Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa
File: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (raw, json)
Hash identifier: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=
Subject key identifier: 54:55:9F:6B:98:0A:8B:F5:95:01:26:71:2C:A0:F9:10:19:91:F9:59
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019427471EDA717F96B8EEC158B3B6335362
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa
Signing time: Thu 02 Jan 2025 13:49:19 +0000
ROA not before: Thu 02 Jan 2025 13:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204094
IP address blocks: 185.113.140.0/24 maxlen: 24
185.113.141.0/24 maxlen: 24
185.113.142.0/24 maxlen: 24
185.113.143.0/24 maxlen: 24
185.231.233.0/24 maxlen: 24
2a03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1e:da:71:7f:96:b8:ee:c1:58:b3:b6:33:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jan 2 13:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54559f6b980a8bf5950126712ca0f9101991f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:ec:f1:1f:42:3c:a2:41:bc:83:ae:b2:c1:
f8:53:f1:05:42:58:3a:f0:9b:a9:3c:47:34:25:67:
4f:43:11:17:93:d8:b7:47:54:61:41:66:a3:33:16:
32:3a:d5:12:d0:7a:ef:6b:81:08:40:65:eb:6b:bc:
13:6f:5c:f7:e3:e0:3b:c9:b9:2d:26:df:61:c4:5a:
31:d8:7b:84:0e:5a:e9:4f:ef:d0:d9:8a:65:36:29:
1f:63:4d:48:a2:3c:2f:69:95:83:f5:fe:1d:cf:20:
47:aa:3a:df:04:f0:79:24:df:de:25:26:2f:65:92:
13:fc:4a:29:ef:22:d9:11:d2:35:f3:0b:1a:50:29:
4c:19:5a:02:7d:12:49:20:bc:f0:87:76:99:92:76:
ce:30:e1:23:1f:c4:30:78:8e:f0:38:94:05:fa:e2:
30:28:f2:d4:fd:1f:01:87:31:57:af:dc:0d:47:41:
ee:d7:b5:81:63:65:7d:30:e6:79:d3:43:45:95:c4:
36:55:c8:ff:90:2f:ef:a7:7e:fa:a8:d1:0b:6a:3e:
dc:1f:06:46:fb:b9:e9:99:6f:3e:2a:84:69:35:6c:
3d:3f:ab:14:a5:2b:96:36:31:1c:06:79:52:f3:f3:
91:28:3d:ed:15:60:5d:10:e1:7e:52:79:db:f3:5a:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:9F:6B:98:0A:8B:F5:95:01:26:71:2C:A0:F9:10:19:91:F9:59
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.140.0/22
185.231.233.0/24
IPv6:
2a03::/32
Signature Algorithm: sha256WithRSAEncryption
4e:b5:6a:0f:d9:6e:dd:28:a8:25:2f:00:1e:5e:92:a6:db:64:
50:e2:e7:07:50:a4:a2:91:58:fa:8f:79:8c:d0:f8:b6:47:1b:
7b:3b:02:0a:df:2b:ac:a8:c0:1b:8f:d8:cc:1f:c5:74:0b:7e:
2e:8e:0e:03:f0:f0:8a:d3:63:5f:a5:ef:96:e8:87:9b:d6:e9:
e4:03:96:e2:44:a8:fa:22:d8:09:7c:97:76:79:3c:d0:43:5d:
4e:8b:01:8e:9b:f5:08:bd:7c:6b:93:e5:c2:41:e0:4b:67:09:
95:02:79:d2:07:78:71:a2:ac:e3:d8:d1:07:90:49:7c:84:4e:
51:bf:4f:ac:18:25:a7:d1:0d:99:dc:cc:3f:72:e7:51:87:d2:
7b:98:67:c2:ae:e7:49:0d:02:1e:94:e7:9f:50:1d:3b:5f:0a:
5c:98:18:81:43:0c:81:96:31:02:1b:11:97:ff:d5:29:78:d3:
1f:78:d4:7c:78:91:15:b6:55:f8:98:70:2d:76:1e:1f:68:84:
6a:c6:48:40:75:a5:a9:cf:e1:75:bd:dd:7b:79:ac:c7:38:46:
cc:9d:72:e5:b4:ab:da:9c:02:90:53:a0:5c:2a:d4:a4:ec:a2:
ae:c0:b3:0a:63:6a:16:c1:1f:a9:92:bf:a9:d1:d9:9e:70:6b:
98:be:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:08 2025 by rpki-client