Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VmVTpO0drY2bgDydbkBZGf_RX9Q.roa
File: VmVTpO0drY2bgDydbkBZGf_RX9Q.roa (raw, json)
Hash identifier: yVjUmTgAurhk4s97bTXjGde7pCyjgIcR8Gp6XTq/UwE=
Subject key identifier: 56:65:53:A4:ED:1D:AD:8D:9B:80:3C:9D:6E:40:59:19:FF:D1:5F:D4
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01964AC1EF190C44FC9BD3B47D89A4254768
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VmVTpO0drY2bgDydbkBZGf_RX9Q.roa
Signing time: Fri 18 Apr 2025 21:15:45 +0000
ROA not before: Fri 18 Apr 2025 21:15:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 87.239.249.0/24 maxlen: 24
87.239.252.0/24 maxlen: 24
107.181.147.0/24 maxlen: 24
107.181.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:c1:ef:19:0c:44:fc:9b:d3:b4:7d:89:a4:25:47:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Apr 18 21:15:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566553a4ed1dad8d9b803c9d6e405919ffd15fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:6c:81:d4:57:97:b3:20:cf:02:7f:aa:95:
c0:79:6f:97:cc:82:71:59:8d:0d:20:41:9d:e4:b8:
d7:d0:c9:2f:1f:39:66:f5:0f:69:c8:d6:3b:57:ae:
da:c2:31:d9:f0:c8:0a:ba:1a:c4:a7:d8:97:b1:54:
63:a3:aa:6b:49:33:fc:21:97:fa:ec:43:de:b3:50:
6a:03:4c:d1:a6:ae:23:e7:c9:02:35:7e:8d:f4:24:
dd:00:9f:21:1d:0f:78:46:a1:c9:bf:85:8e:6a:2d:
dd:8c:8a:9f:2f:c4:1e:fe:b9:10:a6:24:22:c6:ad:
98:f8:f0:d3:d8:18:cd:51:65:fd:d0:92:be:69:8d:
43:d6:b6:e1:f7:c9:2d:49:b0:3b:45:ff:f9:91:26:
ef:fe:dc:7f:5e:37:22:52:0b:86:60:8b:f4:a0:1d:
8b:43:fe:09:cb:14:d0:df:c0:9a:38:a2:3a:ab:c1:
54:cc:56:94:b4:70:52:08:eb:ce:50:0c:eb:76:43:
02:69:d6:a0:72:ef:46:f8:d5:f8:5f:87:38:38:55:
51:3f:bf:89:9b:99:c2:60:09:1d:e2:50:83:18:9b:
d6:b9:6f:78:1e:14:3b:03:d9:27:47:6d:47:59:73:
f0:aa:e3:73:a0:e2:83:e0:a9:32:a5:ad:53:f7:42:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:65:53:A4:ED:1D:AD:8D:9B:80:3C:9D:6E:40:59:19:FF:D1:5F:D4
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VmVTpO0drY2bgDydbkBZGf_RX9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.249.0/24
87.239.252.0/24
107.181.147.0/24
107.181.151.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c6:52:09:51:a6:f4:6d:95:a4:05:69:d1:0b:66:9f:dd:a1:
d4:ee:62:91:c6:08:85:cc:d5:e1:6c:30:be:76:cb:cf:d6:bd:
20:e3:28:b4:67:4d:36:fb:64:ce:2f:29:22:a2:d4:a8:20:a9:
8b:a7:43:31:3b:91:9e:c8:74:e1:55:c9:82:d0:9c:dd:83:36:
e5:34:d0:55:16:3d:df:a5:7d:5c:5c:90:16:ac:aa:1c:fe:e5:
56:3b:5a:14:f8:36:7f:4a:d8:7f:62:d1:4f:e5:b9:0f:3b:43:
ac:2c:fb:e1:fa:1b:39:43:77:1c:bb:0c:3d:c0:a8:ca:72:9f:
41:3b:53:81:b9:b8:b7:21:e0:3f:ae:4a:65:f1:33:f6:58:81:
37:13:3b:45:68:72:ce:d8:08:52:67:f5:9d:cf:1e:28:44:8e:
5b:45:80:b1:d8:0f:da:d6:10:5c:1f:aa:52:9c:74:32:8f:52:
76:d9:d1:71:d3:3a:9c:a4:92:7f:cb:23:36:18:e4:15:d3:75:
86:33:66:8e:10:bf:4f:f2:24:1d:9e:9b:1a:96:5e:ea:c2:ad:
e8:17:a9:2b:94:dd:07:34:03:a0:8a:0c:72:db:b1:ff:66:00:
1e:cc:60:f1:b8:af:93:0e:7a:29:ab:f0:f8:d0:1c:b6:e0:c2:
05:e3:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:32 2025 by rpki-client