Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa
File: VpccTipW0lNr-K9sqrEpGYv-Kv8.roa (raw, json)
Hash identifier: zrRywVhDOEX8ppVFjwMkfY6qiZ8PRXRoZXgmGI39CI4=
Subject key identifier: 56:97:1C:4E:2A:56:D2:53:6B:F8:AF:6C:AA:B1:29:19:8B:FE:2A:FF
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 0194F044603D3A711CD740A61B1AB25F4F3C
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa
Signing time: Mon 10 Feb 2025 14:30:00 +0000
ROA not before: Mon 10 Feb 2025 14:30:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58051
IP address blocks: 193.105.207.0/24 maxlen: 24
2a01:fdc1::/32 maxlen: 32
2a01:fdc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:44:60:3d:3a:71:1c:d7:40:a6:1b:1a:b2:5f:4f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Feb 10 14:30:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56971c4e2a56d2536bf8af6caab129198bfe2aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:fe:61:3d:22:9c:39:cc:90:c2:67:7e:89:
67:29:42:6d:7d:34:fc:5c:83:46:34:20:ad:c6:45:
14:61:d9:29:28:b6:0c:8a:8a:c3:dc:52:14:3e:c5:
8c:a5:df:08:76:24:22:8f:32:b0:64:a0:68:9c:12:
0f:c4:6f:19:bc:5f:b7:92:9c:c9:da:5c:80:d1:a4:
5f:f4:8f:d4:fc:d7:5d:36:e5:6b:22:f0:5a:4a:8b:
f3:f8:9f:6b:ee:13:87:44:f5:29:87:7a:63:cf:c2:
09:33:cb:61:db:fb:1f:9c:8d:6f:ed:a5:7a:ec:04:
dd:79:23:cc:fe:7c:af:b9:2f:d9:c2:dc:f6:30:64:
3b:9e:52:a8:55:a5:1f:2e:3e:e2:e7:7e:6e:ba:6b:
49:16:53:25:cc:df:d4:fd:22:35:cc:4d:75:58:07:
14:c8:78:76:5a:27:44:8d:11:82:b0:52:c6:11:04:
d9:c1:6a:74:37:8c:9f:5c:2b:d0:22:6f:3a:b0:a2:
9a:b5:1e:b6:94:06:c2:59:35:52:f3:e9:b8:61:20:
16:e0:29:c7:9e:3e:53:53:cc:0d:e0:2e:b9:b7:35:
b0:10:ff:8b:e8:85:c3:47:ce:4c:84:86:c5:bb:ae:
d0:ae:cc:2b:67:f4:41:25:ed:08:b8:f3:90:ed:e7:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:1C:4E:2A:56:D2:53:6B:F8:AF:6C:AA:B1:29:19:8B:FE:2A:FF
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/VpccTipW0lNr-K9sqrEpGYv-Kv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.207.0/24
IPv6:
2a01:fdc1::-2a01:fdc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:1f:17:b9:dc:94:c1:5d:97:f9:ef:24:f8:1f:1d:35:23:f3:
c4:e6:66:84:2a:e8:6d:07:5b:06:3d:49:9f:78:3b:f0:e5:1b:
3e:cc:97:81:92:d7:01:77:23:34:2d:ba:1f:30:fc:c0:da:64:
af:6f:c6:1f:f5:6b:87:2e:c4:c6:8f:22:c0:3d:db:1b:e6:98:
5b:9c:ea:ed:f1:0d:79:0a:68:43:c1:79:62:26:bf:f1:c2:61:
7e:49:1a:81:f8:de:d6:0e:75:62:83:3f:49:e2:36:90:26:fd:
3c:df:55:cb:5d:fa:12:ac:21:56:17:9c:cc:e2:6a:fa:61:71:
fc:36:ff:ca:a8:ce:fd:0b:52:5f:59:82:d2:21:3d:73:66:f2:
eb:da:c6:3c:f9:aa:5a:55:56:eb:69:a7:99:49:83:5e:75:6c:
49:e7:79:84:98:c7:61:57:1c:b2:7c:4e:e9:d4:58:dc:a5:31:
a2:17:e0:5f:19:99:ac:a9:5e:cc:5d:47:54:31:1d:e7:76:ce:
37:96:34:33:45:cf:29:8e:00:8f:66:21:cf:46:c9:e7:ed:1c:
5c:47:10:c8:06:80:70:1a:ed:e6:d4:1f:7e:f6:79:e3:e3:1c:
1b:7a:de:c4:f2:2d:92:51:90:84:bf:17:db:e0:76:73:0b:67:
39:bd:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:43 2025 by rpki-client