Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/V4n_ERvR3r7FSnduE0noOKeefts.roa
File: V4n_ERvR3r7FSnduE0noOKeefts.roa (raw, json)
Hash identifier: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=
Subject key identifier: 57:89:FF:11:1B:D1:DE:BE:C5:4A:77:6E:13:49:E8:38:A7:9E:7E:DB
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0194236A017F1EB2C7BCD582B3868E9E8505
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/V4n_ERvR3r7FSnduE0noOKeefts.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62395
IP address blocks: 185.151.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:01:7f:1e:b2:c7:bc:d5:82:b3:86:8e:9e:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5789ff111bd1debec54a776e1349e838a79e7edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:40:7a:7c:6e:d1:94:a9:a0:f4:1c:8c:0e:
fa:37:fa:d6:9c:e6:9e:dc:d0:05:49:e1:21:f5:07:
02:0e:fe:6f:e6:e9:4e:6d:b9:b0:85:dc:78:f4:cf:
da:a5:27:3c:16:74:fd:29:65:6e:b9:79:12:02:93:
5f:86:45:9c:0b:11:21:d5:e9:54:3d:14:78:69:26:
03:bf:90:1b:f3:fb:42:f0:57:9b:4f:05:ef:d5:11:
2f:43:1f:07:08:f1:4f:79:d3:20:45:7f:e2:5a:76:
f4:e7:6b:53:49:e3:18:5c:64:74:23:17:3f:4b:92:
80:38:7c:37:4d:64:70:b5:9f:f9:44:bd:6d:d6:02:
8f:d1:10:6c:6c:62:e1:31:98:91:ef:55:5e:a4:92:
c9:bf:49:10:cc:a7:96:c8:ce:d2:b5:8e:7a:8a:7d:
08:f7:3e:57:8a:3e:2b:0e:2c:91:0b:27:e5:c5:d6:
3e:4a:eb:e3:ec:f8:61:01:0b:69:d1:a9:ac:25:de:
8d:6f:5f:5a:af:d4:8c:f1:00:44:af:15:15:f2:c2:
f8:77:35:27:0f:b1:97:50:08:68:85:f6:77:35:8f:
48:d4:c3:d7:4d:9b:f9:77:51:6a:41:cf:03:b5:54:
e8:00:bf:80:d2:e4:b3:05:74:2d:8f:02:9d:64:e8:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:FF:11:1B:D1:DE:BE:C5:4A:77:6E:13:49:E8:38:A7:9E:7E:DB
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/V4n_ERvR3r7FSnduE0noOKeefts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.8.0/22
Signature Algorithm: sha256WithRSAEncryption
67:e9:84:12:55:9c:c0:68:fd:05:1d:95:be:c1:61:7d:71:ab:
b2:19:36:ec:05:c8:e2:0c:3a:10:7b:72:b8:84:91:23:32:25:
32:2d:a8:a9:d7:68:b2:ee:87:ff:77:ea:e5:8b:f8:00:54:de:
d4:1a:f0:62:96:0f:67:5f:79:de:bd:c1:4e:24:0d:b4:d9:9d:
26:42:a3:76:b2:48:0e:dd:ea:11:53:3e:d7:ab:a2:ac:48:14:
ad:bd:0c:9f:d1:f7:26:78:a2:a7:2d:ca:b2:ca:ec:c4:e8:63:
36:21:62:98:0f:c4:94:75:f8:0e:44:60:11:ad:c6:90:77:52:
a4:72:e6:78:54:23:01:b9:7f:41:88:47:d7:08:dd:88:d7:66:
f4:0c:96:6e:e9:8e:00:16:e7:06:50:f6:36:20:de:39:13:66:
f9:22:d9:ed:bf:8d:0d:a0:21:2d:8b:bb:17:71:82:27:d0:c3:
e1:03:f9:15:7f:37:ea:23:d0:ea:e2:fe:c9:d4:6e:3a:d4:ee:
5e:06:bb:2b:ef:27:65:14:4d:32:2b:ec:c4:d9:78:39:03:3b:
55:28:12:34:e8:34:3d:be:b3:d2:93:90:df:8c:b6:07:17:3c:
24:c0:51:32:7b:9d:fd:a3:91:1f:ab:4a:39:66:ab:0d:cc:0e:
d9:02:a5:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagF/HrLHvNWCs4aOnoUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzg5ZmYxMTFiZDFkZWJlYzU0YTc3NmUxMzQ5ZTgzOGE3OWU3ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2lAenxu0ZSpoPQcjA76N/rWnOae
3NAFSeEh9QcCDv5v5ulObbmwhdx49M/apSc8FnT9KWVuuXkSApNfhkWcCxEh1elU
PRR4aSYDv5Ab8/tC8FebTwXv1REvQx8HCPFPedMgRX/iWnb052tTSeMYXGR0Ixc/
S5KAOHw3TWRwtZ/5RL1t1gKP0RBsbGLhMZiR71VepJLJv0kQzKeWyM7StY56in0I
9z5Xij4rDiyRCyflxdY+Suvj7PhhAQtp0amsJd6Nb19ar9SM8QBErxUV8sL4dzUn
D7GXUAhohfZ3NY9I1MPXTZv5d1FqQc8DtVToAL+A0uSzBXQtjwKdZOhENwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeJ/xEb0d6+xUp3bhNJ6Dinnn7bMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEvVjRuX0VSdlIzcjdGU25kdUUwbm9PS2VlZnRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZcIMA0G
CSqGSIb3DQEBCwUAA4IBAQBn6YQSVZzAaP0FHZW+wWF9cauyGTbsBcjiDDoQe3K4
hJEjMiUyLaip12iy7of/d+rli/gAVN7UGvBilg9nX3nevcFOJA202Z0mQqN2skgO
3eoRUz7Xq6KsSBStvQyf0fcmeKKnLcqyyuzE6GM2IWKYD8SUdfgORGARrcaQd1Kk
cuZ4VCMBuX9BiEfXCN2I12b0DJZu6Y4AFucGUPY2IN45E2b5Itntv40NoCEti7sX
cYIn0MPhA/kVfzfqI9Dq4v7J1G461O5eBrsr7ydlFE0yK+zE2Xg5AztVKBI06DQ9
vrPSk5DfjLYHFzwkwFEye539o5Efq0o5ZqsNzA7ZAqXo
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:34 2025 by rpki-client