Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/VBFGSZe25hk515GWxj1O9wYFsPI.roa
File: VBFGSZe25hk515GWxj1O9wYFsPI.roa (raw, json)
Hash identifier: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=
Subject key identifier: 54:11:46:49:97:B6:E6:19:39:D7:91:96:C6:3D:4E:F7:06:05:B0:F2
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 0194236A3D3DB0DF27400B5C3A4103302DA6
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/VBFGSZe25hk515GWxj1O9wYFsPI.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 193.38.178.0/24 maxlen: 24
193.38.179.0/24 maxlen: 24
193.38.180.0/24 maxlen: 24
193.38.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:3d:b0:df:27:40:0b:5c:3a:41:03:30:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5411464997b6e61939d79196c63d4ef70605b0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:f6:ef:f7:2d:0e:af:58:a0:37:83:63:09:
da:82:a8:b7:0d:c0:37:af:98:53:f8:db:f4:a3:94:
69:76:bd:7b:6a:4d:25:21:da:9b:fa:b6:dc:98:6a:
85:fe:72:51:d0:8e:d7:78:63:65:b2:b3:45:83:d1:
da:5a:e9:61:e5:2e:1d:a4:12:e8:1d:d4:0b:b0:95:
7f:ba:95:62:1b:df:48:b3:96:9c:23:59:87:22:92:
0f:2d:64:a4:dc:32:2e:6a:0a:b6:b0:77:cc:dc:65:
07:7b:98:a3:41:e1:bc:dc:15:fd:81:05:54:bf:ba:
c5:ee:90:25:4d:27:52:22:38:43:30:a2:4b:23:18:
d8:6a:32:43:43:d3:9a:98:97:90:5e:cb:6b:32:f2:
e5:23:d0:ac:18:db:0c:64:27:a8:60:11:3b:67:d7:
45:61:6d:f2:1a:b5:6f:89:bd:a3:dc:f5:e5:2c:c7:
ca:1a:09:24:25:66:5a:39:2e:8c:5c:c0:3c:b6:3b:
38:d9:51:0a:56:fa:78:44:83:3c:58:18:4e:1b:47:
da:09:f4:75:0a:61:19:0a:27:e7:d4:15:a4:79:7e:
26:f8:7f:85:73:9a:fa:92:a5:7c:1f:af:29:c6:04:
b0:31:81:72:a6:13:65:c2:aa:20:32:88:9e:df:15:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:11:46:49:97:B6:E6:19:39:D7:91:96:C6:3D:4E:F7:06:05:B0:F2
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/VBFGSZe25hk515GWxj1O9wYFsPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.178.0-193.38.181.255
Signature Algorithm: sha256WithRSAEncryption
0a:70:f2:b9:62:8d:eb:59:a7:6e:f5:62:2e:aa:03:86:1a:c0:
ed:6e:c3:81:ce:63:6c:73:66:d5:c4:35:89:3e:60:62:ab:1e:
ab:ea:71:e7:21:72:68:3b:c4:99:7d:d2:d3:79:e0:38:62:a1:
d2:64:7e:b4:b6:9f:ee:9e:b6:ec:9a:32:42:ed:5b:ec:8a:57:
d0:e7:a0:53:9c:40:59:b0:e0:12:61:43:59:86:73:41:99:28:
51:98:17:27:9f:ea:22:97:1f:86:8a:ee:68:bf:ec:35:ea:47:
ac:9e:7a:73:48:32:61:fe:a2:48:b5:97:4f:38:6c:39:36:e3:
d7:91:6b:62:a4:59:c2:80:4a:ee:f6:68:68:95:46:35:38:80:
c0:75:4a:12:1d:4e:ec:84:db:d7:d6:60:2b:04:43:6c:71:92:
6e:bd:91:82:dd:1f:2a:16:00:aa:4b:24:30:21:a1:bf:c2:e7:
b9:c3:4c:cd:63:ba:5d:8c:b3:71:b9:a6:ca:00:e0:41:65:ba:
20:2e:09:18:a0:03:99:e5:1b:41:20:ea:c4:f5:f2:9c:32:74:
95:73:1c:0a:f5:f9:fa:59:f7:e7:c5:09:f7:6d:2c:08:fa:d4:
f2:3a:6c:e3:b0:7b:17:cb:08:86:18:46:f5:32:eb:89:d9:ce:
33:47:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:30 2025 by rpki-client