Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa
File: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (raw, json)
Hash identifier: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=
Subject key identifier: 57:0D:B2:2D:24:37:2D:3C:6A:21:8F:B4:8E:96:B0:74:71:D8:45:97
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 01942369003D2DB1AE57386532DCF62DF321
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa
Signing time: Wed 01 Jan 2025 19:47:51 +0000
ROA not before: Wed 01 Jan 2025 19:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51438
IP address blocks: 194.77.158.0/24 maxlen: 24
2a13:b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:00:3d:2d:b1:ae:57:38:65:32:dc:f6:2d:f3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=570db22d24372d3c6a218fb48e96b07471d84597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:08:ee:d5:e8:35:24:7b:6f:a2:f8:c0:80:
bf:2b:32:69:d8:6c:6d:c0:4d:8c:e9:4b:87:0c:9f:
27:50:59:8e:3b:6c:83:2f:ae:13:72:aa:52:ef:37:
1b:4c:3e:fa:d4:15:d3:8a:82:34:f1:6a:39:1f:c9:
cf:ca:f0:41:6d:07:ee:70:a0:d2:ea:5e:1e:a0:03:
dc:f7:7e:3b:eb:10:47:c6:01:ba:f6:1f:70:93:5b:
e7:e1:c3:e5:fb:1c:4c:f5:d4:37:f0:50:d5:f6:2d:
09:4c:60:98:b7:01:1a:b6:8b:b8:48:3b:db:25:ab:
27:9c:6d:f7:dc:dc:91:23:b2:ae:71:55:1a:9d:59:
5e:f7:2d:73:b7:88:bc:0f:b6:e5:ea:78:38:ea:79:
20:58:be:a2:17:17:73:8c:74:0c:75:06:ed:7d:6b:
01:bd:43:79:1f:2c:a9:c9:5d:f5:f7:d9:a0:63:18:
2b:ba:24:4d:3d:c8:a4:47:2c:d4:48:6c:96:e7:05:
30:50:ca:f0:e5:de:dd:34:22:50:37:4f:6b:0c:3c:
3c:6d:25:10:cf:72:cb:4c:cf:99:b3:2f:4b:ce:3e:
69:66:68:76:e6:b3:09:b7:bb:7d:ba:32:ab:94:f1:
5e:74:c2:92:b7:d9:2d:c6:bb:15:53:43:3e:25:e3:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:B2:2D:24:37:2D:3C:6A:21:8F:B4:8E:96:B0:74:71:D8:45:97
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.158.0/24
IPv6:
2a13:b00::/29
Signature Algorithm: sha256WithRSAEncryption
16:ea:b5:e4:b2:0e:fe:22:9d:54:60:27:ce:aa:ae:f1:ee:50:
be:4c:4f:ec:0f:ab:80:dd:71:e9:67:32:e2:f8:ba:6c:a3:6d:
be:0b:9e:d6:21:64:50:9a:e2:59:34:ba:2a:21:a7:48:f1:ac:
ef:20:d2:bb:92:1f:29:56:83:0f:94:79:1e:43:6a:04:3d:12:
74:04:51:16:bc:f6:38:e8:cc:c4:bc:49:97:3e:0f:b1:3b:b1:
3b:e4:26:8e:ce:6a:8e:ff:09:f1:53:63:67:30:ac:c9:96:c1:
82:9d:d6:65:f6:db:f2:eb:e0:4e:5e:f1:5e:ca:dd:22:e2:dc:
fa:ca:8d:ff:68:19:11:63:17:ec:be:58:fd:55:c8:94:63:ac:
0a:90:d9:36:94:74:46:32:c3:80:32:48:4d:de:36:a3:d1:60:
15:dd:0b:5b:d1:81:a7:e7:e3:ee:e9:88:5c:74:01:39:30:5b:
d3:76:77:4b:a1:01:db:bc:7b:d9:14:56:ad:55:07:cf:6a:83:
6b:b4:eb:d0:60:4c:fb:6c:38:e6:22:f4:f5:86:17:44:61:79:
37:f2:83:d2:1c:47:fe:e4:bc:3c:5f:21:29:ce:8e:62:a1:b6:
ea:fe:ea:cc:6a:66:95:32:2d:50:96:08:dd:44:61:95:55:f0:
44:96:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:56 2025 by rpki-client