Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vyCGGnsFvqliTEx12jYp6lwRAek.roa
File: vyCGGnsFvqliTEx12jYp6lwRAek.roa (raw, json)
Hash identifier: l5raYrCV5cZJwg0Ik6+6Zpw1vWa9xl0dKA9pFd0Ksa8=
Subject key identifier: BF:20:86:1A:7B:05:BE:A9:62:4C:4C:75:DA:36:29:EA:5C:11:01:E9
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019421B21D36C504490F4CD78046CD17479A
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vyCGGnsFvqliTEx12jYp6lwRAek.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 84.17.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:36:c5:04:49:0f:4c:d7:80:46:cd:17:47:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf20861a7b05bea9624c4c75da3629ea5c1101e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:4c:56:76:f2:7e:8a:52:90:d5:d3:c8:fa:
54:13:14:b3:ed:2b:10:38:d4:ab:e3:aa:1b:ba:10:
f1:a2:53:18:d7:33:4d:69:7b:2b:93:74:14:63:de:
06:b6:cb:1b:37:2b:28:8d:e9:d5:b9:21:fe:6c:31:
46:e8:a2:17:3c:52:78:c4:63:84:3c:9c:c1:ad:c7:
e7:26:d8:e2:c1:99:80:f8:1c:37:34:40:44:49:44:
f6:60:d2:fe:4f:14:45:58:28:87:00:25:c2:c6:d1:
28:7b:69:71:a1:8a:bc:60:b2:74:24:08:31:b3:62:
af:80:96:5d:3f:60:0a:22:f6:c0:dd:17:b3:fb:6b:
d4:bc:76:2a:44:f9:b2:86:bf:80:6d:74:ba:b4:69:
3c:1d:b2:c5:b8:bb:e2:ce:98:58:f5:90:b0:3c:81:
66:7a:63:4d:9d:16:cf:bf:e4:b6:38:5d:31:2e:f1:
8b:db:19:5e:68:1b:28:a7:31:1d:2e:7e:33:04:cf:
39:14:17:f1:4e:ce:29:c6:ae:74:56:0b:1f:9b:47:
fa:cd:52:ed:c6:04:58:df:77:b1:86:05:a6:43:83:
51:5c:40:55:81:5d:f3:19:4a:dd:ec:bd:a1:1d:6a:
f2:ef:23:3c:3c:69:05:f4:3a:89:da:12:5b:6c:16:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:86:1A:7B:05:BE:A9:62:4C:4C:75:DA:36:29:EA:5C:11:01:E9
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vyCGGnsFvqliTEx12jYp6lwRAek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.65.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b1:4a:e8:2c:54:15:5f:a8:41:37:ae:9c:87:0b:14:4d:15:
b1:0b:66:d2:40:ba:50:4b:39:7b:02:e2:a5:21:15:4b:e8:1d:
ee:78:9b:59:89:9c:51:cb:95:11:1d:4e:eb:76:ae:06:1a:0d:
ff:0b:39:8f:73:d3:fa:29:c3:b7:82:91:13:83:ad:25:0c:1d:
9c:c6:3b:59:57:34:f8:cf:82:f2:23:7c:36:ab:f2:df:18:32:
43:7a:9c:4b:1b:1e:2d:b3:3d:7e:55:f5:41:cf:ec:e4:1e:f3:
09:24:bc:db:0e:9a:fe:c4:fb:4d:ca:63:b8:cf:89:6d:f6:cd:
29:3a:f2:02:1f:c9:09:19:89:e9:b1:06:5a:c6:cc:87:2c:f9:
4c:84:86:fd:c0:9b:29:47:de:ee:39:e1:09:68:a1:8a:fa:2e:
44:fd:de:4e:3e:fb:09:54:08:fc:70:5f:4c:73:5e:98:20:36:
9c:49:01:45:33:de:4a:14:f9:f2:a0:b1:c5:2f:87:d1:28:94:
27:5e:15:32:f6:e3:77:3c:b2:a9:4f:72:2b:4b:42:7a:2c:62:
db:93:4c:0a:a4:fb:53:b0:7c:6d:0c:e2:7c:56:c2:fd:d1:f3:
cd:6c:34:a6:06:79:91:9d:c2:dd:ac:c1:92:95:6d:66:a2:ac:
f5:43:e8:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsh02xQRJD0zXgEbNF0eaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj
YTc3MzkwHhcNMjUwMTAxMTE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjIwODYxYTdiMDViZWE5NjI0YzRjNzVkYTM2MjllYTVjMTEwMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh9MVnbyfopSkNXTyPpUExSz7SsQ
ONSr46obuhDxolMY1zNNaXsrk3QUY94GtssbNysojenVuSH+bDFG6KIXPFJ4xGOE
PJzBrcfnJtjiwZmA+Bw3NEBESUT2YNL+TxRFWCiHACXCxtEoe2lxoYq8YLJ0JAgx
s2KvgJZdP2AKIvbA3Rez+2vUvHYqRPmyhr+AbXS6tGk8HbLFuLvizphY9ZCwPIFm
emNNnRbPv+S2OF0xLvGL2xleaBsopzEdLn4zBM85FBfxTs4pxq50Vgsfm0f6zVLt
xgRY33exhgWmQ4NRXEBVgV3zGUrd7L2hHWry7yM8PGkF9DqJ2hJbbBa+iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8ghhp7Bb6pYkxMddo2KepcEQHpMB8GA1UdIwQY
MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt
MmY4ZGYxODdmOThiLzEvdnlDR0duc0Z2cWxpVEV4MTJqWXA2bHdSQWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi
LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBFBMA0G
CSqGSIb3DQEBCwUAA4IBAQB5sUroLFQVX6hBN66chwsUTRWxC2bSQLpQSzl7AuKl
IRVL6B3ueJtZiZxRy5URHU7rdq4GGg3/CzmPc9P6KcO3gpETg60lDB2cxjtZVzT4
z4LyI3w2q/LfGDJDepxLGx4tsz1+VfVBz+zkHvMJJLzbDpr+xPtNymO4z4lt9s0p
OvICH8kJGYnpsQZaxsyHLPlMhIb9wJspR97uOeEJaKGK+i5E/d5OPvsJVAj8cF9M
c16YIDacSQFFM95KFPnyoLHFL4fRKJQnXhUy9uN3PLKpT3IrS0J6LGLbk0wKpPtT
sHxtDOJ8VsL90fPNbDSmBnmRncLdrMGSlW1moqz1Q+gs
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:30:30 2025 by rpki-client