Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa
File: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (raw, json)
Hash identifier: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=
Subject key identifier: BC:B1:B5:BF:BA:BF:C9:3D:F3:94:14:3B:58:7D:C2:C9:02:17:5D:5F
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 01943BD84E80FCE93C22C3725C00E35613DD
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa
Signing time: Mon 06 Jan 2025 13:40:18 +0000
ROA not before: Mon 06 Jan 2025 13:40:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57172
IP address blocks: 37.123.208.0/23 maxlen: 23
37.123.208.0/24 maxlen: 24
109.202.96.0/21 maxlen: 21
109.202.96.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.232.224.0/21 maxlen: 21
109.232.226.0/24 maxlen: 24
188.95.48.0/21 maxlen: 21
188.95.50.0/24 maxlen: 24
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
213.152.160.0/19 maxlen: 19
2a00:1678::/32 maxlen: 32
2a00:1678:be1::/48 maxlen: 48
2a00:1678:be2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:d8:4e:80:fc:e9:3c:22:c3:72:5c:00:e3:56:13:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jan 6 13:40:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb1b5bfbabfc93df394143b587dc2c902175d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:6d:b0:60:1f:5e:7a:aa:c1:98:26:dd:27:
bb:25:3a:5b:eb:d2:0b:15:44:b0:7e:b2:ed:98:f6:
7a:3b:c3:e3:19:30:72:a3:f2:d3:40:d7:00:52:83:
56:52:b4:48:10:ae:3f:7d:ea:ef:b1:8c:85:0d:62:
ab:97:89:2d:d3:e2:b0:88:f2:10:24:1f:2b:d6:18:
1c:b5:b8:4e:56:8b:3e:f4:aa:3b:46:4e:6c:d6:38:
d2:a8:3a:df:ed:61:f5:02:ae:ed:b7:79:42:62:1c:
e8:02:0b:f2:67:91:f0:d2:91:f0:c6:43:eb:c8:9c:
65:bb:27:82:27:9d:3d:3d:bb:5b:8a:ba:d8:24:a7:
6e:56:3e:8f:3a:b1:05:ac:25:31:99:75:18:dc:72:
71:b3:03:ac:61:80:cc:7b:3d:71:31:7d:e8:f4:77:
18:07:0d:08:68:d9:4d:8f:c5:17:c8:fc:82:64:09:
9c:19:f7:4b:34:66:ee:5f:42:42:6c:ed:15:a1:10:
5a:12:f5:04:65:31:90:dd:ce:b3:fb:59:4e:40:52:
c3:8d:8e:fa:e6:89:d6:2c:18:fb:37:1d:81:1c:f4:
4e:83:ea:34:5b:d7:d6:6b:ba:46:6d:b0:a9:08:ed:
ee:29:50:41:6a:ce:ed:73:02:da:40:62:86:b6:df:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:B5:BF:BA:BF:C9:3D:F3:94:14:3B:58:7D:C2:C9:02:17:5D:5F
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/23
109.202.96.0/21
109.232.224.0/21
188.95.48.0/21
213.152.160.0/19
IPv6:
2a00:1678::/32
Signature Algorithm: sha256WithRSAEncryption
87:fc:91:88:fa:c9:fd:7b:d5:04:53:e5:fa:86:35:e5:0b:4d:
05:ac:da:d3:72:bd:70:1d:db:c6:b3:bc:7f:d2:43:5b:7e:7d:
96:67:64:0b:ca:c6:61:e3:e6:68:d5:60:a8:ec:d2:10:6b:8e:
f2:c6:33:7e:f2:c0:4a:92:b5:01:86:63:ee:e1:ca:31:e7:9e:
bb:3e:a4:71:b4:57:55:15:ac:12:88:53:2a:00:7e:fd:02:e0:
8a:c5:42:a7:54:e6:51:bb:01:94:fe:95:fa:6c:13:4a:d6:14:
82:5b:f9:ef:df:fb:37:cc:e7:df:13:57:95:0a:32:0a:84:ad:
ab:36:e1:06:66:45:2c:d2:2f:de:f5:e6:e4:72:b0:12:b7:66:
32:69:3d:d1:f5:f9:58:f6:86:0d:8d:79:1e:e5:71:32:13:2f:
d1:a4:2a:95:fa:78:4d:2b:61:53:bb:c6:1a:b4:9b:ec:e6:f4:
c6:55:cf:2a:c3:84:80:bd:40:23:fb:fe:f0:51:72:73:1d:07:
25:54:fe:36:26:89:df:60:d3:bf:ee:e1:60:8e:18:12:73:83:
c7:9a:73:32:f8:df:87:f8:9f:ad:2e:8d:ce:4f:d2:d7:8e:af:
51:9a:6f:b3:ab:fa:22:ba:84:2d:1d:17:cc:14:1c:09:79:0c:
2f:2a:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:55:12 2025 by rpki-client