Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/VEZmsiAJ5sgALlOgBmyA6RMCIsM.roa
File: VEZmsiAJ5sgALlOgBmyA6RMCIsM.roa (raw, json)
Hash identifier: KubTBjo21jsN2LB++oYxMGKypIJK8fMyOF/Y+HG+RTo=
Subject key identifier: 54:46:66:B2:20:09:E6:C8:00:2E:53:A0:06:6C:80:E9:13:02:22:C3
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 01968670A35F1AD04AE308988EEDF226F598
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/VEZmsiAJ5sgALlOgBmyA6RMCIsM.roa
Signing time: Wed 30 Apr 2025 11:24:10 +0000
ROA not before: Wed 30 Apr 2025 11:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29311
IP address blocks: 159.46.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:70:a3:5f:1a:d0:4a:e3:08:98:8e:ed:f2:26:f5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Apr 30 11:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=544666b22009e6c8002e53a0066c80e9130222c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:61:c9:9a:d7:39:68:6b:c9:af:8e:1d:66:
54:e5:ec:da:7e:e8:4a:e3:c8:fc:46:09:58:e6:2e:
60:2c:47:4e:c7:c0:97:89:1c:fd:a5:20:c3:51:2a:
22:2f:c0:4c:36:e4:d6:1c:fe:7b:af:ea:5b:f1:0f:
9a:de:f8:4c:14:40:24:f7:2d:1e:3d:9a:86:01:59:
16:45:f4:0b:c4:4c:55:84:5f:4c:ba:72:96:de:17:
7a:a1:95:7f:39:d5:83:ba:ce:fc:44:68:15:f1:25:
ad:bd:bc:02:8f:d6:e8:aa:39:67:78:79:f6:b0:5a:
a0:29:0e:ef:9b:d3:a3:65:35:38:45:07:61:29:ab:
20:7b:ec:8c:ad:5d:15:dc:07:7c:57:47:e6:aa:b0:
97:2a:a1:7b:35:74:b0:68:11:1b:7d:87:ed:e6:5e:
71:af:60:d6:88:6c:5a:f8:23:8e:bb:19:0d:1b:ed:
a2:2e:95:12:28:39:a7:7c:50:dd:fd:24:8e:80:bd:
78:39:d8:6a:b1:7c:6f:f9:5f:60:6f:23:30:a1:29:
56:14:8b:7a:20:f5:c4:51:e1:c2:38:ec:92:47:fc:
95:2f:39:e3:2a:0a:d6:80:df:96:74:8e:5d:e0:96:
8f:58:4e:13:9d:cc:51:bd:8e:9c:a5:61:ae:9f:9f:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:66:B2:20:09:E6:C8:00:2E:53:A0:06:6C:80:E9:13:02:22:C3
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/VEZmsiAJ5sgALlOgBmyA6RMCIsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.46.192.0/18
Signature Algorithm: sha256WithRSAEncryption
51:e9:7b:52:3e:da:76:c8:3b:ed:89:64:a3:22:88:f3:e6:80:
52:f7:62:53:ec:b4:50:20:c7:3b:82:28:46:53:13:a2:13:c1:
1b:4b:e6:b8:e3:f8:3d:48:04:54:5f:79:98:d3:16:20:55:4d:
e2:53:b3:68:dd:7c:8e:e3:d5:0a:c8:b3:b7:ff:38:78:8a:c2:
28:0d:62:85:81:85:ea:c5:bd:b3:1a:94:9c:6b:aa:d7:20:cc:
66:a3:9f:31:9f:33:53:21:d1:a3:b2:fc:40:00:43:dc:ca:7c:
bd:88:df:ea:d3:0d:c9:be:88:cc:2d:71:32:7f:2a:7e:b3:9c:
7d:30:01:86:89:36:09:a7:73:c0:53:d3:c7:03:0a:66:3a:fc:
73:b8:71:d9:d2:a6:f4:f4:24:49:6f:ca:04:65:68:42:4b:d6:
d9:e7:e2:58:f4:bb:ad:76:49:84:f3:d6:c4:69:63:e0:1b:fc:
d8:52:e1:2f:8f:0b:9d:e1:c0:8e:fd:4c:5f:2c:2f:7c:da:88:
0e:07:46:ca:7c:e2:e8:11:bb:6b:f3:8d:90:e0:8a:a7:d2:12:
63:2f:8e:33:8c:00:d4:af:2a:ad:4d:23:c4:5b:59:89:12:13:
89:5c:8c:63:5a:43:76:5e:fc:a2:2e:e9:c8:39:1b:28:29:af:
74:ab:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:23:11 2025 by rpki-client