Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa
File: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (raw, json)
Hash identifier: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=
Subject key identifier: BE:D5:15:3E:61:7F:B1:1D:9B:9F:D1:8A:DF:F8:53:6C:42:32:FE:1D
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C47D3547462421DD779E1C67F5536
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44090
IP address blocks: 5.202.72.0/22 maxlen: 22
5.202.102.0/24 maxlen: 24
185.169.20.0/23 maxlen: 23
185.169.22.0/23 maxlen: 23
185.169.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:d3:54:74:62:42:1d:d7:79:e1:c6:7f:55:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed5153e617fb11d9b9fd18adff8536c4232fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:e5:3f:cd:43:02:60:5f:2f:98:9c:3b:56:
d2:bf:98:2e:f5:d1:c1:71:37:fd:a6:d0:11:89:75:
1c:38:89:6c:ac:7f:b2:25:69:f9:c3:69:f4:73:62:
29:d9:bd:a2:de:08:30:7c:42:4d:d2:c7:93:f4:82:
98:69:63:ab:03:1c:57:46:64:13:3f:4a:e0:74:47:
09:cf:51:c3:8c:80:a3:b0:e9:d5:c7:e5:ef:59:0f:
d4:21:dc:98:02:75:da:8a:25:1d:ad:2e:b7:b4:fc:
b2:9d:f8:88:a0:fb:6f:52:b3:d1:38:36:a3:ff:1e:
eb:35:6c:64:ac:93:12:41:6a:e5:90:1d:2e:b8:9f:
c6:1b:3d:b9:a5:a9:da:4c:68:44:ae:75:7c:6e:b5:
a9:36:dd:1b:58:ca:42:09:bc:6a:6f:a4:0a:3d:57:
06:6c:aa:e7:c4:62:f1:8c:ec:5b:3a:49:de:d4:cb:
36:4e:ff:37:d4:56:71:6f:b1:74:48:97:5a:41:ca:
60:62:e1:8a:63:ac:fa:4c:31:b6:1d:25:97:96:e0:
95:c1:9c:c6:9e:bb:8b:07:a4:c6:8d:7f:4e:fc:a6:
8c:7e:70:f0:22:3e:b5:48:d7:db:83:c3:f4:1b:2d:
2f:94:8e:4b:65:b2:cd:c4:3f:d9:4a:57:0e:3a:8e:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:15:3E:61:7F:B1:1D:9B:9F:D1:8A:DF:F8:53:6C:42:32:FE:1D
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.72.0/22
5.202.102.0/24
185.169.20.0/22
185.169.39.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2c:81:7a:21:79:8b:7a:65:15:1f:e6:3a:74:24:51:89:e5:
9e:e9:d0:62:14:1d:c5:b3:fc:f4:77:e1:86:37:4c:8a:c1:57:
ac:05:7c:46:d1:34:64:e5:5e:d3:d3:cf:44:41:e9:a7:42:10:
ae:58:0e:9e:4d:37:f0:a3:a0:73:2b:7b:c7:69:31:76:2a:48:
2f:ee:e5:be:93:aa:40:a0:95:e8:2a:2d:7e:b6:44:45:63:e1:
5f:7a:15:a3:f8:77:9f:46:d5:6e:d0:28:d9:68:d5:65:34:e1:
ba:af:97:55:aa:3d:cc:17:01:21:6a:92:b2:e6:e6:c6:c4:e7:
c4:54:d1:14:9c:14:93:e8:2f:a1:ec:e3:c9:9a:17:91:78:20:
e9:ce:f5:1a:7c:26:88:b6:20:bf:2d:23:c6:b0:a8:72:75:1b:
3e:9b:ad:5a:fe:3f:bc:bc:b8:a4:ae:57:83:e0:ca:71:3e:b2:
c2:c5:0f:ff:7c:32:f7:18:d8:44:bf:81:67:a2:96:bd:ea:89:
85:02:53:3c:72:8f:88:68:e2:99:37:f5:44:a7:3b:f2:4d:fb:
7f:67:02:c8:5e:96:9a:a3:c3:53:3f:51:7d:fa:ae:23:b5:eb:
f8:f7:a3:90:76:57:e8:40:d0:8d:c7:3a:47:1b:77:0a:33:3f:
eb:33:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:41 2025 by rpki-client