Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/VTOPr5cRplB2JyRppkTR7JFS0fo.roa
File: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (raw, json)
Hash identifier: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=
Subject key identifier: 55:33:8F:AF:97:11:A6:50:76:27:24:69:A6:44:D1:EC:91:52:D1:FA
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019421B1CEA3645FF6D15D00B605717DF59B
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/VTOPr5cRplB2JyRppkTR7JFS0fo.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29221
IP address blocks: 195.85.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ce:a3:64:5f:f6:d1:5d:00:b6:05:71:7d:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55338faf9711a65076272469a644d1ec9152d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:68:ab:57:1e:75:69:57:89:55:dc:a9:ac:
4b:9d:41:27:21:22:1f:a9:05:f3:50:93:61:3c:c4:
71:30:77:fc:6d:2d:d6:f1:d9:c5:e8:1f:04:bc:1c:
da:53:ba:9f:13:08:0b:d2:49:08:1f:80:a7:82:25:
71:04:24:96:fc:56:a5:e8:58:50:81:d0:52:25:33:
f1:c2:d4:75:09:a7:5c:10:0c:00:32:96:bf:94:d4:
e7:fa:b1:4e:13:2d:f1:ed:04:06:96:86:35:10:16:
f4:6d:3b:87:cd:06:df:87:0a:02:21:93:44:29:2c:
3a:ce:90:b1:18:79:6c:5c:20:5a:f0:1a:fe:71:4e:
fd:6c:83:08:72:c3:b3:b9:80:fc:de:2d:d2:2b:74:
62:ed:6f:fe:de:7a:a2:68:f5:5d:5b:96:b7:cf:30:
ba:cb:49:ff:38:71:ae:dd:94:b0:3f:ce:26:51:21:
a3:c8:b9:f1:aa:9b:94:d0:ec:c7:a6:7f:d6:bf:3e:
71:ac:13:8f:16:20:63:25:ac:8d:75:cc:2f:9e:e7:
6c:40:15:2c:ba:20:9c:30:0b:9e:24:f9:3b:4c:ba:
f8:2d:3e:1f:80:3c:8b:b5:70:66:34:7e:34:cb:9b:
9f:ca:57:c0:23:50:28:8b:e9:81:5b:95:05:ee:7d:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:8F:AF:97:11:A6:50:76:27:24:69:A6:44:D1:EC:91:52:D1:FA
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/VTOPr5cRplB2JyRppkTR7JFS0fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:26:d3:2c:26:dd:f1:68:5e:4e:33:4f:9f:12:a6:8a:99:24:
4a:be:5e:62:eb:9b:d1:e0:c7:37:41:40:5f:f5:bf:93:ba:8f:
4e:4d:11:11:25:b9:24:21:84:13:3a:f6:7f:e2:4a:7d:8f:c6:
39:fc:35:ca:74:aa:35:88:aa:15:7e:46:48:e9:47:9f:02:ef:
35:09:20:9b:82:0b:0d:52:60:0e:6c:5a:46:0b:33:9c:a2:40:
0c:f3:03:aa:fc:de:ae:57:20:70:65:0a:27:7e:9d:6c:dd:6b:
4a:79:e4:2b:50:07:f2:f3:c7:de:ad:6d:e4:f8:2d:05:66:84:
c2:0d:79:69:ba:b4:1a:15:b8:4b:c1:6f:11:cc:e0:a3:09:85:
83:5b:47:9e:94:43:35:da:1d:ae:da:9c:9e:48:f6:21:05:d2:
c9:64:72:be:ea:b1:a9:e9:ee:88:2b:83:00:54:59:2b:ca:76:
d4:56:e4:ae:92:06:42:d9:70:c9:13:f4:2f:6b:7a:75:82:5f:
9d:79:97:a9:c3:7a:b2:b4:66:f4:5a:99:86:6c:a7:cf:78:fe:
60:2d:e4:e8:01:d1:80:a5:b3:a3:36:0d:25:6c:f1:25:8f:09:
a3:75:ed:d1:a7:69:0c:69:69:09:f4:d3:fb:50:89:67:f8:14:
08:ab:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:17 2025 by rpki-client