Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VrukWlxMFEbCNf0gTyC01Cdsdkw.roa
File: VrukWlxMFEbCNf0gTyC01Cdsdkw.roa (raw, json)
Hash identifier: vcpOSoyTAaXsJsY/UZxRzt4EFwED6iTWo1POMxda/W0=
Subject key identifier: 56:BB:A4:5A:5C:4C:14:46:C2:35:FD:20:4F:20:B4:D4:27:6C:76:4C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01975DD9B408522BF53512B6A8A19F7C20CE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VrukWlxMFEbCNf0gTyC01Cdsdkw.roa
Signing time: Wed 11 Jun 2025 07:17:17 +0000
ROA not before: Wed 11 Jun 2025 07:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.170.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:d9:b4:08:52:2b:f5:35:12:b6:a8:a1:9f:7c:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 11 07:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56bba45a5c4c1446c235fd204f20b4d4276c764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:68:6a:2e:0d:29:e2:f3:e2:1a:8f:fb:e4:
3e:19:ab:38:62:15:8a:57:47:2b:27:eb:86:9b:ee:
e4:76:3d:ba:0b:2f:b9:7f:54:d6:6f:4b:e3:21:59:
74:d2:eb:77:7b:3b:44:3a:86:f7:9c:43:02:c1:f2:
46:92:bd:2b:9c:cf:ce:e6:f2:56:69:20:bf:4c:22:
ee:0f:5d:36:19:39:ef:6c:e3:93:fa:e0:8b:9c:eb:
58:8d:64:d9:fe:dd:20:fb:10:e2:ec:b4:19:c3:52:
d3:f7:ef:21:86:2a:ae:21:d2:40:49:86:fe:81:61:
4c:b4:4d:40:0f:4d:db:09:91:e9:0c:ba:e5:61:0b:
d4:43:e1:37:41:40:01:f1:88:b0:57:89:9b:85:15:
10:0a:81:e6:97:f9:17:f5:01:2a:b3:40:64:73:bb:
08:ea:00:15:f0:0b:3b:4c:e2:77:94:93:96:ba:30:
bd:6e:8e:78:57:d2:94:4c:46:46:52:f2:49:7b:52:
1e:33:ae:de:73:39:71:2f:c1:16:f5:36:c6:3e:ce:
33:62:9e:fa:e2:87:1a:db:4e:20:1f:a7:53:a3:29:
b9:bd:14:8e:da:89:83:39:53:22:be:94:3f:9c:99:
68:88:ed:cb:83:c7:19:83:9e:e0:db:93:d0:f6:e6:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:A4:5A:5C:4C:14:46:C2:35:FD:20:4F:20:B4:D4:27:6C:76:4C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VrukWlxMFEbCNf0gTyC01Cdsdkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.170.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:87:a9:e6:24:cc:e1:3e:8b:46:e4:c6:2f:1e:bf:7d:4c:49:
26:c6:5d:0c:bc:9d:d8:6a:ec:4b:c8:7f:c4:a1:7f:1c:64:82:
27:9c:3d:b5:b5:0e:da:cb:4c:57:d1:23:e2:61:91:31:eb:13:
f0:0c:d1:25:a1:4f:b3:bd:91:7b:e8:28:16:a0:94:4e:a9:ac:
02:02:49:b7:a3:ab:a0:fa:30:25:4d:b3:07:60:10:2d:8a:70:
1a:79:d8:0c:f4:59:50:83:8f:89:ba:3d:2b:2c:4c:80:e4:6a:
8f:f6:43:ad:6b:24:95:5e:c4:34:57:15:74:aa:1c:18:0c:13:
56:96:de:10:ae:85:54:2d:ca:c9:10:ef:60:82:1c:ab:f8:dd:
2d:f9:75:49:3f:99:40:83:be:78:97:33:23:ce:2e:e7:d0:3b:
b2:f7:89:ff:25:39:04:10:95:12:dc:c0:09:4f:ad:0b:8b:9c:
de:14:77:fc:41:05:bc:7b:39:b7:a1:2c:56:9d:ed:df:02:8b:
88:a5:08:da:61:c5:77:ef:ee:6f:c6:1c:68:75:a2:27:f5:95:
f0:87:17:33:59:62:ee:1c:58:a7:24:4e:af:df:41:7f:eb:43:
ef:05:33:f2:4c:91:a4:fe:f4:00:6b:6e:72:60:29:a9:9b:99:
87:54:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:52:55 2025 by rpki-client