Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa
File: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (raw, json)
Hash identifier: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=
Subject key identifier: D5:52:F8:95:82:69:B6:4A:62:E9:9B:55:A1:98:26:A0:9E:A4:B2:7D
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0194258E7060D4EC61DFD800094D0A14AD2F
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa
Signing time: Thu 02 Jan 2025 05:47:59 +0000
ROA not before: Thu 02 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57457
IP address blocks: 91.232.64.0/24 maxlen: 24
91.232.65.0/24 maxlen: 24
91.232.66.0/24 maxlen: 24
91.232.67.0/24 maxlen: 24
91.232.68.0/24 maxlen: 24
91.232.69.0/24 maxlen: 24
185.210.200.0/24 maxlen: 24
185.210.201.0/24 maxlen: 24
185.210.202.0/24 maxlen: 24
185.210.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:70:60:d4:ec:61:df:d8:00:09:4d:0a:14:ad:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jan 2 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d552f8958269b64a62e99b55a19826a09ea4b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:e7:13:8c:20:0e:a3:fd:41:a6:a4:43:d0:
48:ff:1a:53:95:8d:39:30:a9:19:41:ac:f5:f1:0a:
c4:10:af:2b:e2:1c:a4:a8:8c:34:ad:97:c9:57:25:
2f:92:c5:f5:ca:a7:ac:26:6f:1b:d9:65:ab:e5:ae:
78:cd:19:1d:63:25:7d:da:8e:0d:e8:9b:72:a8:ec:
4f:e9:10:5e:ee:6f:ac:06:40:fb:d4:8e:53:59:76:
c1:a2:36:9b:95:58:6b:af:a4:9e:cb:fa:fd:00:a6:
5d:96:96:54:3f:a4:5a:07:4d:1a:8c:f1:91:4a:4b:
5e:8c:30:58:0a:30:24:f0:f9:54:e9:66:ae:45:3f:
c1:8d:95:cc:1c:44:be:f0:2d:65:70:56:8a:35:52:
ae:5b:93:f3:da:f4:e6:af:65:c9:0b:fc:51:9d:6f:
ba:17:93:6d:1d:51:e2:28:2b:bc:47:43:b3:c9:8e:
a5:50:ce:f5:6b:d0:5e:2c:df:03:08:52:86:75:5e:
10:ea:d8:f3:fd:4e:8b:18:17:3e:7f:9e:8e:1e:69:
70:0b:72:ac:00:3e:19:74:52:3e:bb:a0:8e:35:84:
08:7e:80:ce:27:ca:cd:55:e6:f7:22:70:69:b9:b7:
20:d6:73:5f:08:73:04:de:18:5c:99:8f:e4:f8:28:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:F8:95:82:69:B6:4A:62:E9:9B:55:A1:98:26:A0:9E:A4:B2:7D
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.64.0-91.232.69.255
185.210.200.0/22
Signature Algorithm: sha256WithRSAEncryption
53:91:5f:27:07:14:35:6e:8c:a7:a6:07:40:ed:c4:2b:84:38:
58:b4:a9:25:47:6f:aa:c2:0e:35:66:ce:a5:b6:a5:78:f2:58:
aa:ca:10:33:e2:4b:f3:7b:ba:00:87:44:fc:c6:c3:cd:b8:33:
31:43:1b:96:5e:f8:f7:40:14:ea:67:c1:dd:b1:7d:5c:4b:ff:
67:24:8a:9d:fa:dc:24:7a:bd:af:d4:f7:8a:b4:ab:f9:35:84:
df:6d:1f:1b:89:42:de:1e:23:24:62:e4:9f:2f:65:2b:07:b2:
98:bb:37:aa:c1:90:07:5e:e9:63:da:80:34:75:f1:29:6a:67:
0c:1a:1b:1f:d4:2b:65:c9:08:8d:2d:b4:0d:e4:05:94:16:53:
16:49:6e:81:12:0a:d9:ee:91:b7:fe:84:11:f2:fb:0c:01:82:
08:e8:b0:65:d2:6c:5f:16:ea:04:58:a7:1c:c0:e1:8f:cc:00:
18:b4:c2:22:76:c6:ef:f8:e2:8a:7e:a3:4b:0f:74:6e:51:79:
f7:96:26:8b:fe:40:41:03:f5:85:cb:c1:f7:53:c7:69:06:ac:
46:e0:19:7f:17:e8:62:75:52:c8:a8:2a:6e:ab:28:e2:0a:8e:
34:4b:52:4a:47:00:40:24:9e:8c:cd:50:c9:37:3b:74:04:ca:
29:17:70:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:31:14 2025 by rpki-client