Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/VVRY07iRTEEycoKIAJjRSdP3o6g.roa
File: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (raw, json)
Hash identifier: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=
Subject key identifier: 55:54:58:D3:B8:91:4C:41:32:72:82:88:00:98:D1:49:D3:F7:A3:A8
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01942521E39A67B54A860B84507FE6BBCF4E
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/VVRY07iRTEEycoKIAJjRSdP3o6g.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201446
IP address blocks: 91.126.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e3:9a:67:b5:4a:86:0b:84:50:7f:e6:bb:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555458d3b8914c41327282880098d149d3f7a3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:2d:e2:a0:30:6c:f5:22:38:00:93:7f:36:
d2:57:80:10:5e:2f:cc:bd:f9:a6:7c:f1:ca:73:0c:
65:77:6c:ee:90:a0:0b:7e:36:76:5e:e7:a4:a6:5f:
71:64:e5:68:ad:0c:95:2b:61:2a:91:6c:18:46:74:
22:1f:4a:23:b4:85:6b:84:a2:6c:3a:54:a8:cd:9e:
4d:06:78:61:83:7a:a9:dc:bb:9c:24:8d:35:5f:63:
b6:c6:f9:90:33:a8:ce:f4:49:f1:08:ce:fe:d2:7b:
3c:04:89:2c:0a:b5:03:9d:c8:39:70:d7:16:ae:30:
e0:a3:a3:38:7f:01:4f:e1:f5:d2:55:46:e7:16:d3:
c9:73:1c:29:fe:90:f1:f4:f1:b7:44:51:78:7a:2c:
42:3c:c7:d5:4d:a3:fd:10:3e:1c:2a:42:ed:d6:6f:
fb:0a:be:58:fb:40:32:2d:ee:03:87:89:5c:c1:08:
aa:b5:f8:b0:5c:38:1f:56:57:0e:42:ae:2a:a0:7a:
24:7d:ef:02:8a:7f:12:ec:0b:8a:a0:67:e4:e3:13:
aa:46:32:8d:8f:2b:f7:90:01:2b:af:d5:22:e8:b0:
1b:cf:c4:86:0d:a4:aa:1f:8f:3d:90:0a:33:7d:08:
1f:0c:09:0e:a8:cd:67:84:cd:b1:24:35:de:97:ec:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:58:D3:B8:91:4C:41:32:72:82:88:00:98:D1:49:D3:F7:A3:A8
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/VVRY07iRTEEycoKIAJjRSdP3o6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.176.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:0c:7a:62:66:71:f4:ce:2a:2a:2b:58:68:56:7e:4b:f4:
4a:93:91:a1:24:8f:bc:1b:02:3a:19:df:7b:50:f6:ac:c4:2d:
e2:d3:c8:3d:12:88:14:e9:60:1b:4c:47:8b:25:72:68:58:ef:
d5:49:c5:b1:77:4b:1e:a0:03:ae:b6:88:5c:3c:fd:25:48:9f:
60:af:63:31:a0:a2:69:d4:8c:34:03:22:89:2a:6d:b6:8f:9d:
92:4e:93:ab:66:57:7b:22:97:94:fa:48:f5:04:61:e0:59:53:
89:70:61:1b:98:8f:e0:2b:bb:7c:5b:b0:8c:56:3c:71:cb:02:
57:41:74:6f:34:65:ea:27:cf:f7:54:5d:36:b6:25:74:b0:be:
9f:2e:e7:59:78:35:69:0e:3d:85:b5:e7:f6:5a:27:52:76:ca:
96:97:3a:0c:26:3f:f9:63:82:0c:87:1a:88:27:13:3d:87:e5:
de:dd:51:75:4b:56:2c:a1:9e:05:2c:16:4b:3e:33:b4:ce:88:
70:55:86:c2:42:68:e3:52:22:5f:bc:0e:e1:88:78:28:4c:de:
91:4c:7d:db:5c:bf:75:6a:31:be:5a:61:db:7b:d1:54:b5:e7:
79:33:dd:a3:8a:bd:d4:d7:0d:98:03:f6:24:d6:60:06:ef:77:
78:52:3c:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIeOaZ7VKhguEUH/mu89OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1
NGFiMWMwHhcNMjUwMTAyMDM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTU0NThkM2I4OTE0YzQxMzI3MjgyODgwMDk4ZDE0OWQzZjdhM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6st4qAwbPUiOACTfzbSV4AQXi/M
vfmmfPHKcwxld2zukKALfjZ2Xuekpl9xZOVorQyVK2EqkWwYRnQiH0ojtIVrhKJs
OlSozZ5NBnhhg3qp3LucJI01X2O2xvmQM6jO9EnxCM7+0ns8BIksCrUDncg5cNcW
rjDgo6M4fwFP4fXSVUbnFtPJcxwp/pDx9PG3RFF4eixCPMfVTaP9ED4cKkLt1m/7
Cr5Y+0AyLe4Dh4lcwQiqtfiwXDgfVlcOQq4qoHokfe8Cin8S7AuKoGfk4xOqRjKN
jyv3kAErr9Ui6LAbz8SGDaSqH489kAozfQgfDAkOqM1nhM2xJDXel+ws0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVUWNO4kUxBMnKCiACY0UnT96OoMB8GA1UdIwQY
MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt
N2Q0YmIyMzgwNDg3LzEvVlZSWTA3aVJURUV5Y29LSUFKalJTZFAzbzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3
LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW36wMA0G
CSqGSIb3DQEBCwUAA4IBAQAxEAx6YmZx9M4qKitYaFZ+S/RKk5GhJI+8GwI6Gd97
UPasxC3i08g9EogU6WAbTEeLJXJoWO/VScWxd0seoAOutohcPP0lSJ9gr2MxoKJp
1Iw0AyKJKm22j52STpOrZld7IpeU+kj1BGHgWVOJcGEbmI/gK7t8W7CMVjxxywJX
QXRvNGXqJ8/3VF02tiV0sL6fLudZeDVpDj2Ftef2WidSdsqWlzoMJj/5Y4IMhxqI
JxM9h+Xe3VF1S1YsoZ4FLBZLPjO0zohwVYbCQmjjUiJfvA7hiHgoTN6RTH3bXL91
ajG+WmHbe9FUted5M92jir3U1w2YA/Yk1mAG73d4Ujy1
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:42 2025 by rpki-client