Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa
File: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (raw, json)
Hash identifier: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=
Subject key identifier: 56:71:6E:C3:23:95:73:EF:05:0C:C0:46:66:50:62:43:E8:AB:53:31
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 01953D39A4125AFC680842F7ED56B9FE45E8
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa
Signing time: Tue 25 Feb 2025 13:09:02 +0000
ROA not before: Tue 25 Feb 2025 13:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213425
IP address blocks: 195.200.69.0/24 maxlen: 24
2a14:8180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:39:a4:12:5a:fc:68:08:42:f7:ed:56:b9:fe:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Feb 25 13:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56716ec3239573ef050cc04666506243e8ab5331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:4f:9c:81:8f:bd:7e:72:84:e7:58:a1:8e:
12:88:90:bf:a2:c3:1d:c6:f2:38:9a:f5:8a:39:ee:
c6:b2:c0:11:d9:45:6a:47:c4:fc:ea:2d:39:ed:dd:
84:97:ef:c4:27:ed:76:8a:ca:00:66:95:88:e2:45:
e3:bf:32:39:93:10:9c:7b:27:fa:e4:27:f5:4b:42:
bb:23:ca:00:02:94:e2:28:a1:4d:0f:98:97:8f:2b:
a4:be:a8:14:af:72:f5:ff:12:7d:53:ce:b9:86:9d:
90:7a:81:9c:20:45:e1:04:e2:4a:7a:a8:be:30:83:
31:81:a0:83:6b:e4:10:2a:7e:73:ad:e4:95:fa:9b:
2e:d7:41:e0:92:34:57:92:60:7e:76:25:f8:b2:16:
a6:d4:0c:f2:b9:fe:5b:5d:0e:70:bf:f0:b6:e5:d2:
ab:07:79:e3:d1:23:19:b9:f6:ba:2d:ef:5d:88:32:
97:de:a8:37:27:93:0e:d1:d7:43:1e:e3:e7:7a:74:
af:ec:dc:20:37:a2:d1:59:09:4f:bc:df:e6:c1:8c:
b3:b1:80:36:71:60:97:bc:f1:59:a6:e6:97:c7:62:
6a:9b:c2:05:63:b5:0d:b0:be:25:7c:5e:85:6a:9d:
70:3e:75:0e:8b:33:c8:80:ca:95:19:b2:df:7d:2b:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:6E:C3:23:95:73:EF:05:0C:C0:46:66:50:62:43:E8:AB:53:31
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.69.0/24
IPv6:
2a14:8180::/29
Signature Algorithm: sha256WithRSAEncryption
35:4e:f8:8b:ee:d5:76:1c:d2:47:45:c2:5f:a7:be:df:bc:f7:
40:31:9a:dd:64:a6:de:28:6a:68:5b:a6:22:d0:fc:9b:80:13:
59:60:9f:6c:f3:56:81:3f:1d:5f:54:97:2b:43:72:66:01:df:
5a:e4:0d:46:ef:f5:2e:09:8b:4f:db:96:22:e8:71:a1:5c:7a:
25:75:9b:93:a6:14:b3:3e:51:e1:e7:f1:83:7a:ff:ae:ef:1e:
64:17:64:99:dd:0c:7c:97:c4:67:4e:5c:e2:5d:ce:95:14:ae:
67:14:94:e2:b7:d7:cb:a5:45:8b:fb:6a:64:c4:55:6c:8d:88:
fc:28:0f:c2:65:3b:dc:5f:80:bd:da:1c:cc:ef:b6:27:c2:f0:
b8:5d:a1:7c:1e:3e:60:51:ad:30:b5:41:a1:6c:08:b5:6f:51:
b6:c1:0c:09:15:bc:55:95:21:c8:80:ef:9e:91:19:11:61:4e:
e5:07:f7:b1:b6:22:a0:ae:43:73:64:34:f5:74:f3:72:bb:17:
3a:9b:cf:92:f6:98:88:6b:1a:a6:42:58:ee:85:3a:f6:be:01:
c2:f8:90:f0:8d:47:ca:bf:1f:d2:df:d7:e6:22:66:e7:73:5d:
db:33:00:fa:96:33:b5:dc:1f:d3:80:4c:77:b1:6d:da:7c:3e:
d1:8b:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:32 2025 by rpki-client