Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/vPivcilO-E_vThnuw1Jbeo7vl7Q.roa
File: vPivcilO-E_vThnuw1Jbeo7vl7Q.roa (raw, json)
Hash identifier: ue62obgrVIotq1vJM56av/nq50vzkGkDbEL5zd0kvpg=
Subject key identifier: BC:F8:AF:72:29:4E:F8:4F:EF:4E:19:EE:C3:52:5B:7A:8E:EF:97:B4
Certificate issuer: /CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Certificate serial: 019422FC25BE391851B10D7E0C6265F50B60
Authority key identifier: A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/vPivcilO-E_vThnuw1Jbeo7vl7Q.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211599
IP address blocks: 185.249.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:be:39:18:51:b1:0d:7e:0c:62:65:f5:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf8af72294ef84fef4e19eec3525b7a8eef97b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:64:a8:71:11:61:59:95:fc:89:d9:eb:7b:e9:
ac:e5:b4:3e:e7:7b:4e:f0:ac:f4:96:a0:f6:f5:2e:
f0:73:37:c3:5b:d8:c8:ef:32:43:a8:9a:c4:5c:93:
26:3c:d4:fc:a0:bb:f6:3b:91:24:f2:8a:94:19:e8:
d0:13:04:d7:85:29:57:97:a1:70:1f:54:93:47:35:
1e:1f:29:da:20:3c:e5:d0:e1:a7:08:bb:8f:68:3f:
1b:37:07:2e:38:57:5c:38:6d:ac:08:1b:e5:b8:60:
a4:43:90:92:3c:4d:1e:be:a6:e8:25:7b:94:86:a7:
98:18:bd:e2:a9:de:07:5e:26:3a:51:4a:56:9d:b4:
b0:05:81:c6:e2:49:82:04:e4:d3:5c:68:ad:1c:f5:
a5:b7:04:cb:f7:ce:90:56:f3:e7:fe:99:00:d9:fb:
9b:ce:1b:5f:49:b4:ac:80:a1:06:92:cb:be:ff:e7:
bd:17:8f:ce:4d:3e:03:26:e7:e4:12:f2:7f:d0:4e:
35:cd:70:cb:d3:09:57:48:ec:e3:68:cf:44:71:c2:
59:93:a8:f8:19:5e:d2:98:09:cd:51:35:35:6f:d1:
0a:27:3a:42:1b:f8:c0:87:a4:ea:50:e7:c6:03:57:
22:af:3f:19:8d:a7:77:25:dc:25:3c:ff:9b:15:39:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:AF:72:29:4E:F8:4F:EF:4E:19:EE:C3:52:5B:7A:8E:EF:97:B4
X509v3 Authority Key Identifier:
keyid:A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/vPivcilO-E_vThnuw1Jbeo7vl7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:95:c0:f8:80:71:7f:ac:28:c9:4c:1d:07:e9:b2:b2:3b:
ec:9b:2b:ad:f1:7d:28:c5:cb:52:13:d4:09:22:e3:7e:85:05:
6d:5c:61:bb:fd:60:6f:e9:70:76:94:28:d1:d3:54:85:58:53:
b7:13:17:d7:44:99:8e:d5:61:3b:91:2f:10:4c:e4:a1:1d:dc:
f1:2e:d8:e2:27:5a:55:4f:ee:f3:27:83:db:18:08:01:ec:78:
6d:aa:36:b7:44:d3:bf:d9:b3:54:db:f9:1d:a4:e9:44:db:79:
96:e8:fe:88:d3:75:b7:3c:f1:77:57:a2:ca:e8:49:ad:3b:dd:
e8:cb:74:f6:aa:25:ef:c7:75:4f:36:ba:e1:2d:8c:9c:41:1a:
88:98:5b:41:3e:c2:a5:e1:8e:03:dc:86:5e:08:2c:54:4e:31:
ef:f4:27:3b:8a:f0:d5:83:f6:6f:1a:49:1f:72:87:25:f9:4e:
c0:6b:61:e0:b2:ec:6e:e2:a0:0d:ff:ca:b1:7b:71:61:7a:03:
5d:81:88:89:4d:5b:5e:ac:26:4f:b4:1d:5c:46:2c:53:d3:27:
af:28:2c:18:b8:53:00:e2:c2:c9:bc:a1:47:b2:3e:2e:95:d5:
df:4e:1c:d6:24:3a:74:4c:79:ca:12:26:9b:e6:3c:88:0a:09:
cc:42:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:16 2025 by rpki-client