Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/VET9fIhBlbMTkKoXploMWOAPmAw.roa
File: VET9fIhBlbMTkKoXploMWOAPmAw.roa (raw, json)
Hash identifier: IZFEuAAvRivghgtvVt+QUqUo/tUxGCoadK0TgrUsiYg=
Subject key identifier: 54:44:FD:7C:88:41:95:B3:13:90:AA:17:A6:5A:0C:58:E0:0F:98:0C
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 0195044B5CA0BB19C034BA08B1A9AF211102
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/VET9fIhBlbMTkKoXploMWOAPmAw.roa
Signing time: Fri 14 Feb 2025 11:50:02 +0000
ROA not before: Fri 14 Feb 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51330
IP address blocks: 93.95.30.0/24 maxlen: 24
185.192.181.0/24 maxlen: 24
185.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:4b:5c:a0:bb:19:c0:34:ba:08:b1:a9:af:21:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Feb 14 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5444fd7c884195b31390aa17a65a0c58e00f980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:c9:d9:76:2e:5f:7f:a9:05:3b:1c:ec:b6:
0b:33:b4:f0:cb:f0:85:c6:0d:5e:e0:d5:87:d0:c9:
94:8b:66:86:f0:09:b2:f3:59:10:e5:1d:3c:bd:eb:
76:31:c0:0b:c6:b0:cb:71:05:75:9d:47:94:7c:87:
b6:7f:8a:3a:06:e8:d6:74:1f:8b:81:07:d5:32:82:
8e:3c:54:7b:70:68:f2:22:08:1f:17:f0:a0:74:b5:
e5:21:01:7f:79:b1:a4:1d:19:57:00:3a:38:ea:e9:
39:4e:e0:21:42:80:ec:38:00:6f:30:a8:ce:3e:c2:
76:99:19:47:94:b4:ea:72:5a:8d:73:27:83:c7:3a:
31:6e:d6:a1:3a:8a:31:eb:e8:a6:a3:f6:65:d1:00:
fc:45:e9:7f:39:ac:a1:17:4c:2c:49:39:c0:e7:51:
e6:6e:a2:9e:ef:27:1d:e4:e8:ae:19:c3:8f:e2:2d:
17:4b:03:34:15:aa:70:c0:d1:5a:5d:b6:e1:38:b4:
8d:34:11:49:a5:c9:7e:ba:35:81:05:ae:72:54:b3:
d0:d0:76:22:23:05:42:d7:7e:51:1f:ef:23:7a:b5:
54:17:a2:f5:bf:0b:97:46:2e:ba:b3:9b:1e:cc:4f:
3a:96:17:98:95:5d:29:e5:4b:e5:48:c4:b8:91:98:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:FD:7C:88:41:95:B3:13:90:AA:17:A6:5A:0C:58:E0:0F:98:0C
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/VET9fIhBlbMTkKoXploMWOAPmAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.30.0/24
185.192.181.0/24
185.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:67:2f:98:36:bb:b3:85:ff:33:4d:02:eb:58:98:b0:cb:71:
e8:3e:ca:e5:d9:ce:84:be:68:b7:c6:5a:ec:48:72:f0:d4:44:
c5:66:43:62:af:17:f4:19:de:5e:64:ed:17:99:17:e4:b2:12:
a7:72:c3:62:83:0a:19:e4:7c:b3:49:e0:1e:8a:24:bb:e3:39:
11:3e:b3:71:60:f4:f2:eb:00:70:c0:1c:ea:50:18:82:00:d1:
44:88:36:f4:38:38:02:de:66:81:93:c7:7f:d3:e0:54:46:5d:
16:76:3d:7e:6c:56:44:49:83:65:6c:94:42:43:62:a7:2b:7d:
bb:93:01:96:09:c1:59:cb:c7:26:58:7e:1f:c6:ac:ef:a4:6f:
98:c3:0b:a2:4b:dc:f4:03:5d:f9:e8:79:bd:32:c4:15:ce:84:
c5:45:73:eb:70:63:ba:ef:cf:91:12:68:1f:7d:e4:7a:0a:c7:
d5:d0:5e:d8:e9:f2:05:5c:a6:03:e5:b9:50:b5:74:89:0a:14:
32:a8:89:d9:7a:d3:79:d1:58:16:17:a2:2d:d1:fc:63:19:17:
df:25:ab:77:34:65:f3:f8:23:ed:12:8e:fa:3e:32:6a:64:e0:
f5:5f:e2:b3:6b:45:ab:51:5a:f5:16:50:2d:34:1b:fc:27:2a:
4c:59:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:15 2025 by rpki-client