Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/vjPba2JgQbHt0hsYkVRnRgmwBAM.roa
File: vjPba2JgQbHt0hsYkVRnRgmwBAM.roa (raw, json)
Hash identifier: 8c+Ryn63xF27R3BvDUYHmIGYqOss/zkgsLLLH0vxvzU=
Subject key identifier: BE:33:DB:6B:62:60:41:B1:ED:D2:1B:18:91:54:67:46:09:B0:04:03
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0194FE075B6661D502B5D5F93813A9F0D54F
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/vjPba2JgQbHt0hsYkVRnRgmwBAM.roa
Signing time: Thu 13 Feb 2025 06:38:02 +0000
ROA not before: Thu 13 Feb 2025 06:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
46.34.160.0/24 maxlen: 24
46.34.161.0/24 maxlen: 24
46.34.162.0/24 maxlen: 24
89.42.197.0/24 maxlen: 24
89.42.198.0/24 maxlen: 24
89.42.199.0/24 maxlen: 24
89.47.196.0/24 maxlen: 24
89.47.199.0/24 maxlen: 24
89.47.203.0/24 maxlen: 24
92.114.48.0/23 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
2a01:5500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:07:5b:66:61:d5:02:b5:d5:f9:38:13:a9:f0:d5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Feb 13 06:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be33db6b626041b1edd21b189154674609b00403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:c4:0d:eb:a6:e3:a0:4c:e5:21:8c:2e:c8:
82:58:b9:d4:e7:ef:bd:c5:a2:5e:17:65:16:e6:2b:
85:6d:b8:ce:e6:fb:c9:0a:4c:34:60:b2:98:b6:0e:
74:c1:7b:39:fe:bd:14:c6:a5:19:10:f3:80:50:3f:
8a:35:7a:69:8d:64:44:55:74:1e:43:c9:53:25:4e:
ce:c8:86:7c:3a:24:2f:63:22:77:db:84:0f:59:22:
45:5f:61:24:cc:4d:17:29:a3:3e:05:42:44:3e:04:
18:b9:ee:13:a2:d7:50:f0:84:33:57:61:9e:bb:e1:
2e:00:51:36:d1:00:47:5b:98:62:26:e7:48:13:97:
f7:6d:58:34:c6:ea:09:25:a1:1b:92:b8:16:91:a5:
b5:42:dc:b9:60:ef:b3:83:1f:49:b6:58:1b:4e:b6:
bf:d0:65:13:e4:ac:ad:2d:45:60:4c:35:2b:c4:8d:
3a:3b:74:b5:19:26:75:b4:43:94:14:0c:74:ce:ae:
36:3f:8f:1f:19:83:37:08:91:9b:72:4a:b8:a6:92:
2f:5a:f5:a6:22:ff:10:70:46:ad:d4:84:68:61:53:
68:23:ed:dd:1e:c5:a8:da:6d:9f:f7:8a:74:bf:cc:
71:24:c2:42:7b:a6:6a:b0:d4:67:88:eb:b9:6d:29:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:DB:6B:62:60:41:B1:ED:D2:1B:18:91:54:67:46:09:B0:04:03
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/vjPba2JgQbHt0hsYkVRnRgmwBAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.197.0-89.42.199.255
89.47.196.0/24
89.47.199.0/24
89.47.203.0/24
92.114.48.0/23
IPv6:
2a01:5500::/29
Signature Algorithm: sha256WithRSAEncryption
28:73:0c:6b:8a:71:6f:5f:bf:c5:e9:ea:01:ab:35:3c:21:7f:
64:8b:00:86:5c:96:bd:84:25:99:f5:f2:7e:f1:60:81:4a:f0:
87:c3:b8:a7:58:29:c3:d7:65:13:b8:b2:20:cd:7b:83:54:c4:
6f:f1:ec:b4:90:71:3e:8c:08:68:dc:63:e1:46:2f:3d:43:c5:
ce:f5:be:2a:bf:51:98:5d:a1:77:61:33:d2:54:89:74:a0:f7:
58:df:8a:6f:4b:92:96:b5:87:3a:0a:a2:9a:67:30:ea:d7:46:
6f:a8:f3:47:ea:4a:39:26:a7:03:da:47:75:0a:2a:f4:f7:5c:
cc:d0:38:32:db:e6:66:3d:a0:1f:b5:0a:40:ef:a9:33:79:11:
ae:5e:2b:9b:68:ac:81:ac:62:28:17:65:db:d0:e5:65:9c:4e:
86:2f:4b:ad:9b:be:2c:ac:4d:70:c6:32:1b:05:31:fc:98:5c:
d4:20:b0:4d:5a:f0:e1:32:2f:b2:51:aa:36:d0:da:e9:64:28:
d9:d1:93:dc:33:a8:4b:a5:8e:f9:c8:25:f6:0c:37:7d:5c:db:
f8:91:41:5d:1d:a3:ca:4a:3b:cc:66:0f:fb:3b:af:da:ec:62:
95:09:53:a6:89:26:a2:d4:80:1b:60:62:9d:ca:3c:cd:63:2f:
11:30:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:56 2025 by rpki-client