Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/vaJcnuFh_402kJ74_w8V8zEZMEQ.roa
File: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (raw, json)
Hash identifier: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=
Subject key identifier: BD:A2:5C:9E:E1:61:FF:8D:36:90:9E:F8:FF:0F:15:F3:31:19:30:44
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019424B3A7D6A22ECD7001648044CFDF47B5
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/vaJcnuFh_402kJ74_w8V8zEZMEQ.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206451
IP address blocks: 31.14.24.0/24 maxlen: 24
89.33.180.0/22 maxlen: 22
89.36.168.0/24 maxlen: 24
89.36.175.0/24 maxlen: 24
89.39.160.0/24 maxlen: 24
176.97.232.0/21 maxlen: 21
176.97.232.0/22 maxlen: 22
176.97.236.0/22 maxlen: 22
185.155.4.0/22 maxlen: 24
212.85.232.0/22 maxlen: 22
212.85.232.0/23 maxlen: 23
212.85.234.0/23 maxlen: 23
2a0d:bf00::/32 maxlen: 32
2a0d:bf01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:d6:a2:2e:cd:70:01:64:80:44:cf:df:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda25c9ee161ff8d36909ef8ff0f15f331193044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:82:e6:56:9b:5a:0d:e1:64:91:8c:5b:a5:
f3:1b:97:90:c3:47:3e:fe:36:a4:21:45:2e:a7:88:
3f:1e:3b:0c:c7:46:fc:5d:4c:a0:af:2a:c5:e6:6b:
3a:b9:e5:59:14:44:09:a2:30:08:ea:49:fe:63:1b:
19:17:ae:b1:71:33:98:7e:79:59:4d:cc:e7:b6:63:
fb:38:3c:02:78:a0:c0:d3:fe:99:a2:41:11:79:10:
95:1d:ea:3b:9b:58:27:61:1c:66:65:8a:db:55:08:
58:f0:b4:41:6a:1c:6f:45:24:25:55:30:41:7e:d2:
dd:24:ad:b8:30:86:41:8d:79:47:3c:2a:37:d3:7c:
a7:48:cc:45:ce:c4:6d:a4:d3:0c:f6:16:e6:29:cd:
c9:66:84:76:aa:3c:cd:55:08:f1:fd:01:81:08:9b:
e9:56:bb:99:57:8d:bc:df:a4:25:c7:dd:46:46:17:
6d:35:76:2b:f8:c2:46:f2:15:4c:84:17:21:37:df:
58:9f:c9:a8:45:a9:30:8b:4b:52:bb:75:21:d3:10:
20:a2:a0:e7:d6:27:ad:c9:5a:50:14:28:90:42:c7:
4e:75:67:d3:5a:f2:a1:39:dd:6e:c3:c4:0e:bf:e9:
00:2a:80:f7:3c:85:74:70:cd:c5:ab:5c:f6:2f:bb:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:5C:9E:E1:61:FF:8D:36:90:9E:F8:FF:0F:15:F3:31:19:30:44
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/vaJcnuFh_402kJ74_w8V8zEZMEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.24.0/24
89.33.180.0/22
89.36.168.0/24
89.36.175.0/24
89.39.160.0/24
176.97.232.0/21
185.155.4.0/22
212.85.232.0/22
IPv6:
2a0d:bf00::/31
Signature Algorithm: sha256WithRSAEncryption
55:ed:21:a2:51:cb:9a:e1:71:cc:b4:b0:84:cc:1c:af:d9:49:
d8:28:cd:8d:cb:6a:75:b6:58:03:fb:d8:a4:30:d3:93:0a:9b:
67:53:71:22:76:a1:0a:46:20:fb:3c:9d:f3:ae:3d:1f:8a:b8:
39:62:5d:bb:9e:b2:79:f5:d4:c9:6d:2f:18:2d:f7:fe:83:64:
c5:29:83:a7:85:f9:a6:9e:b6:58:12:c9:cd:73:26:f9:cf:88:
c0:55:87:c1:bb:eb:be:84:c7:49:a7:80:3b:39:ed:d4:b9:3f:
38:82:85:bc:49:9a:c9:68:de:51:79:4b:6b:b6:ec:03:db:13:
e2:75:bd:0e:a1:96:82:b9:25:9a:be:c3:60:47:43:d6:3b:ad:
47:86:30:ec:97:09:56:46:b1:08:54:68:75:3c:81:87:98:47:
14:3d:50:44:1e:51:ef:ec:e2:a2:7b:10:31:a6:0c:f3:83:4d:
70:ef:c6:4a:32:29:ab:c9:73:1e:9a:e4:2a:86:26:fb:7c:34:
57:17:bd:aa:12:a4:57:9b:7f:f6:d3:86:5e:31:3b:2e:c8:08:
f1:84:8e:db:e5:7c:cd:37:1f:ff:6c:ff:80:cb:d4:65:77:fc:
e0:6b:03:81:65:23:4c:cc:41:a6:9c:03:40:4d:16:83:ec:48:
94:03:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:22 2025 by rpki-client