Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/VNahP0UQveZ8aD0TsmaExJY0tZA.roa
File: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (raw, json)
Hash identifier: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=
Subject key identifier: 54:D6:A1:3F:45:10:BD:E6:7C:68:3D:13:B2:66:84:C4:96:34:B5:90
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019426D9ABB840C7A9C00CA48140EC18301B
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/VNahP0UQveZ8aD0TsmaExJY0tZA.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201505
IP address blocks: 86.48.60.0/22 maxlen: 22
86.58.216.0/21 maxlen: 21
185.187.144.0/22 maxlen: 22
2a13:2540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ab:b8:40:c7:a9:c0:0c:a4:81:40:ec:18:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54d6a13f4510bde67c683d13b26684c49634b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:d5:64:2e:2b:61:c9:a7:63:f5:fb:29:dd:
2d:e7:f3:43:b9:fd:cf:17:af:22:66:4c:d4:e4:39:
11:46:a2:08:aa:7d:48:d2:26:46:1b:f7:7e:b2:86:
0e:e5:ee:f6:83:9b:21:9e:6c:11:d1:82:57:c7:96:
1c:9c:f4:a8:77:a3:40:ac:b7:1a:83:af:f5:8c:23:
9b:d1:97:9e:64:1d:b3:82:97:34:80:48:c3:45:02:
af:e9:e0:71:29:ad:f5:03:e1:36:55:dd:f8:87:4f:
59:d7:08:5b:ec:18:b4:28:e8:e6:92:c7:b9:bc:42:
47:aa:7a:0a:69:f8:5e:6e:23:33:7e:c8:fc:4c:8e:
d0:b4:29:1c:33:37:fb:50:56:eb:26:3a:fc:05:20:
d2:da:e8:a9:06:3a:00:5b:96:13:22:a5:1f:26:f7:
d2:cc:3b:33:11:6f:33:b5:da:bf:81:f3:4e:a9:2c:
8a:f8:30:b9:ce:fa:d6:4d:15:c7:79:e8:a8:c2:d5:
2b:fe:cd:b4:e1:67:75:6c:00:4f:f5:1f:90:5c:3a:
4a:8d:47:8c:4b:fb:6b:ed:d4:1b:1a:7d:5e:f2:0a:
68:17:af:b9:25:9e:90:51:23:a2:35:95:c7:13:7a:
96:b5:23:07:c6:a0:85:81:ab:c8:22:76:48:bb:eb:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:A1:3F:45:10:BD:E6:7C:68:3D:13:B2:66:84:C4:96:34:B5:90
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/VNahP0UQveZ8aD0TsmaExJY0tZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.60.0/22
86.58.216.0/21
185.187.144.0/22
IPv6:
2a13:2540::/29
Signature Algorithm: sha256WithRSAEncryption
12:bf:29:1f:76:d4:73:4e:8e:6b:bf:64:32:f8:47:43:b4:9f:
8c:36:bf:b2:af:7c:95:63:1a:c4:5b:9e:df:49:54:e3:8f:a3:
59:91:45:f3:c1:02:84:66:cf:c1:4a:23:34:cf:00:db:a4:1e:
97:b7:33:d5:0e:34:68:6d:2a:f5:1a:71:33:36:6f:57:c7:bd:
b6:64:29:f6:81:0e:fa:66:bd:24:f4:9f:77:47:a9:56:d1:e1:
e6:ff:d0:47:b3:71:98:f5:d2:fb:45:d9:ad:43:06:b8:ce:d6:
21:c4:6f:b6:bd:49:37:54:82:64:64:4c:35:6d:c3:96:69:30:
74:8d:81:e6:6a:61:d3:11:df:f5:47:fa:9d:43:17:a0:58:61:
16:6f:69:ae:03:4e:cd:2d:31:31:d8:f6:bc:b6:a8:18:b2:cc:
6f:de:36:16:55:88:26:ed:ee:c6:81:db:51:82:61:ad:2c:03:
62:e6:f6:ca:e3:8b:29:bd:c8:95:c4:1b:a9:ef:7e:b5:89:76:
98:b6:ea:9c:47:c8:1a:29:97:bd:11:aa:a1:f9:e7:45:48:a8:
7f:09:8f:55:66:3e:d3:e7:16:4f:3c:b2:50:64:40:c0:85:f6:
30:f8:35:ed:ac:a4:6a:72:ca:ed:8c:51:e4:27:77:04:55:31:
be:b7:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:05 2025 by rpki-client