Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7Vkvdbayc332rXjpZRZWSGICr9o.roa
File: 7Vkvdbayc332rXjpZRZWSGICr9o.roa (raw, json)
Hash identifier: c2d+Gemnxb33gPT3zp010Rv8xRrTu4fPuzgqiaR1Sy0=
Subject key identifier: ED:59:2F:75:B6:B2:73:7D:F6:AD:78:E9:65:16:56:48:62:02:AF:DA
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0194236A29DAC8F720BCD8D3014F2DC51BB7
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7Vkvdbayc332rXjpZRZWSGICr9o.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39494
IP address blocks: 31.177.85.0/24 maxlen: 24
31.177.86.0/23 maxlen: 24
79.174.72.0/22 maxlen: 22
89.104.64.0/19 maxlen: 19
89.104.76.0/24 maxlen: 24
89.111.128.0/18 maxlen: 18
89.111.144.0/20 maxlen: 20
89.111.160.0/20 maxlen: 24
89.111.176.0/20 maxlen: 20
89.111.176.0/22 maxlen: 22
89.111.177.0/24 maxlen: 24
91.217.21.0/24 maxlen: 24
2a01:d8::/32 maxlen: 48
2a02:2090::/32 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:29:da:c8:f7:20:bc:d8:d3:01:4f:2d:c5:1b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed592f75b6b2737df6ad78e9651656486202afda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:66:60:1e:7f:d0:71:48:62:a3:be:f3:87:
2b:c9:fd:7d:c2:b0:91:ae:fc:8b:63:21:0a:1d:a3:
8d:59:c8:24:47:8d:97:57:b5:f7:e1:fd:77:d9:fa:
25:43:9b:12:9b:41:1b:fa:f4:a5:9f:2a:8d:ec:ea:
13:55:75:c4:1a:2b:c9:4c:f7:a9:1a:7a:22:18:72:
1e:b9:ba:01:e2:4a:6a:30:09:d7:e2:7b:34:3b:92:
ce:18:a7:c5:8b:1f:6e:a5:cc:22:0c:7a:93:26:db:
19:f4:2c:c6:57:39:0e:f1:bf:64:b5:ea:ca:59:53:
6e:7e:1b:2c:9d:a0:38:70:a5:31:cb:2f:19:de:fb:
22:c4:ac:0e:1a:51:b7:1a:ae:c5:92:76:d1:e3:1b:
c7:0b:77:d1:d2:88:0c:5b:8d:ec:75:0b:0d:c9:e2:
87:c7:0a:30:6c:e5:6f:08:61:ee:57:66:c1:55:1c:
c9:41:b8:75:ba:f2:71:c8:cc:1e:84:26:6e:b9:de:
83:53:eb:73:6c:68:81:f0:a7:26:b9:87:f7:89:9d:
a6:e6:46:e2:98:ef:77:57:93:51:35:60:ba:88:c9:
c5:c0:60:c2:4f:7c:f3:6b:ea:51:fc:08:db:be:94:
7a:9f:bf:00:65:77:dc:64:19:7b:35:16:e1:0d:6f:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:2F:75:B6:B2:73:7D:F6:AD:78:E9:65:16:56:48:62:02:AF:DA
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7Vkvdbayc332rXjpZRZWSGICr9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.85.0-31.177.87.255
79.174.72.0/22
89.104.64.0/19
89.111.128.0/18
91.217.21.0/24
IPv6:
2a01:d8::/32
2a02:2090::/32
Signature Algorithm: sha256WithRSAEncryption
08:59:16:be:a7:62:16:23:ba:40:3c:61:94:5c:3d:a4:f5:73:
9d:02:cf:0c:aa:51:e6:86:3e:32:9a:39:9a:3d:27:84:16:22:
13:c5:32:ef:cb:dc:05:c8:5d:d4:4b:fd:64:4e:58:dc:07:3a:
20:b9:69:39:b2:c5:9b:56:fa:de:65:00:53:42:e5:0a:3e:46:
f2:7e:c6:a0:bd:68:57:7e:42:07:d6:14:02:70:34:2a:95:61:
e8:c3:ed:cc:7c:48:27:d9:2f:98:43:d3:d8:33:39:95:ec:e4:
04:08:e8:6f:cc:c6:12:7b:5e:32:f1:6b:a1:3e:34:0b:9e:d1:
32:58:80:cf:68:4e:3c:dd:8c:b6:47:cf:0d:27:ce:c1:4e:68:
e8:f9:97:cd:74:03:7a:50:57:ff:34:a2:d7:ec:ae:0d:56:78:
50:e5:35:87:f0:d4:ab:c4:eb:e2:d7:b9:ee:1c:76:20:9c:eb:
f3:36:61:a2:ff:ab:1a:2a:97:f0:84:15:53:4d:ec:26:be:2c:
b1:c4:65:97:41:3a:88:8e:a0:26:29:37:70:d6:e7:28:23:2d:
56:97:aa:ee:ca:9c:74:7b:40:30:69:13:73:9b:b0:8d:a8:77:
b7:00:a2:eb:22:ec:59:fc:5f:03:31:b4:66:ba:93:71:d0:9c:
da:62:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:15 2025 by rpki-client