Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VqZeFvbbX-KsOWD9GK-fycFhuOI.roa
File: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (raw, json)
Hash identifier: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=
Subject key identifier: 56:A6:5E:16:F6:DB:5F:E2:AC:39:60:FD:18:AF:9F:C9:C1:61:B8:E2
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0196A09654A906E9F0BDBF5214BF3DCB3287
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VqZeFvbbX-KsOWD9GK-fycFhuOI.roa
Signing time: Mon 05 May 2025 13:15:28 +0000
ROA not before: Mon 05 May 2025 13:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:96:54:a9:06:e9:f0:bd:bf:52:14:bf:3d:cb:32:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: May 5 13:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56a65e16f6db5fe2ac3960fd18af9fc9c161b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:ef:0e:b4:43:58:83:ea:96:f6:20:77:ee:
84:74:9a:9c:34:46:75:db:d0:d0:69:0a:8b:0e:3c:
a0:8f:db:d5:03:35:99:0e:c1:9d:ac:23:86:77:6c:
00:a2:49:a8:e9:7a:43:74:5c:8a:5e:ac:3d:76:6f:
cb:5a:80:45:cf:94:d1:0c:c1:96:48:19:e5:a3:5a:
8b:3b:ce:47:7b:1b:cf:a6:fb:f3:d6:20:b2:dc:86:
2b:4f:8c:4e:27:66:42:07:d0:eb:a9:21:11:9c:e3:
58:26:b3:a5:bc:72:64:e2:78:b5:0f:18:0d:8b:e6:
3d:76:b7:1e:4d:47:c7:84:bd:67:bd:b2:78:4c:c3:
43:a2:38:4b:47:bb:ab:38:41:ae:bb:dd:11:dc:73:
4c:6a:00:5d:e4:47:4b:41:f3:84:0c:21:44:50:73:
41:17:9c:11:52:4c:d0:77:f6:ce:36:f5:4f:52:44:
ee:74:3c:4a:d1:39:57:f2:21:59:06:6b:67:53:fc:
d0:21:b8:32:d0:61:33:b8:d9:c3:7a:7c:bb:99:4d:
66:65:69:dd:f5:77:b0:09:f6:6a:31:24:d1:10:85:
2e:ee:5c:49:23:57:b7:e3:27:08:2d:59:4a:57:7c:
5c:4a:69:85:19:43:8c:57:27:69:9e:c1:59:e5:29:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:5E:16:F6:DB:5F:E2:AC:39:60:FD:18:AF:9F:C9:C1:61:B8:E2
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VqZeFvbbX-KsOWD9GK-fycFhuOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3d:74:c9:33:4a:c8:fb:78:6e:df:41:1c:fb:a3:a8:dc:a0:
d4:d8:ef:2d:40:da:3b:11:fd:92:45:1d:dc:49:8e:93:d9:9d:
8e:08:7e:41:f7:fb:69:61:c0:31:ac:38:da:46:d5:a1:68:e8:
73:e2:e0:e8:73:86:cc:2e:3d:a6:1f:5d:db:1d:95:62:7e:5f:
30:ac:6f:05:d3:4e:ff:03:97:16:21:11:dc:b7:fb:61:b2:ec:
ca:72:5f:1b:a2:5b:09:25:83:15:60:70:db:b1:b6:dc:a6:07:
b7:d9:38:ff:3a:d6:9e:ba:20:28:58:97:b5:92:5e:eb:7e:e5:
23:7e:8d:63:c5:b8:dc:f0:70:72:5f:5f:f7:60:a4:ee:20:3f:
cd:60:be:53:41:78:72:0e:77:f9:12:c5:bd:82:83:aa:54:3f:
ad:6f:72:5f:90:2b:ce:79:b0:bb:18:c3:de:20:0f:11:95:33:
a0:07:ee:81:e5:b3:b1:94:51:99:80:d5:5e:66:f8:1d:4d:19:
4c:ad:d3:85:a9:84:68:f9:b8:e8:07:96:c1:5a:24:c2:5a:94:
75:2b:a5:e0:68:50:05:04:4f:e0:23:6e:a1:dd:ba:17:30:06:
15:37:bc:d8:7f:68:bc:6a:52:64:9b:00:25:33:91:fa:a7:e6:
55:81:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:01 2025 by rpki-client