:5F:8B:73:D9:B0:5A:4C:E9:5C:55:0C:0D:B6:F6:52:A1
X509v3 Authority Key Identifier:
keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.19.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1d:cb:fa:76:0f:8b:99:a8:10:46:11:18:fe:8b:26:f9:b7:
cf:7d:14:08:0f:fa:d4:31:91:d9:2c:a2:e2:61:0b:a9:95:ba:
16:34:c2:19:c9:e7:1c:b0:e6:f8:6a:46:9f:6a:45:21:aa:64:
c0:ca:8d:83:6d:7d:91:4a:b1:e4:da:c2:f6:24:25:7e:59:5a:
a7:99:a6:ee:6f:b6:cc:39:d7:37:d1:57:40:2c:8d:bd:c7:44:
e7:f7:73:14:7c:9a:d5:22:47:15:b3:f4:ff:b1:0c:08:57:d4:
4c:40:d6:ad:1e:31:1b:66:c5:04:ff:bf:e8:dc:03:9f:b1:ff:
16:a2:32:71:29:eb:27:7f:07:49:49:f7:93:5a:5a:8d:3c:e2:
57:6d:f3:9b:d0:a5:fa:67:02:37:82:62:d1:86:f0:f9:7e:be:
37:f6:85:05:9c:e8:f9:ad:fe:f6:3e:25:8b:9e:81:5e:78:ef:
fa:eb:9d:04:dc:d6:9f:c5:b0:41:cc:e2:9d:86:b4:80:06:43:
41:93:38:a0:6a:7b:0b:24:49:c9:05:1a:12:5f:15:01:e2:45:
da:89:aa:a0:65:0d:df:d2:d4:b3:73:79:d3:54:6a:0b:f4:43:
3a:9f:77:1b:af:2f:6c:78:71:d5:f9:57:c6:a4:ed:c6:18:c0:
9f:c2:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:13:00 2025 by rpki-client