Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vgrDVzIHM-lfYbprXn7b8oE_EG0.roa
File: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (raw, json)
Hash identifier: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=
Subject key identifier: BE:0A:C3:57:32:07:33:E9:5F:61:BA:6B:5E:7E:DB:F2:81:3F:10:6D
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019427472F15AE2A4D3E5B21D31A0A4CFF30
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vgrDVzIHM-lfYbprXn7b8oE_EG0.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199296
IP address blocks: 80.94.19.0/24 maxlen: 24
80.94.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2f:15:ae:2a:4d:3e:5b:21:d3:1a:0a:4c:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be0ac357320733e95f61ba6b5e7edbf2813f106d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:b7:ed:be:56:31:20:60:6d:17:ed:72:78:
23:c1:49:ad:2a:33:8a:96:1b:4c:9f:57:65:3b:0a:
1e:32:d4:1d:ea:3d:18:e0:4f:27:02:44:73:8a:e6:
c4:90:aa:b1:0a:eb:3f:bb:96:af:31:27:75:ad:2f:
b9:72:89:ff:2f:4f:3f:92:63:4d:fa:bc:97:b3:4e:
df:f4:41:59:ab:db:c5:35:d4:2c:6a:36:0d:ee:d1:
a2:ee:12:ef:10:bf:1e:41:33:cd:48:a0:86:d6:b9:
65:68:4a:4e:48:49:df:f9:95:b1:b5:0d:e7:16:8b:
7c:f0:90:63:35:9b:07:69:05:49:ef:f5:26:87:d9:
e8:45:b5:a7:f7:28:53:06:b2:e9:37:3a:5a:e2:cc:
57:4e:59:0b:51:3f:93:25:a6:39:5c:3f:ee:2e:fb:
91:ae:a3:69:89:3c:f0:66:7a:a3:1e:52:e5:ac:93:
22:81:71:8a:82:45:67:48:5a:84:f9:3e:f6:fa:c3:
88:4e:1b:59:ac:5a:68:1b:d1:0c:68:ba:81:ea:48:
dc:88:a5:40:97:0a:da:17:7b:4a:09:dd:04:94:24:
e0:02:4e:e4:d7:58:0c:cf:58:33:01:97:70:ed:1b:
af:6e:d2:ea:96:48:8e:a9:26:20:8b:0c:1f:ae:2c:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:C3:57:32:07:33:E9:5F:61:BA:6B:5E:7E:DB:F2:81:3F:10:6D
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vgrDVzIHM-lfYbprXn7b8oE_EG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.19.0/24
80.94.23.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:c7:b3:ea:6d:87:3b:30:8d:12:85:a9:48:82:4a:04:94:
8b:2a:c2:df:f0:a4:2b:6c:af:dd:7c:a3:20:fb:9b:bd:97:c7:
dc:22:11:41:f8:75:48:5e:65:19:6e:29:8b:11:02:7c:68:e6:
d2:1c:3b:04:0f:1e:37:f1:51:6f:78:e8:36:27:92:bc:7a:3b:
62:36:9e:43:34:b4:45:2d:f8:b7:9b:77:51:2c:17:e1:1a:51:
56:14:99:c4:81:b5:fe:a2:8f:ce:4b:60:1f:fa:61:42:30:97:
a6:f4:48:e8:e2:f0:5e:95:e8:00:50:34:8e:f7:f0:09:29:c0:
2d:86:09:1a:d8:bf:75:28:2b:21:d4:71:5d:c0:24:b4:9c:2d:
85:eb:62:80:79:c8:5b:de:73:e0:ce:e5:9d:81:49:b5:43:6d:
c9:09:34:7c:17:80:ea:8f:ad:db:92:12:bd:2d:ca:17:1e:27:
b1:13:92:1e:3e:a6:1f:23:a1:f0:14:4e:e2:54:3f:0e:e1:15:
8a:4a:e7:ce:ca:e1:ea:fd:b9:fd:fa:02:e1:40:80:d8:19:25:
f5:f2:b2:17:67:f3:15:c6:b1:fa:c6:01:5b:b7:3e:f2:4f:2a:
64:98:0e:ed:88:23:11:19:e0:09:d8:bd:04:c5:9b:2c:25:04:
87:6e:80:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnRy8VripNPlsh0xoKTP8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUwMTAyMTM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTBhYzM1NzMyMDczM2U5NWY2MWJhNmI1ZTdlZGJmMjgxM2YxMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykm37b5WMSBgbRftcngjwUmtKjOK
lhtMn1dlOwoeMtQd6j0Y4E8nAkRziubEkKqxCus/u5avMSd1rS+5con/L08/kmNN
+ryXs07f9EFZq9vFNdQsajYN7tGi7hLvEL8eQTPNSKCG1rllaEpOSEnf+ZWxtQ3n
Fot88JBjNZsHaQVJ7/Umh9noRbWn9yhTBrLpNzpa4sxXTlkLUT+TJaY5XD/uLvuR
rqNpiTzwZnqjHlLlrJMigXGKgkVnSFqE+T72+sOIThtZrFpoG9EMaLqB6kjciKVA
lwraF3tKCd0ElCTgAk7k11gMz1gzAZdw7RuvbtLqlkiOqSYgiwwfriwc0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL4Kw1cyBzPpX2G6a15+2/KBPxBtMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvdmdyRFZ6SUhNLWxmWWJwclhuN2I4b0VfRUcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUF4TAwQA
UF4XMA0GCSqGSIb3DQEBCwUAA4IBAQB1Rcez6m2HOzCNEoWpSIJKBJSLKsLf8KQr
bK/dfKMg+5u9l8fcIhFB+HVIXmUZbimLEQJ8aObSHDsEDx438VFveOg2J5K8ejti
Np5DNLRFLfi3m3dRLBfhGlFWFJnEgbX+oo/OS2Af+mFCMJem9Ejo4vBelegAUDSO
9/AJKcAthgka2L91KCsh1HFdwCS0nC2F62KAechb3nPgzuWdgUm1Q23JCTR8F4Dq
j63bkhK9LcoXHiexE5IePqYfI6HwFE7iVD8O4RWKSufOyuHq/bn9+gLhQIDYGSX1
8rIXZ/MVxrH6xgFbtz7yTypkmA7tiCMRGeAJ2L0ExZssJQSHboAq
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:41 2025 by rpki-client