Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vBAure0FxWxWdTfj2W3O6_7De24.roa
File: vBAure0FxWxWdTfj2W3O6_7De24.roa (raw, json)
Hash identifier: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=
Subject key identifier: BC:10:2E:AD:ED:05:C5:6C:56:75:37:E3:D9:6D:CE:EB:FE:C3:7B:6E
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942522005459BEB6B834A3F6B5AADAF26B
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vBAure0FxWxWdTfj2W3O6_7De24.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133499
IP address blocks: 185.188.62.0/24 maxlen: 32
2a12:adc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:00:54:59:be:b6:b8:34:a3:f6:b5:aa:da:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc102eaded05c56c567537e3d96dceebfec37b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:6d:fc:27:79:8e:31:d5:1a:e0:60:93:f8:
50:de:40:c6:2c:3b:f4:e9:1d:67:ad:75:3b:db:28:
8a:d1:d8:f5:37:41:27:49:d2:fd:2c:ae:37:5f:b9:
87:0c:d0:f2:91:05:64:b7:71:20:c1:95:51:66:9c:
07:da:db:69:b8:77:47:ce:10:bd:b4:ec:59:8c:46:
a4:47:8e:8a:5e:62:47:6d:bc:62:f6:e6:b2:13:54:
cb:32:87:64:f6:d6:09:81:43:1c:45:5f:96:2c:f2:
34:73:b5:02:c3:9c:55:3f:fa:6d:da:49:eb:ae:dc:
a4:cc:53:bf:43:f1:cd:ae:62:47:b7:65:99:60:12:
14:24:2c:f2:14:65:a3:98:14:97:27:9d:ef:29:b8:
4a:36:03:8e:fa:c8:51:74:d6:7d:00:e0:76:49:ef:
7f:4e:f3:3d:ef:a9:73:b0:d3:e2:40:10:59:14:9e:
2a:34:f1:73:89:56:ac:27:e3:5c:29:e6:43:2c:78:
04:62:1a:31:d9:cf:a9:89:83:02:f0:0e:c2:68:c8:
5b:7e:64:27:71:c2:7f:f8:4a:9e:e1:26:94:9a:6a:
be:c2:b4:6c:61:d5:7e:8d:8d:42:71:c0:cb:e0:d3:
d7:bf:51:ae:1f:1e:8e:8c:8f:d8:8c:a5:f9:88:14:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:10:2E:AD:ED:05:C5:6C:56:75:37:E3:D9:6D:CE:EB:FE:C3:7B:6E
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vBAure0FxWxWdTfj2W3O6_7De24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.62.0/24
IPv6:
2a12:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
03:2f:dc:59:76:6c:e4:03:d5:4a:b6:c7:f7:5a:82:47:45:a0:
2c:eb:6b:cf:77:7b:9a:43:59:4d:57:be:2f:9f:ff:d4:06:0d:
35:f3:69:19:82:5e:92:58:fb:98:4f:20:a6:3b:15:80:67:0b:
99:ab:a9:d2:f3:d2:80:3e:09:cc:55:2d:6c:30:e4:33:f6:e7:
73:2d:d3:e1:4b:08:66:57:be:9b:74:f1:2b:da:e4:05:8c:e5:
94:d4:a4:3d:a3:32:46:53:83:57:af:1c:68:f1:68:d6:18:13:
7e:e1:c0:d6:ff:77:ac:0a:a4:ce:5a:07:09:eb:55:01:61:29:
e7:a0:3a:f0:b7:a7:d1:02:08:e1:c4:75:56:d5:6b:25:b2:2f:
58:15:2c:64:04:e1:b1:96:f4:9d:80:f2:66:9b:bc:4d:22:22:
23:f8:d3:48:f4:1b:f7:64:1b:6c:16:40:c7:9a:f2:f5:c4:bf:
f0:da:3a:a6:ab:e4:a0:8d:fa:b2:34:cc:7a:5f:63:04:0c:02:
35:7d:4c:50:41:6b:e9:44:2d:60:d8:aa:9c:44:11:e3:f9:10:
96:e5:76:5f:a7:7e:f5:98:dd:c9:95:d6:2a:81:4c:ea:8e:7a:
d5:78:70:b8:e1:a4:db:38:d0:91:45:40:0b:70:44:79:66:15:
59:36:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:41 2025 by rpki-client