Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vb66MMxTh_VQA3vts8VFUTKfHQ4.roa
File: Vb66MMxTh_VQA3vts8VFUTKfHQ4.roa (raw, json)
Hash identifier: 57TioHWR8j6R+jB9pe5+uEd3vhpty3hNFWPA/+VRBWQ=
Subject key identifier: 55:BE:BA:30:CC:53:87:F5:50:03:7B:ED:B3:C5:45:51:32:9F:1D:0E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01949A03C87D48E83CB8E13692835F492D18
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vb66MMxTh_VQA3vts8VFUTKfHQ4.roa
Signing time: Fri 24 Jan 2025 20:32:06 +0000
ROA not before: Fri 24 Jan 2025 20:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132978
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:03:c8:7d:48:e8:3c:b8:e1:36:92:83:5f:49:2d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 24 20:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55beba30cc5387f550037bedb3c54551329f1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:10:e0:de:0b:82:25:b2:ab:e7:ce:f9:e9:
7f:93:98:62:40:60:7c:34:a0:f9:ef:fd:03:db:86:
9f:08:50:68:3b:a6:53:3e:85:d4:4a:e6:f3:f2:7d:
1d:90:87:9a:fa:34:04:db:3c:bb:f8:b5:7c:19:c5:
58:a7:87:39:50:fc:5e:f8:d3:2e:b3:d9:d8:e1:a2:
12:9c:1f:58:f2:43:89:00:54:33:a3:dd:04:15:0b:
e5:83:cc:8b:b4:54:ee:23:dd:b3:38:2b:c4:04:4c:
12:22:6b:04:d6:c3:e5:63:14:22:9f:15:6d:e2:43:
07:f8:6e:9f:89:b2:86:c6:8a:8e:15:4b:c6:70:60:
b8:a3:a9:09:5e:74:e5:13:77:e2:a8:d3:aa:12:7d:
a0:81:bb:5b:5a:2f:d8:bd:5f:02:44:cd:89:f7:79:
06:f0:ba:9e:9b:79:f8:8a:a3:c5:b2:82:f2:4b:03:
04:52:38:b3:91:70:9a:4f:a5:6d:94:cc:82:9b:37:
59:34:30:ed:6a:5d:9a:de:60:58:4f:99:38:83:a4:
e4:e4:f7:b0:ac:ee:f0:b3:cf:ca:94:7d:0e:8a:9f:
72:62:f7:87:e6:cf:22:83:b3:62:09:b4:c7:72:87:
7d:ca:5d:d8:d7:d7:11:47:4d:59:6d:d6:ab:07:6c:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BE:BA:30:CC:53:87:F5:50:03:7B:ED:B3:C5:45:51:32:9F:1D:0E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vb66MMxTh_VQA3vts8VFUTKfHQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3b:13:04:d6:58:72:12:84:36:bc:10:b0:f8:ba:4d:43:9e:
09:f6:27:05:4e:ea:a3:74:94:9b:a8:73:c3:da:0f:e9:aa:65:
57:db:04:bb:28:0d:ab:89:99:de:27:7a:2f:41:fb:51:56:b2:
84:72:8b:68:ad:0f:a3:b5:fd:9c:79:a0:9d:ce:90:c7:b7:5e:
35:12:0a:3e:29:fd:f6:a2:6a:e3:4d:ce:60:2d:05:a5:c2:95:
af:7b:c8:87:c7:68:f2:99:a6:06:1e:c1:30:04:1e:de:44:80:
fa:7f:84:33:28:7f:13:21:26:a1:b1:37:8b:3f:5b:85:c7:fb:
8f:0b:d4:ea:85:5d:99:a0:71:80:e7:0e:ac:6e:28:ac:b6:f0:
8e:e5:25:01:9d:5d:74:90:7b:05:bc:55:53:87:2f:6c:c0:27:
fd:57:c1:7c:77:73:3e:b6:c3:11:6e:71:d3:01:95:f5:10:db:
c4:3e:a5:ad:35:77:43:46:84:5f:1f:10:63:de:8d:69:9f:21:
5f:2f:f2:1b:c2:2e:e9:62:0c:c6:98:81:b9:e6:b2:9b:ff:7a:
7b:2c:fc:b5:47:9a:3d:59:1d:39:bf:49:51:1d:b7:68:48:eb:
3f:59:2c:5f:a9:07:81:af:87:ab:f5:b0:91:63:e3:a8:75:19:
c2:2e:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:57 2025 by rpki-client