Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa
File: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (raw, json)
Hash identifier: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=
Subject key identifier: 56:62:D6:17:69:0B:7F:B7:93:BF:C6:F0:31:76:E4:F5:BF:CC:7B:61
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 0194266C35B0B3ABCF74DED57D4DD4F81A74
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216050
IP address blocks: 195.222.124.0/24 maxlen: 24
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:b0:b3:ab:cf:74:de:d5:7d:4d:d4:f8:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5662d617690b7fb793bfc6f03176e4f5bfcc7b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:42:df:19:01:a3:e3:0b:0a:e4:29:35:db:
56:09:39:db:fb:d2:36:14:72:8f:cd:10:a2:f8:a0:
73:90:d0:db:2c:ba:91:2f:6e:a3:43:d9:df:85:c1:
d6:83:76:2c:79:e0:4c:50:af:9c:bf:04:03:d7:fb:
22:6a:7f:bc:3f:6e:e0:45:cd:75:d3:aa:87:8b:ee:
4e:74:6f:25:03:b6:e0:7c:06:c3:e6:d2:17:35:af:
ae:cf:91:ca:eb:c0:be:79:8e:0f:a2:0e:6b:c7:d2:
5e:19:92:0e:31:55:f4:da:b0:5c:b1:a2:28:0e:f8:
90:91:8b:eb:44:c6:91:45:bc:5b:1a:ac:9f:cb:9b:
0e:b0:17:36:72:77:6c:f6:e3:5e:87:4c:e0:32:77:
d9:d3:65:71:e0:28:2c:58:a5:3f:53:5a:97:f7:96:
56:64:a1:1f:20:14:c3:8a:5c:38:fd:e7:a1:42:11:
26:63:cc:d3:4e:f0:99:47:b7:07:fa:50:d9:3a:aa:
81:57:c6:48:a3:3c:b6:ed:c7:8e:c9:a0:ee:77:2e:
ca:a2:28:a7:3f:4c:58:62:e3:4b:6e:43:37:4f:52:
e1:f7:68:f3:92:ab:14:8b:fb:df:7e:e7:2f:83:00:
f3:5f:01:bc:cc:c1:fc:ec:51:0b:63:b2:60:f6:c6:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:D6:17:69:0B:7F:B7:93:BF:C6:F0:31:76:E4:F5:BF:CC:7B:61
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.124.0-195.222.126.255
Signature Algorithm: sha256WithRSAEncryption
05:a8:75:06:18:fb:1a:62:56:df:f4:5e:fc:ae:eb:e9:ab:35:
d3:98:a9:88:b5:a0:99:68:7d:c2:b1:c7:6f:d0:f2:48:92:69:
3a:e9:59:1d:1e:7b:16:cd:58:ff:94:95:0a:34:3a:f1:0c:e0:
37:3c:fe:7c:7a:2c:0d:b7:a3:76:cc:5b:24:2c:a3:ac:31:8b:
cc:c4:c0:ae:5b:8a:3e:04:f1:a8:8e:7b:45:bc:1f:c2:03:71:
6c:be:cf:ed:ce:0a:0f:94:bb:67:d4:d0:4e:4c:49:d1:27:f2:
54:29:a5:74:68:ae:69:ac:d8:8b:c6:df:c3:f4:0f:dd:5e:fc:
4c:96:79:d5:0b:cd:9b:ec:8d:28:5e:40:2d:25:59:d9:63:ef:
d8:6e:fb:dc:3f:dd:43:24:18:15:45:d4:5f:89:f7:65:05:e9:
5e:b5:13:3a:c8:e3:8a:31:1d:b4:67:51:b1:df:35:b4:7b:28:
4c:8d:26:72:71:da:0f:49:25:f9:dd:0b:82:84:fe:f1:18:bd:
bc:25:84:0e:95:74:c5:a1:9c:e4:5c:1d:d2:1e:4f:5c:86:cd:
e8:2c:fa:7c:47:32:dd:2e:a4:24:23:e8:ff:e4:e6:50:45:0d:
68:52:0c:aa:c0:1f:d2:e9:0f:ca:67:97:bc:7f:cd:a6:8c:77:
7c:73:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:19 2025 by rpki-client