Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/VLH2ggfYLmRlUNQmOTDaXEZemRU.roa
File: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (raw, json)
Hash identifier: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=
Subject key identifier: 54:B1:F6:82:07:D8:2E:64:65:50:D4:26:39:30:DA:5C:46:5E:99:15
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01942521A2E586313FD4224B5C6EA992AA85
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/VLH2ggfYLmRlUNQmOTDaXEZemRU.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6724
IP address blocks: 185.127.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a2:e5:86:31:3f:d4:22:4b:5c:6e:a9:92:aa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b1f68207d82e646550d4263930da5c465e9915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:1f:8b:12:cd:f3:a5:e3:83:e5:00:76:15:
1a:52:ff:d2:3c:a3:a5:62:cb:e2:07:85:b8:aa:39:
64:c0:ba:83:31:1b:95:89:2c:80:3f:0c:f2:ad:51:
3e:74:c1:02:1d:09:83:b1:06:f1:83:b1:e0:01:bd:
41:8a:82:ca:d5:15:b5:fb:7d:ea:bb:f4:84:79:59:
42:38:f1:c9:38:95:df:25:f4:ec:e1:8b:9b:54:f6:
64:91:20:2a:a2:bd:4e:25:7b:e1:a9:59:00:12:1c:
20:29:9d:78:1a:f2:8b:3e:59:37:1d:7f:91:4b:70:
28:33:69:12:4e:c2:30:92:35:a8:a6:bd:1a:1b:75:
7e:a3:d1:de:aa:80:fc:b5:db:b5:6c:7b:05:f1:6c:
7c:d7:d6:06:6f:67:aa:78:91:70:65:14:1a:ec:69:
4e:86:54:01:4d:1c:66:05:18:d7:da:11:bc:89:de:
0c:a8:d2:69:78:72:54:e7:02:fe:44:18:7a:b6:0b:
d3:54:be:b8:e2:d4:3b:bf:93:be:9a:bc:68:6f:d0:
75:a2:aa:cf:e4:4d:fc:23:d2:7d:fb:0e:29:b3:8c:
a6:4d:36:c6:63:6a:11:e3:b6:f3:c9:79:08:27:b4:
41:7c:b6:dc:d7:5f:01:04:30:87:ff:0d:48:84:b5:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:F6:82:07:D8:2E:64:65:50:D4:26:39:30:DA:5C:46:5E:99:15
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/VLH2ggfYLmRlUNQmOTDaXEZemRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.30.0/24
Signature Algorithm: sha256WithRSAEncryption
01:60:de:9f:c5:68:3b:af:fd:3e:10:38:75:61:eb:ff:b8:05:
a3:83:ee:e5:0f:f4:08:33:2a:74:a0:f8:92:cd:f0:7e:2e:37:
3a:ea:a3:1a:7a:9a:84:fe:6d:a0:9c:da:db:f3:cf:8d:29:bf:
ef:f8:69:fd:23:ea:2c:be:1d:7e:4e:1b:94:9a:2e:1b:a7:a5:
bd:88:5d:b8:91:ce:c4:80:cc:24:a2:64:76:d7:d4:61:d4:71:
53:4d:47:e3:70:d7:ec:c5:1c:82:04:84:a1:65:8f:b1:9a:5e:
4e:78:b9:42:f7:24:56:db:37:93:73:9c:7a:b7:60:5f:f6:52:
84:90:96:9a:15:2b:d0:dd:0b:7e:61:b0:f3:cb:d4:60:79:f4:
3b:02:69:5c:6f:61:b4:32:4b:82:da:97:18:be:50:5b:ac:7e:
b2:55:ca:79:77:c1:9a:73:83:54:10:c1:f9:47:a3:93:64:ab:
c2:33:79:ba:0e:60:86:e5:ff:b1:38:d1:71:32:9d:88:e3:01:
b1:41:08:14:45:c6:78:91:bb:02:28:44:a4:19:45:bb:d9:18:
36:d4:0a:61:04:97:5e:82:08:62:42:3a:bc:ab:d4:57:ed:f5:
4e:a7:36:35:8a:3e:24:1d:a0:ef:97:72:33:4f:26:4c:b9:2a:
1d:8e:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:17 2025 by rpki-client