Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VcjKNddvZkM3oUg77hjobEZD-v4.roa
File: VcjKNddvZkM3oUg77hjobEZD-v4.roa (raw, json)
Hash identifier: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=
Subject key identifier: 55:C8:CA:35:D7:6F:66:43:37:A1:48:3B:EE:18:E8:6C:46:43:FA:FE
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019421B1D13864B76C16499F3800095CB3C8
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VcjKNddvZkM3oUg77hjobEZD-v4.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48551
IP address blocks: 46.148.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d1:38:64:b7:6c:16:49:9f:38:00:09:5c:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c8ca35d76f664337a1483bee18e86c4643fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:79:40:75:db:e3:8a:bc:36:fc:05:bb:92:
01:ec:1b:e9:f8:7c:a1:94:93:97:41:c3:4c:c9:25:
c6:58:9e:0d:bd:66:fe:53:b6:51:0d:f0:6c:13:9b:
b4:7c:46:85:9c:a5:e1:c6:c4:74:b4:14:d3:07:a3:
bf:c3:e0:e4:b4:ff:24:5b:78:7e:74:8c:dc:43:7a:
71:b4:37:c2:e9:c3:fe:f1:b8:7b:8e:bc:29:80:b3:
07:cf:c6:b0:30:38:4c:d5:be:82:c5:ac:35:76:6a:
b7:46:d7:b2:af:95:e5:ff:86:c9:77:05:29:57:34:
69:2d:a5:96:54:f8:45:ff:63:40:79:99:37:df:81:
6e:89:32:77:46:d4:85:05:49:d3:3c:8f:7c:f5:b6:
87:80:75:45:16:42:1d:24:67:c7:eb:e0:fa:d9:83:
84:b9:80:b3:10:9b:00:c5:81:c3:77:1f:27:6e:c1:
28:47:f1:58:37:f0:90:cb:c9:57:2d:27:39:ae:e9:
64:d0:eb:0b:4d:ee:f2:c3:16:ce:52:cf:c5:48:b3:
f5:13:a9:a0:af:d4:ad:88:ee:33:61:b3:34:ce:5f:
90:81:02:55:79:71:e6:a8:4c:dc:70:ca:5e:3b:31:
0c:df:bf:79:35:4d:c7:69:1c:04:ed:4f:e8:99:80:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:CA:35:D7:6F:66:43:37:A1:48:3B:EE:18:E8:6C:46:43:FA:FE
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VcjKNddvZkM3oUg77hjobEZD-v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8f:85:35:c2:ae:11:ab:1c:58:ec:26:28:7f:3d:03:32:ab:
cf:bb:9f:e8:d1:f8:f3:4d:d0:57:46:2f:dd:a9:ac:aa:b5:34:
06:22:89:74:36:35:b9:68:73:07:fd:c0:4c:93:96:1a:5c:39:
cc:fa:76:38:55:74:4e:df:ce:ad:90:f2:b3:2d:38:04:5e:02:
f7:60:b3:ce:8b:c1:59:ab:a6:a2:00:ac:df:f1:0d:30:17:13:
92:5f:03:df:2b:a0:eb:87:f2:b4:0d:97:bf:68:89:8b:cb:4a:
f5:19:7b:47:2c:d7:b9:23:4a:3f:e9:45:4a:be:57:6e:8f:22:
a9:ac:9b:97:c2:f6:5b:ea:bf:ac:1c:00:ff:0e:48:91:de:be:
b8:b4:d6:de:2f:b6:e5:d9:cd:b1:17:b0:58:e9:51:72:29:92:
b3:c7:bf:e7:a1:4c:a2:c3:6d:a3:2b:cf:01:f3:1a:d8:b1:1e:
c5:64:96:3c:ab:f2:81:ea:97:88:57:fa:bf:65:a2:e8:68:55:
15:fe:8b:e9:18:fe:10:0b:91:ff:7a:67:bf:0a:4d:51:51:0d:
35:d9:ee:e7:00:c5:eb:8e:6a:87:67:b9:b8:2b:ae:be:e3:e9:
a1:81:a1:5e:4e:78:7b:5b:cf:f3:10:13:63:bc:70:5a:78:5f:
a7:32:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:16 2025 by rpki-client