Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vx3LT01DaNVhvYsH5lolBjM-Quw.roa
File: vx3LT01DaNVhvYsH5lolBjM-Quw.roa (raw, json)
Hash identifier: QC5AGAFgKzUzE9R4tM9cRe6kQgcxfUl8H95izNFTY+c=
Subject key identifier: BF:1D:CB:4F:4D:43:68:D5:61:BD:8B:07:E6:5A:25:06:33:3E:42:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019643E65644F3D3DFF2682C57D04056557C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vx3LT01DaNVhvYsH5lolBjM-Quw.roa
Signing time: Thu 17 Apr 2025 13:18:10 +0000
ROA not before: Thu 17 Apr 2025 13:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151612
IP address blocks: 31.13.224.0/24 maxlen: 24
31.13.231.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e6:56:44:f3:d3:df:f2:68:2c:57:d0:40:56:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 13:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf1dcb4f4d4368d561bd8b07e65a2506333e42ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:61:20:a2:d7:20:7e:e0:8a:f8:c0:95:ef:
cd:b2:bf:82:25:62:9c:65:32:e2:a3:8b:ba:2a:21:
82:32:f5:e6:80:b5:8a:19:c9:37:be:a0:71:74:83:
16:59:1f:e3:6d:ef:74:1b:b0:0f:b2:1a:94:35:f3:
ab:fc:7f:d4:72:0a:da:17:63:17:fa:e5:30:05:a1:
2e:7b:54:4d:d2:20:3e:ec:a2:ae:ea:dd:60:6d:6a:
13:db:ec:05:42:ef:cd:ca:a7:6f:aa:86:8e:2e:2c:
d4:36:5e:21:f6:43:de:43:d3:7a:3b:11:71:55:05:
19:29:2d:f7:4b:17:a3:8a:d2:97:3e:c2:73:39:60:
2f:a7:e2:d7:98:25:5d:4c:52:58:88:c6:76:7f:f2:
f6:92:f0:24:62:6e:ac:96:3e:39:62:bd:60:af:4f:
74:fa:da:b8:8d:1d:09:26:2a:fa:9c:ef:31:70:f6:
ac:d7:48:7f:36:79:a5:9d:7c:b6:4d:53:03:02:c0:
e6:dc:c2:cf:a8:5b:90:55:7d:e3:47:9e:dc:38:f4:
9f:86:ef:03:0a:e9:32:8a:23:ed:53:de:8e:59:49:
6c:30:ab:f2:7c:4c:ee:c8:13:8a:1f:f8:9d:7a:34:
7e:8e:a7:f2:ea:2c:5b:31:41:b6:44:3e:4e:72:f3:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:CB:4F:4D:43:68:D5:61:BD:8B:07:E6:5A:25:06:33:3E:42:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vx3LT01DaNVhvYsH5lolBjM-Quw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
31.13.231.0/24
81.161.230.0/24
85.31.47.0/24
193.37.47.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e0:9c:b3:e2:9c:8d:e4:3a:2c:c3:e0:0e:bb:ed:9b:5f:42:
29:a7:c1:88:5f:c1:3d:9f:38:e3:f7:b7:02:3b:f1:93:09:9a:
5e:b6:fd:c8:04:84:0d:8f:8f:e0:e0:4f:67:e4:ae:22:87:ab:
89:2b:c2:6f:2f:0c:e6:eb:ad:f1:39:8f:ec:0e:2d:e1:21:4c:
19:03:92:c9:7c:9f:e5:9c:d3:ad:0a:16:04:58:37:df:17:1b:
37:32:3f:37:82:c1:63:5d:d7:af:c1:6e:42:d9:4d:f3:47:71:
e5:d2:f9:2c:d7:93:2c:86:8d:00:ac:95:92:45:82:5e:3a:04:
41:ac:7c:be:6c:9e:cf:38:a6:36:7e:36:20:4f:b6:ac:08:b6:
e6:42:b2:76:42:9f:56:d7:d9:10:11:23:67:94:83:a1:4f:f2:
b7:de:26:7a:d8:82:c7:1a:de:51:90:a8:71:c5:c5:25:05:e3:
6e:55:fb:ea:56:74:1e:34:ae:b9:ef:df:3f:1d:68:7c:0d:5d:
f0:6c:a7:e2:ee:8f:86:05:90:43:6b:9f:5d:bf:2d:6d:06:e1:
85:e9:77:39:1f:00:b3:69:1c:47:47:c9:0e:d0:ec:54:86:b6:
fa:6b:8f:72:cb:c1:6b:fe:9e:fa:3f:7c:14:94:7b:58:bb:fc:
23:ce:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:07 2025 by rpki-client