Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/VOYB184l4I5HKOOxR4bYnxvGzZs.roa
File: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (raw, json)
Hash identifier: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=
Subject key identifier: 54:E6:01:D7:CE:25:E0:8E:47:28:E3:B1:47:86:D8:9F:1B:C6:CD:9B
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019427477F94E00E3247D450267033F43CF0
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/VOYB184l4I5HKOOxR4bYnxvGzZs.roa
Signing time: Thu 02 Jan 2025 13:49:44 +0000
ROA not before: Thu 02 Jan 2025 13:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199522
IP address blocks: 83.98.216.0/24 maxlen: 24
89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
2001:16f8:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7f:94:e0:0e:32:47:d4:50:26:70:33:f4:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e601d7ce25e08e4728e3b14786d89f1bc6cd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:88:8e:7a:71:24:de:af:3d:69:71:e2:20:
e9:c9:f0:88:c2:4a:38:16:6a:37:d1:87:f3:b7:f3:
3f:41:17:8b:ed:c3:3a:db:3d:d5:32:65:55:ae:32:
e7:0c:33:0b:f1:d7:27:57:0b:fe:ef:9a:01:54:af:
14:57:d8:c8:ee:9b:a9:0d:0f:2a:a8:00:b8:ba:f4:
9b:ce:ff:59:9b:db:62:2b:36:ca:c1:c8:0e:06:55:
f2:4f:34:85:ff:50:57:a9:09:15:4d:b5:4b:d5:57:
dd:8c:44:dc:3f:e3:eb:9c:d8:d7:1c:5a:27:1e:b8:
16:40:fb:52:5d:ba:55:cf:fb:65:17:5d:01:1f:ad:
a4:9a:a3:a9:93:1e:d1:af:60:bb:99:28:36:8d:85:
b5:1f:48:c4:95:fb:d7:b1:95:33:2b:c8:24:8a:ac:
b3:db:3e:51:cc:56:a9:f6:c3:1a:ac:b2:c2:dd:59:
fd:76:e4:f3:56:b2:ec:2a:e3:b7:06:9c:fb:28:0b:
e6:c9:b6:14:6a:e8:6b:17:51:4f:fa:04:68:46:2c:
ea:ed:30:e8:49:5e:c6:d6:42:37:8a:39:0b:b7:f7:
5d:3e:c6:4a:8c:60:55:62:33:a9:44:93:38:ee:c5:
43:21:66:57:e4:0a:68:10:5b:8f:f4:06:85:34:5a:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:01:D7:CE:25:E0:8E:47:28:E3:B1:47:86:D8:9F:1B:C6:CD:9B
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/VOYB184l4I5HKOOxR4bYnxvGzZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.216.0/24
89.30.156.0/23
IPv6:
2001:16f8:4000::/48
Signature Algorithm: sha256WithRSAEncryption
01:97:bb:d4:ea:30:16:18:29:5e:e9:cb:b8:23:90:39:f5:57:
b8:7b:d9:41:a9:6e:03:81:32:10:55:9c:c5:78:e4:79:a8:c1:
bf:69:8f:fd:fe:76:27:1f:8e:c2:3f:c9:77:85:cf:53:e8:fc:
46:d0:46:fa:ad:af:d7:c4:a4:a8:3e:c6:0f:26:74:fe:77:66:
be:38:44:de:90:b5:33:36:9d:3c:15:53:3f:e0:c2:83:7e:dd:
d1:7e:c1:61:fc:56:e7:10:51:e0:ca:24:b8:7d:a6:6c:de:6e:
25:e0:b8:96:5f:2b:12:d9:4d:5d:d3:e6:a3:bd:f3:60:10:98:
ed:d3:6f:12:f4:fc:55:6f:0e:c3:e8:3c:a7:3e:25:29:93:ed:
8c:4d:69:ce:8a:7e:57:cc:80:bc:91:e2:32:53:08:89:6e:79:
63:1b:d6:82:28:a2:01:78:37:f2:4a:ae:d7:73:cd:21:d7:0b:
13:66:0b:5b:b6:2d:5b:0a:4b:88:ca:f1:bf:80:b2:2a:f4:04:
4f:bc:24:ce:d0:66:95:cc:52:fb:d3:f1:54:be:d6:b3:b6:98:
d3:5b:9b:78:53:0d:c8:14:b6:a6:03:8d:b2:ca:4a:0b:17:35:
06:98:18:f7:04:f0:5a:35:f6:77:06:14:74:a0:67:de:0c:ef:
1e:d6:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:13 2025 by rpki-client