Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vPs-BjoRFrtMzT81xNA12pTdrhk.roa
File: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (raw, json)
Hash identifier: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=
Subject key identifier: BC:FB:3E:06:3A:11:16:BB:4C:CD:3F:35:C4:D0:35:DA:94:DD:AE:19
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01942827932BD4384B36527A115A0A7B5179
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vPs-BjoRFrtMzT81xNA12pTdrhk.roa
Signing time: Thu 02 Jan 2025 17:54:29 +0000
ROA not before: Thu 02 Jan 2025 17:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210221
IP address blocks: 193.118.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:93:2b:d4:38:4b:36:52:7a:11:5a:0a:7b:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfb3e063a1116bb4ccd3f35c4d035da94ddae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4f:5c:9d:8a:10:69:fc:ca:19:7f:fb:e5:61:
09:c6:8e:7a:b5:22:8f:8d:8c:b9:3c:c9:78:09:22:
48:92:c2:ff:f4:cc:19:3a:93:a3:9e:f5:1f:40:01:
cc:d7:7d:db:e0:3e:75:e5:b5:d2:26:91:10:f1:88:
52:9e:79:10:f1:82:95:03:1b:66:ad:f5:a8:d9:52:
0f:a6:bd:2c:bd:a3:1e:59:7e:c4:4c:8b:16:f2:fd:
de:f7:bd:d7:44:36:5f:41:08:03:a5:79:8d:4f:5d:
2b:90:50:e3:5e:86:1c:e9:e6:74:c5:8e:53:5b:1e:
6d:a4:a8:5d:fe:7b:6a:d6:19:a7:26:08:95:42:24:
9a:f9:33:d7:d3:25:81:72:c8:ac:12:ef:ce:d8:62:
0e:aa:71:69:2f:76:f6:ea:52:32:cb:dd:38:af:e3:
2b:fb:84:1e:b8:54:d3:27:cc:47:8c:f2:5b:e4:98:
16:54:02:db:20:bc:1f:45:d9:ba:38:1b:0e:c3:97:
23:48:31:26:b3:61:c1:0a:f3:62:0f:9c:0b:ef:fa:
6e:77:cd:bc:f8:70:72:a4:fe:de:bd:0f:92:dd:3b:
a2:82:1a:b1:3a:41:26:0a:0c:20:85:9a:6a:01:ea:
fc:a9:97:18:34:27:71:bb:3c:82:f9:7c:41:de:3e:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:3E:06:3A:11:16:BB:4C:CD:3F:35:C4:D0:35:DA:94:DD:AE:19
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/vPs-BjoRFrtMzT81xNA12pTdrhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.165.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5d:a5:c3:93:ce:77:1e:65:58:c2:3b:b0:88:87:3a:3a:7f:
da:44:2c:0b:f9:cd:51:ff:72:6f:67:f3:f5:14:99:3b:70:7c:
d8:e9:d9:04:b4:27:20:76:13:99:bf:75:2e:7f:cc:a6:cb:0a:
19:27:6b:76:0b:ec:46:cb:3d:d2:3a:19:aa:98:50:ad:ea:18:
65:48:82:33:ab:86:e6:6f:64:c1:cd:d5:3c:c4:2e:84:c6:cb:
e4:e0:57:6b:e0:1d:f9:18:49:7c:b3:56:90:57:de:73:5b:c7:
54:25:e3:93:f6:a3:0f:e6:02:0e:39:25:02:c1:41:b1:9c:74:
59:c1:68:28:a6:4f:13:8d:16:8b:81:27:12:b6:b4:19:46:1c:
2b:b6:a2:76:40:10:4d:cc:04:f9:21:2a:f5:05:03:85:d5:39:
59:8e:3d:77:73:44:70:6d:c5:be:a0:34:22:35:56:03:0e:b4:
94:e6:a4:43:2e:aa:62:c9:72:ef:b9:90:dc:6b:f4:21:18:8f:
03:0f:00:79:f1:96:cd:e3:37:ba:23:23:1f:8e:b2:82:9a:47:
3f:95:88:b6:b6:e4:41:a1:0c:cb:b9:c0:75:1c:b5:c7:7a:00:
fa:25:45:32:dd:de:17:ce:9c:0f:d7:6b:3d:c2:c6:ba:91:f7:
3d:d0:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:54 2025 by rpki-client