Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VemaXGtmfoaMo4CyIY7DrqThx4g.roa
File: VemaXGtmfoaMo4CyIY7DrqThx4g.roa (raw, json)
Hash identifier: uhpN+d+645p+zy9YTwcuNIgl1J2AZT6xtyFhCdSeoII=
Subject key identifier: 55:E9:9A:5C:6B:66:7E:86:8C:A3:80:B2:21:8E:C3:AE:A4:E1:C7:88
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDD7B1F7EFAC54EDC4F3E3405F4E6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VemaXGtmfoaMo4CyIY7DrqThx4g.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397198
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dd:7b:1f:7e:fa:c5:4e:dc:4f:3e:34:05:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55e99a5c6b667e868ca380b2218ec3aea4e1c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:dc:81:ba:ba:08:89:09:50:ed:1f:c7:bf:
fa:69:45:30:72:81:e2:de:cd:d7:fd:dc:45:de:89:
4a:29:a4:2d:49:a8:89:81:02:53:38:23:a9:31:f2:
55:b5:59:7e:10:d8:61:d9:79:f7:82:d8:d8:bd:a5:
28:16:51:d7:61:d8:3d:bf:45:89:f2:5d:c9:4a:e6:
8e:b9:7e:98:52:33:fc:4f:39:39:aa:3d:4e:75:4a:
0d:ce:68:3d:a2:b6:d6:ec:dd:ff:7f:e9:e4:4e:92:
76:04:f0:86:6d:12:0f:79:ee:ef:67:e5:7a:2b:54:
c8:a1:1f:06:70:46:1e:8a:2c:3e:db:d0:7f:dc:e8:
3c:a5:1f:81:a9:be:71:23:ff:f3:8f:04:15:84:93:
cf:68:aa:2e:ea:e8:8b:3e:a4:96:57:0e:81:36:52:
6c:77:0a:8c:9e:3f:f2:8f:ac:33:43:39:25:8f:74:
74:d5:50:c7:ad:d4:de:ee:26:7a:4b:46:67:ed:58:
e7:4c:97:81:6a:d1:4c:b6:e1:fd:ef:f4:b4:a4:ba:
6f:22:1a:95:34:3f:55:2d:9e:0b:b1:7e:38:ce:dd:
e1:06:1f:9c:20:d3:1d:c0:b5:42:76:93:d0:a8:c2:
78:87:9c:0d:df:9e:2e:0b:82:e9:20:cb:8e:95:63:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:9A:5C:6B:66:7E:86:8C:A3:80:B2:21:8E:C3:AE:A4:E1:C7:88
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VemaXGtmfoaMo4CyIY7DrqThx4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
58:03:1e:c3:9a:10:ca:99:c7:2c:9a:91:d2:81:3d:ca:a5:e6:
be:d1:99:5e:0f:4e:85:b5:ff:42:23:ae:1c:21:9e:4d:d9:8c:
c8:e1:b6:d3:8a:28:c5:2f:07:19:18:88:41:61:8b:fe:10:54:
40:f6:dd:f0:af:66:b3:7b:c4:b3:ac:30:02:b5:ee:ec:9d:78:
d0:8c:b4:9b:0e:02:99:58:f7:6d:ea:c0:62:87:b1:55:84:14:
b5:02:08:7a:ba:7a:ad:01:af:d9:aa:de:4f:3e:d6:9a:b7:64:
7e:eb:81:cf:8b:2e:92:18:18:e8:0f:53:b7:8a:31:34:92:af:
2b:fd:e5:91:80:12:79:c2:c5:e7:0d:f0:6a:3e:5b:2a:96:fc:
7b:ea:ef:62:45:cf:60:ee:77:f7:0e:48:8a:db:7e:ef:01:e7:
a0:b6:d8:36:84:b6:cb:7e:d1:49:ae:04:0d:27:01:fa:3b:34:
fd:e9:41:22:b7:b1:f4:1f:9f:32:ab:aa:12:1a:08:ff:0f:4a:
7b:af:5f:68:7c:4f:3a:3b:42:b1:d2:d3:ea:57:b2:9f:54:a2:
33:e8:77:3b:32:13:f3:bd:48:bb:4c:e9:be:41:fb:bd:32:a8:
62:f0:4f:53:d1:5b:b7:83:29:3e:f0:41:75:fc:11:ea:48:eb:
ab:90:b8:bf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+917H376xU7cTz40BfTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWU5OWE1YzZiNjY3ZTg2OGNhMzgwYjIyMThlYzNhZWE0ZTFjNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ofcgbq6CIkJUO0fx7/6aUUwcoHi
3s3X/dxF3olKKaQtSaiJgQJTOCOpMfJVtVl+ENhh2Xn3gtjYvaUoFlHXYdg9v0WJ
8l3JSuaOuX6YUjP8Tzk5qj1OdUoNzmg9orbW7N3/f+nkTpJ2BPCGbRIPee7vZ+V6
K1TIoR8GcEYeiiw+29B/3Og8pR+Bqb5xI//zjwQVhJPPaKou6uiLPqSWVw6BNlJs
dwqMnj/yj6wzQzklj3R01VDHrdTe7iZ6S0Zn7VjnTJeBatFMtuH97/S0pLpvIhqV
ND9VLZ4LsX44zt3hBh+cINMdwLVCdpPQqMJ4h5wN354uC4LpIMuOlWOu2wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFXpmlxrZn6GjKOAsiGOw66k4ceIMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvVmVtYVhHdG1mb2FNbzRDeUlZN0RycVRoeDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFgDHsOaEMqZxyyakdKBPcql5r7RmV4P
ToW1/0Ijrhwhnk3ZjMjhttOKKMUvBxkYiEFhi/4QVED23fCvZrN7xLOsMAK17uyd
eNCMtJsOAplY923qwGKHsVWEFLUCCHq6eq0Br9mq3k8+1pq3ZH7rgc+LLpIYGOgP
U7eKMTSSryv95ZGAEnnCxecN8Go+WyqW/Hvq72JFz2Dud/cOSIrbfu8B56C22DaE
tst+0UmuBA0nAfo7NP3pQSK3sfQfnzKrqhIaCP8PSnuvX2h8Tzo7QrHS0+pXsp9U
ojPodzsyE/O9SLtM6b5B+70yqGLwT1PRW7eDKT7wQXX8EepI66uQuL8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:41:09 2025 by rpki-client