Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vClC5TDxaMstjKEA044tpy3-oWg.roa
File: vClC5TDxaMstjKEA044tpy3-oWg.roa (raw, json)
Hash identifier: mFZpA5S+C/gSzVPd18Exks1HPe2w4StclaiaxDzd9ns=
Subject key identifier: BC:29:42:E5:30:F1:68:CB:2D:8C:A1:00:D3:8E:2D:A7:2D:FE:A1:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247D205561AF7105045A903D71CF68
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vClC5TDxaMstjKEA044tpy3-oWg.roa
Signing time: Thu 02 Jan 2025 17:51:07 +0000
ROA not before: Thu 02 Jan 2025 17:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44564
IP address blocks: 87.121.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7d:20:55:61:af:71:05:04:5a:90:3d:71:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2942e530f168cb2d8ca100d38e2da72dfea168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:0e:c2:3f:4d:38:36:21:5b:e2:51:81:4c:
36:cd:1a:ab:23:4d:51:27:00:08:3e:13:ba:0a:b6:
ad:ea:82:66:f2:a5:22:38:11:9e:e8:b2:54:4a:90:
c5:c6:88:53:13:4a:11:27:50:fb:81:29:1e:5b:59:
86:b7:56:ab:b0:6d:af:fe:20:5d:01:25:28:48:9b:
b3:9e:05:a6:3c:c5:a4:1e:22:7d:6d:79:5f:26:b6:
ab:9c:30:e3:97:db:ec:d4:d9:8d:a3:93:20:ed:24:
f9:33:fc:2a:35:13:fb:bf:3a:de:17:a6:36:bb:3f:
d8:8e:8c:63:a1:67:67:bc:8e:f6:60:08:42:6c:46:
a8:e7:6d:b8:dc:55:b2:fb:b0:c5:ee:7a:7e:b3:b1:
03:01:ce:05:3f:4a:64:9b:e9:17:ed:1f:38:41:50:
5a:73:a4:db:06:56:6d:ea:e8:8f:a3:17:f9:e3:ff:
4b:62:de:71:f0:07:05:9e:32:fe:90:a3:b2:4f:e7:
67:41:ca:61:b0:5d:d8:d9:a1:ab:4b:01:e6:f0:76:
d3:8f:c4:0d:97:16:92:ef:20:61:f0:de:68:b2:89:
55:82:c3:a9:ef:3f:aa:85:cc:82:08:66:9c:47:21:
83:fb:f5:da:b5:4f:e3:de:74:b9:15:e3:c3:cf:ce:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:42:E5:30:F1:68:CB:2D:8C:A1:00:D3:8E:2D:A7:2D:FE:A1:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vClC5TDxaMstjKEA044tpy3-oWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.160.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a2:a5:b5:2e:19:fe:53:8e:e2:fd:11:7d:db:c5:57:d1:5c:
c4:bb:d8:5f:f0:6f:0e:72:4b:5b:cf:a3:9b:33:63:cd:89:60:
57:60:ef:ac:9a:ad:db:e6:94:0f:34:de:df:98:28:41:7f:dc:
03:d7:25:3a:56:5a:37:56:32:51:ef:29:3b:fc:6d:7b:bc:8a:
76:e9:a9:26:f6:c1:c7:3b:aa:54:8d:66:f1:1d:87:1c:61:03:
a1:cb:14:e4:42:83:44:84:5f:85:b4:ce:f9:5b:c4:b9:9b:bc:
57:77:05:9e:b0:40:92:f3:40:19:37:78:94:a8:75:70:eb:ba:
f7:f0:2e:00:c8:c6:67:bd:7d:7f:42:a5:ea:cc:e6:94:49:47:
93:3c:48:91:be:f3:72:46:ca:75:e7:83:76:56:f6:7d:f4:37:
d1:23:bf:d3:76:f1:65:4c:40:7a:5c:22:fd:67:40:d5:36:84:
36:2c:47:94:73:ec:fd:b3:07:65:12:65:f2:40:54:03:72:de:
7c:3b:cd:66:89:b9:b5:e7:73:d7:b3:1a:90:79:72:96:82:05:
e5:50:ec:c1:33:65:39:04:24:b9:93:7d:33:79:a5:b8:c0:da:
ff:db:ba:22:07:ad:84:57:45:30:5a:56:01:37:fa:89:83:60:
c7:e1:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:28 2025 by rpki-client