Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa
File: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (raw, json)
Hash identifier: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=
Subject key identifier: BD:B7:5C:C3:BA:E9:9A:BC:9D:6D:EF:4F:B6:26:7C:2A:26:2B:30:8E
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 0195F6FF6DF37C91FF6CB20531579D343E60
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa
Signing time: Wed 02 Apr 2025 14:54:49 +0000
ROA not before: Wed 02 Apr 2025 14:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202513
IP address blocks: 43.230.184.0/22 maxlen: 24
185.98.16.0/22 maxlen: 24
185.249.148.0/22 maxlen: 24
2a0c:97c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:ff:6d:f3:7c:91:ff:6c:b2:05:31:57:9d:34:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Apr 2 14:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb75cc3bae99abc9d6def4fb6267c2a262b308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:3d:6e:10:ed:3e:2c:ef:e3:1c:cb:98:f1:
46:56:09:b2:90:73:9f:77:8e:32:0d:1a:de:86:e9:
f2:79:a8:ae:cc:be:02:55:a4:eb:7f:e2:a9:68:c8:
e7:93:96:d0:88:ed:d2:d2:02:98:dc:5f:fd:cb:81:
19:1b:e2:25:62:c8:04:41:fe:fc:e2:80:41:48:9a:
c6:d6:28:37:d9:7d:56:85:69:5d:bb:42:d1:2a:9c:
f4:87:a6:bd:55:3a:48:15:01:5b:84:47:3c:50:9e:
00:7d:68:69:a6:9f:5f:3d:5b:9b:76:13:cc:42:50:
84:fa:05:a5:85:f5:66:cb:8d:6f:18:23:3e:89:80:
51:a8:5a:03:77:8c:a7:31:27:a9:4a:79:ce:aa:83:
0a:ac:14:0f:b4:00:07:f4:9b:bf:33:d5:79:72:fd:
c1:0b:4b:73:c6:ab:77:87:0c:6e:9c:9b:b4:95:4d:
89:b6:f4:44:e0:c1:b6:9f:c8:98:75:c7:92:ee:1b:
99:4d:c0:a2:d8:d7:66:a6:75:a8:57:8e:ab:66:3b:
a9:63:cc:60:aa:3f:61:d0:a5:19:d4:e9:41:0e:ab:
77:1f:34:07:29:d4:ac:21:7d:25:b4:43:61:75:6c:
28:a7:0d:dc:89:87:a7:ca:ba:9c:01:b8:37:5b:19:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:5C:C3:BA:E9:9A:BC:9D:6D:EF:4F:B6:26:7C:2A:26:2B:30:8E
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.184.0/22
185.98.16.0/22
185.249.148.0/22
IPv6:
2a0c:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:a4:23:59:41:59:9a:bc:2e:9b:91:b3:8f:bc:81:75:ce:54:
9c:bc:a9:79:52:63:db:b7:82:3e:aa:07:53:2c:a5:4d:f9:05:
3c:f5:f1:44:d3:57:79:9f:60:bf:2e:fa:cd:0b:93:cf:04:13:
a0:86:f7:17:3d:49:3d:6c:6a:3d:2e:b4:57:5c:c2:16:8c:01:
b3:34:f5:58:d2:31:e1:82:02:f4:91:bd:39:be:36:73:85:cc:
8d:c5:bf:c0:a7:21:89:a2:cd:80:84:7d:24:de:12:27:cc:22:
9a:70:7a:2a:1a:d8:c5:08:2b:24:39:e9:67:5d:f4:cd:d9:2e:
f3:8e:1f:4a:dd:70:f9:90:8e:69:1c:1d:fb:4c:85:aa:19:3a:
4d:66:91:35:18:c6:70:16:56:09:8f:05:03:de:74:f0:3e:ee:
cb:7a:ac:c1:26:4a:5b:33:4f:09:1a:ed:64:23:b6:52:d7:dc:
fc:df:13:4f:37:a0:57:7a:ae:95:34:3f:0c:e3:f2:b7:47:5e:
7e:3c:15:4f:b6:5b:3d:5c:69:26:1e:a1:16:4b:c6:b2:37:c8:
4a:01:68:80:4f:17:85:a9:e8:ce:b2:f0:cc:55:4e:68:10:62:
a8:bc:9b:7f:bf:df:52:f3:58:59:50:d8:72:1b:45:aa:01:4b:
ac:5f:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:09 2025 by rpki-client