Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa
File: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (raw, json)
Hash identifier: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=
Subject key identifier: 56:4A:D9:9F:53:8A:E1:EC:2F:68:6D:21:BE:34:18:23:40:26:94:A5
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019427B615569781498969A65FDFF37C609F
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 140.150.96.0/19 maxlen: 24
176.116.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:15:56:97:81:49:89:69:a6:5f:df:f3:7c:60:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=564ad99f538ae1ec2f686d21be341823402694a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:39:07:8c:d7:c4:42:bd:51:a3:d6:bc:43:
40:f6:68:c1:ae:9a:03:9e:21:01:96:29:6d:e4:a1:
12:dc:31:0d:1c:61:82:70:19:5f:9e:a3:0a:e3:56:
c7:c9:68:ee:3f:f5:ff:3f:47:ed:60:db:b4:7c:50:
f1:02:70:12:56:f4:19:3d:be:1c:f2:3f:2d:15:89:
0f:8c:71:87:21:42:6b:82:ea:76:ce:d0:d2:8f:4b:
6b:d9:42:9a:fa:38:ff:13:18:8b:ca:b1:32:86:65:
57:b5:47:39:b7:b2:0d:e9:09:a7:07:2c:f2:43:1a:
ad:0b:ab:aa:c7:d1:08:44:7b:6e:5e:4e:80:12:56:
6a:98:ab:fe:4f:48:bf:cc:d4:3d:f0:f1:ba:00:5e:
5e:02:d5:33:0e:19:73:a1:2c:50:76:dd:d5:4e:e6:
ec:ce:e0:e5:7e:c2:d9:e2:a0:2a:5d:c6:be:ba:85:
a3:e4:8f:64:45:fc:98:c0:77:87:c7:dc:02:4d:da:
ac:ce:d6:04:e7:e6:7e:c4:a0:59:b0:0c:e7:27:f8:
d2:08:10:9e:1a:eb:d5:80:6a:08:19:87:e9:13:0e:
62:81:30:94:cd:0c:7e:74:98:d4:08:6c:50:a8:df:
fd:80:72:57:a8:8a:fe:ef:94:b7:74:a0:51:18:fc:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:D9:9F:53:8A:E1:EC:2F:68:6D:21:BE:34:18:23:40:26:94:A5
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.96.0/19
176.116.21.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3b:57:ce:93:74:ae:23:23:63:a9:b2:79:1c:19:67:d6:f8:
ae:1e:26:54:8c:68:5b:d8:2b:e4:7a:4c:13:32:46:47:2a:03:
62:8f:e6:c0:3d:e8:2b:8e:71:2e:d8:d5:bc:41:69:3c:cf:fe:
8d:6d:59:4e:5c:fa:06:e1:6d:3a:95:38:ff:fe:4b:98:91:76:
dd:fa:12:93:2e:5d:5e:aa:74:5c:52:8d:67:e5:94:c0:3f:28:
16:86:0a:a0:d0:f6:27:c7:69:04:12:4a:b3:75:10:ed:b1:a9:
8d:54:a8:68:6f:8f:57:89:f6:dc:b9:fb:02:44:d0:c7:02:33:
40:58:28:69:d9:ed:c0:75:9b:b2:e2:c4:36:6b:9e:7b:66:67:
42:9c:28:c5:1d:07:34:a3:f0:e9:3a:56:73:40:0f:7a:a7:aa:
de:2b:4c:57:ff:ab:10:bc:d1:ed:a4:11:ba:a1:95:fe:ad:cd:
a9:0f:4f:24:9b:fc:69:71:eb:5c:cc:dd:c6:4c:63:c2:ca:e3:
ce:e3:6c:37:49:20:54:d4:e5:fb:18:4b:6d:66:95:00:9a:2f:
56:7b:a7:a9:99:6e:d5:a5:67:39:11:0c:a2:bb:08:13:c9:90:
d5:22:e0:56:58:72:b0:d3:2c:e0:f3:f0:41:62:8f:3c:b4:78:
20:39:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:10 2025 by rpki-client