Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/ViU3nx0KMvyzkw-cFoaI3YiJf24.roa
File: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (raw, json)
Hash identifier: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=
Subject key identifier: 56:25:37:9F:1D:0A:32:FC:B3:93:0F:9C:16:86:88:DD:88:89:7F:6E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 0194266BB6978D4195116B4576070686743E
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/ViU3nx0KMvyzkw-cFoaI3YiJf24.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47752
IP address blocks: 91.204.236.0/22 maxlen: 22
178.216.128.0/21 maxlen: 21
178.216.131.0/24 maxlen: 24
2001:678:c3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:97:8d:41:95:11:6b:45:76:07:06:86:74:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5625379f1d0a32fcb3930f9c168688dd88897f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:1c:82:c6:07:a4:be:64:92:ff:1f:c2:6b:
ae:65:92:83:43:9c:f9:41:aa:71:80:65:76:20:21:
5e:2f:d4:6c:e3:3a:5c:c8:17:72:e6:7b:c4:15:b4:
ca:5a:78:df:d2:10:8a:f5:a5:53:22:14:d8:ef:61:
fb:8d:d9:c7:57:83:94:f9:d2:6e:0e:90:0c:eb:5f:
4a:0c:7a:4a:40:5c:81:51:77:43:67:1f:65:9f:73:
84:e2:22:bf:20:7f:cf:5e:dc:28:c7:a2:cb:7f:9a:
56:e4:17:51:4d:da:d9:d2:e3:c4:a8:59:e0:ea:9b:
5a:93:56:17:e0:e4:06:e0:bc:24:5a:6a:17:bf:9e:
8e:6b:e8:da:3c:08:c1:3c:5c:a8:f0:25:b5:e8:c4:
3b:8d:4d:fa:1e:74:55:82:5b:46:02:9a:2c:b0:73:
3c:d2:6e:e4:e6:9c:e5:56:2c:c7:54:2d:97:d3:7f:
50:8d:21:c5:02:d2:d4:78:ec:5f:5e:83:8f:66:4c:
f5:f8:7f:81:0f:be:e8:41:a8:68:2b:69:4d:10:d9:
7b:1a:30:8b:83:1e:16:45:1b:ea:6f:70:78:7d:2b:
d5:70:76:85:59:18:db:ec:5d:b8:70:f9:49:30:b3:
0c:62:a4:55:a1:ff:5a:be:90:d3:7a:14:e9:97:af:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:37:9F:1D:0A:32:FC:B3:93:0F:9C:16:86:88:DD:88:89:7F:6E
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/ViU3nx0KMvyzkw-cFoaI3YiJf24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.236.0/22
178.216.128.0/21
IPv6:
2001:678:c3c::/48
Signature Algorithm: sha256WithRSAEncryption
46:b9:27:b7:63:0e:9c:79:f2:b3:76:33:a2:fc:f3:3d:ab:e3:
1f:5d:40:16:1c:30:d0:36:23:8c:d2:2b:8b:15:2b:e8:fa:8f:
8c:b9:b2:f2:90:b7:c9:02:4e:f1:3f:18:f8:93:3d:55:94:87:
62:31:73:3e:af:df:e3:c0:4c:ba:82:9a:77:ab:93:43:da:7b:
1a:a6:ba:6b:df:fd:8d:42:c7:64:b6:c3:1c:db:c2:e1:19:e1:
f2:8b:f4:b0:3e:2f:8f:1f:65:19:4f:24:c5:f2:e6:c3:7a:bd:
c2:79:71:de:fa:c3:fc:c9:73:13:4e:71:c9:4d:86:ed:4b:1f:
74:72:a0:38:0b:0a:8a:cc:b6:b2:65:4f:ef:8c:85:e1:6b:fd:
0b:30:88:3f:3a:fc:43:b7:26:42:6d:95:84:a5:2c:96:c1:9c:
1f:a5:49:54:4c:f4:d9:be:69:7c:46:4e:79:e8:55:0d:f3:da:
8f:58:90:e6:80:1a:3e:79:f6:aa:13:bb:7f:2d:6a:9d:05:35:
db:d8:29:38:1f:06:f9:a7:f3:81:80:5c:d6:00:0f:54:f7:32:
ad:26:a8:36:16:d8:5b:08:45:11:17:fb:6d:5c:bf:83:44:cd:
08:c0:d1:84:34:b2:94:50:50:e6:35:01:18:0b:fb:2b:61:83:
6f:55:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:48 2025 by rpki-client