Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vMMwbt5_EKeFyrTMn9TNmxy7w9A.roa
File: vMMwbt5_EKeFyrTMn9TNmxy7w9A.roa (raw, json)
Hash identifier: uxAvkZy4oNI6X1M4EljX+EjIm8m5fEINk6kau+Q3HYk=
Subject key identifier: BC:C3:30:6E:DE:7F:10:A7:85:CA:B4:CC:9F:D4:CD:9B:1C:BB:C3:D0
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F84B48C2755FC738FAC1139000907
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vMMwbt5_EKeFyrTMn9TNmxy7w9A.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 45.91.160.0/24 maxlen: 24
87.247.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:84:b4:8c:27:55:fc:73:8f:ac:11:39:00:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc3306ede7f10a785cab4cc9fd4cd9b1cbbc3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:15:be:88:22:d3:a1:0f:6a:ac:40:3e:75:
5e:ce:bd:33:26:50:8d:d1:35:c0:04:de:93:7e:6f:
7c:e4:0f:49:83:75:ba:09:61:c9:5e:5b:92:38:96:
68:5c:71:9c:0a:7b:9b:35:a2:1d:a3:e8:75:89:1b:
65:41:56:69:1c:eb:78:c2:58:ec:5c:a0:e0:86:3f:
33:94:3a:3f:bb:50:aa:21:42:7d:4a:19:2a:12:62:
f0:05:e6:4e:0d:ec:12:62:ab:c5:30:22:c3:d9:14:
02:57:33:f6:c3:80:70:58:c5:13:ca:28:24:e8:09:
d6:af:e3:3f:92:80:49:7c:be:4a:de:3a:b8:12:0c:
81:3e:26:62:69:b3:87:31:18:04:37:06:2d:3b:f9:
e2:d7:53:a2:c6:72:67:42:bf:01:c6:2b:4a:79:b1:
bc:1b:48:05:54:08:ae:ca:a8:80:e5:66:0f:0c:79:
28:fc:dd:78:3c:c4:66:c1:19:fc:18:60:6d:67:04:
a9:f7:98:3f:1e:0a:48:44:c9:f3:2f:8a:cc:7d:f5:
6d:0a:98:fb:7b:71:5d:cc:0a:71:9c:ea:55:43:bc:
85:84:a1:84:8f:31:f4:43:0e:53:1b:9a:60:df:37:
56:e6:a4:28:24:cb:0d:78:63:6c:0c:3b:58:d0:15:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:30:6E:DE:7F:10:A7:85:CA:B4:CC:9F:D4:CD:9B:1C:BB:C3:D0
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vMMwbt5_EKeFyrTMn9TNmxy7w9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.160.0/24
87.247.140.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4f:86:39:a7:8e:11:a7:a7:90:e1:37:88:d2:b8:c9:2b:fd:
cc:c5:80:e2:68:31:aa:cd:8c:78:45:1c:42:fa:0c:2b:a5:34:
40:d8:cf:2e:04:ca:94:d1:59:67:eb:ce:75:33:06:03:e3:6f:
59:c5:b5:d2:6d:2b:fb:96:bd:79:d2:6a:57:98:3d:bb:e2:af:
0d:82:0f:3c:ef:63:18:1b:79:fb:2d:97:66:08:6d:38:bf:bf:
c8:a0:bb:e1:d0:3a:94:d6:b6:81:8c:4a:89:e4:33:28:34:66:
b7:90:cc:81:25:e1:b1:4f:46:ad:1b:53:94:a4:1e:08:5f:07:
73:16:69:4a:04:dd:4d:25:c8:7a:01:70:85:82:83:15:21:6d:
d2:a4:b8:a9:ff:76:af:97:c5:65:d2:0a:d4:a9:65:e5:27:86:
ca:66:1f:19:34:74:ca:2a:6b:57:33:c8:95:1a:5b:96:b7:d7:
b2:97:6d:3e:f7:d3:a9:67:93:f2:d1:4d:29:d8:8c:79:2a:8d:
17:b0:e0:8d:99:2b:d3:a7:e1:ba:6b:99:8e:37:ad:88:b7:86:
36:8a:48:04:43:e6:61:aa:3c:7a:25:f1:21:a6:5f:12:2f:a2:
52:df:06:c9:df:0d:4e:d8:da:b8:16:97:e6:79:82:c2:35:8f:
83:a6:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:19 2025 by rpki-client