Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/vrfv77jJYuxmSZEVkmyNCntD1Fk.roa
File: vrfv77jJYuxmSZEVkmyNCntD1Fk.roa (raw, json)
Hash identifier: xlpnBzbGV6oY57oPpaVnACDRZObeSx9+3WvllQ26oOs=
Subject key identifier: BE:B7:EF:EF:B8:C9:62:EC:66:49:91:15:92:6C:8D:0A:7B:43:D4:59
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 019428262B929A66F32E573AF3A7A7D724C7
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/vrfv77jJYuxmSZEVkmyNCntD1Fk.roa
Signing time: Thu 02 Jan 2025 17:52:57 +0000
ROA not before: Thu 02 Jan 2025 17:52:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.17.53.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
193.203.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:2b:92:9a:66:f3:2e:57:3a:f3:a7:a7:d7:24:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Jan 2 17:52:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beb7efefb8c962ec66499115926c8d0a7b43d459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:4b:07:90:3b:eb:34:60:1e:a0:06:f4:20:
02:d3:2c:b4:5d:93:c0:f3:e8:28:5d:59:b5:96:45:
ca:8b:50:2c:7a:83:b0:51:8f:c6:7e:dd:9a:20:a0:
f5:ad:af:4f:b2:68:61:03:3a:c8:69:d5:0f:21:90:
7f:89:12:22:c1:f7:29:d1:bf:6b:e4:89:84:8d:ac:
1e:94:9a:a3:17:95:35:ac:20:47:fa:34:94:01:d5:
19:9e:fe:e8:ba:10:28:db:f1:82:73:04:5e:8b:dc:
d8:53:9f:67:e3:04:1e:fd:7f:59:5b:34:fb:a1:2a:
f7:6c:88:98:f8:2a:47:0d:c7:4b:68:51:d3:a5:0c:
3b:cc:74:b8:5a:a8:29:84:90:4f:84:7d:64:fb:8f:
85:a0:46:bf:c8:cf:f5:c8:73:dc:6a:48:64:d5:f3:
4c:93:00:49:4e:35:c7:78:f2:c3:f2:c3:4b:dd:64:
25:2f:ea:d7:0f:4c:71:cf:e8:7a:03:df:57:1d:c7:
d2:1d:c6:be:6f:d8:95:2d:59:7a:58:12:35:99:d3:
4a:db:0d:5e:50:b2:12:b4:38:56:f6:af:b6:7b:fc:
5e:27:ba:25:a1:9d:9c:e1:ff:f0:1b:ce:d5:24:ba:
c1:f3:80:8a:0e:1d:da:d3:fb:bc:d2:64:ef:74:6c:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:EF:EF:B8:C9:62:EC:66:49:91:15:92:6C:8D:0A:7B:43:D4:59
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/vrfv77jJYuxmSZEVkmyNCntD1Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.53.0/24
193.203.24.0/24
193.203.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:21:a8:65:45:68:f3:16:b7:04:5b:f3:65:8e:0e:2d:29:8c:
95:14:f4:da:ce:16:3d:54:51:25:ce:51:3d:59:b5:65:32:36:
31:50:b2:3c:79:a7:10:66:e9:4d:b1:c8:41:33:d7:86:b4:53:
ae:44:ec:1b:1f:6a:2b:b6:fd:4a:46:cf:86:68:c4:9a:50:c1:
7b:63:36:66:d9:ad:ae:8f:36:7d:d9:71:a3:78:1e:f9:40:5d:
34:ac:d2:c8:c4:a0:08:b3:81:ea:74:50:f7:02:63:9a:4e:9e:
82:da:50:f0:79:5a:72:57:5e:0a:81:bd:e0:a6:ff:53:aa:a9:
be:bb:3c:41:25:d0:34:fb:25:f8:c4:08:9a:5a:81:7e:44:9a:
5d:86:a0:2f:7f:1c:ba:94:60:9c:e4:ab:ef:75:1b:52:b7:27:
2e:3f:fc:8c:91:f2:fc:28:1e:6d:88:26:90:1f:39:67:e6:9c:
0f:7b:bf:3d:7a:34:1a:7d:25:c7:df:3c:ca:3f:81:80:1c:a1:
af:c5:d5:a2:69:6d:0c:2a:6f:3c:7e:0f:f0:5b:c4:6a:39:4d:
91:a7:88:53:a6:0a:fd:b5:21:f7:31:db:d5:be:5b:3f:73:15:
91:c8:ed:f5:93:35:11:48:25:e9:36:5a:1e:65:07:9e:d7:85:
d1:ec:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:00:57 2025 by rpki-client