Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/vQBa0DHzLolz37NUtVTr3McGXdM.roa
File: vQBa0DHzLolz37NUtVTr3McGXdM.roa (raw, json)
Hash identifier: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=
Subject key identifier: BD:00:5A:D0:31:F3:2E:89:73:DF:B3:54:B5:54:EB:DC:C7:06:5D:D3
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F11351E1367D3180D12AE0871CBC0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/vQBa0DHzLolz37NUtVTr3McGXdM.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57186
IP address blocks: 85.235.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:11:35:1e:13:67:d3:18:0d:12:ae:08:71:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd005ad031f32e8973dfb354b554ebdcc7065dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:78:ef:c5:03:d2:7c:7a:52:16:4b:4e:ab:
bf:ff:47:6f:c4:d4:1d:17:69:dc:fc:72:9c:10:e6:
76:e6:3c:60:cf:df:e7:bb:84:65:24:d0:04:8d:87:
d7:39:d5:01:f7:e6:9e:ca:d1:b1:63:64:54:fb:f2:
51:50:76:f7:65:f3:74:e3:9e:39:68:92:2a:f0:c8:
ee:e8:a2:71:c0:ad:8e:04:a2:f1:55:8e:5c:f3:49:
82:d7:04:dd:15:01:0c:14:bf:77:35:ac:b6:af:b1:
34:6f:7f:c1:46:d2:27:0c:bc:2a:36:90:a6:81:08:
3a:3c:df:20:d7:33:eb:74:a5:32:aa:c2:b3:16:5a:
56:96:7d:92:5d:c3:5e:39:4f:16:0b:ba:0f:1e:e3:
c8:86:7a:c2:d7:00:aa:01:d8:36:78:bd:ba:1c:06:
79:8b:27:f0:9b:1e:99:0b:a5:49:0e:31:a4:a9:83:
94:6d:31:47:c1:dc:dc:50:f6:e0:33:eb:fe:9f:a9:
8e:b3:07:5a:1c:01:7a:b7:c9:f5:13:65:05:cf:5e:
ff:7a:e9:38:12:dd:a1:8f:40:8b:e8:39:84:85:0a:
1a:b2:8f:95:31:0d:a2:2e:32:9c:aa:b4:30:d4:d6:
3a:d0:fa:77:a5:2a:63:42:89:ba:ad:07:86:7d:4d:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:5A:D0:31:F3:2E:89:73:DF:B3:54:B5:54:EB:DC:C7:06:5D:D3
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/vQBa0DHzLolz37NUtVTr3McGXdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.80.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3a:ba:13:a7:91:46:89:6b:5d:dc:63:f1:19:a9:30:93:7c:
e2:cc:4d:b5:3a:2b:fb:6d:51:1f:28:64:90:98:44:e7:36:38:
8e:e4:95:69:21:be:1d:db:e1:8b:f3:ce:5c:91:87:6e:0e:a2:
6c:bf:30:ed:53:51:94:bf:09:2e:65:4b:6f:9b:d6:47:50:3f:
08:57:04:b8:dc:93:36:39:73:cf:22:0e:40:82:5e:77:45:2d:
88:ef:51:ab:5c:73:a6:6e:db:90:7a:bd:46:98:9f:8c:70:5e:
ba:32:51:90:81:60:c2:69:fe:3a:d2:1b:a1:31:5c:90:62:e7:
f4:f6:b8:91:43:38:d4:3e:a2:96:be:1a:14:04:d4:b4:4f:67:
0f:3d:d7:fb:4f:21:3f:ac:6d:a0:62:3c:c7:ef:11:36:35:43:
89:07:f3:e0:62:74:d5:ad:c4:52:f0:be:8e:f4:02:c7:39:a5:
19:3c:a8:47:d1:52:a4:45:b6:f3:97:91:80:22:cd:6a:69:c0:
f7:ba:b4:a0:41:67:ea:77:a7:b3:0d:11:b0:62:9b:d3:af:f0:
f7:77:5f:1f:69:a8:6d:5f:01:71:41:13:e1:16:62:c2:36:61:
14:63:ba:01:c4:ac:42:9a:d6:c4:22:ba:e8:28:99:94:e2:a7:
ef:a9:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:07:18 2025 by rpki-client