Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vjtwmaRwxidwva3YZznIjLCoyQw.roa
File: vjtwmaRwxidwva3YZznIjLCoyQw.roa (raw, json)
Hash identifier: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=
Subject key identifier: BE:3B:70:99:A4:70:C6:27:70:BD:AD:D8:67:39:C8:8C:B0:A8:C9:0C
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455F9D8FA938E628D9E28ABD040675
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vjtwmaRwxidwva3YZznIjLCoyQw.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205223
IP address blocks: 185.223.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5f:9d:8f:a9:38:e6:28:d9:e2:8a:bd:04:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3b7099a470c62770bdadd86739c88cb0a8c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:4e:eb:1d:00:e4:6d:a1:64:67:4a:4e:66:
ae:a5:cf:c7:63:e5:d4:91:7d:02:84:ca:6f:45:26:
c4:4b:78:74:bc:9b:43:c9:a5:b0:1c:16:ca:30:69:
a3:b2:92:78:0e:09:4d:c7:91:9f:4d:a1:9b:15:c8:
a2:bf:d3:75:ef:35:80:e9:a8:a7:2b:8e:72:ca:34:
2e:7f:3f:63:47:87:7a:09:04:94:70:f2:f4:99:cd:
f2:9a:04:33:47:d3:84:37:e4:78:3c:f6:bb:22:e1:
c9:61:74:e5:cc:b2:f8:29:0a:1b:7f:5a:4f:ed:16:
75:c3:c3:a6:0b:ab:98:0e:c9:06:fb:f1:a3:2a:f0:
31:60:ff:42:8e:cd:b4:8e:ad:d5:62:b8:22:5f:4c:
aa:06:b9:a7:5c:4e:7e:b4:73:2f:2e:19:3f:da:28:
30:6f:06:96:80:1c:ec:d5:77:8c:11:05:16:a1:79:
07:66:60:2c:40:b1:ba:c5:7f:1b:73:5f:22:6b:c7:
86:a0:c4:31:be:55:9e:f7:7b:d7:cb:56:8f:b5:80:
c4:7c:08:a5:a4:88:76:32:0d:e5:12:3d:b4:b2:7b:
e6:ca:4e:5d:9a:6c:89:c9:af:79:36:f0:71:08:f8:
d6:e5:dc:cd:a9:25:32:be:10:47:fa:b2:d0:09:0e:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:70:99:A4:70:C6:27:70:BD:AD:D8:67:39:C8:8C:B0:A8:C9:0C
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vjtwmaRwxidwva3YZznIjLCoyQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.219.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ca:17:41:9c:c8:56:82:bc:a4:e1:c9:d3:e1:86:cb:85:c3:
02:89:bd:21:cc:ff:de:48:1c:bb:8f:39:e2:9f:fc:ed:e8:d3:
f0:05:7a:fd:36:c7:12:c5:33:86:9c:ce:ce:9b:08:3b:87:6c:
60:73:b4:5d:04:e3:9a:46:2f:5a:64:30:28:91:ef:b7:97:fe:
45:1d:3d:6d:bc:4f:50:ef:7d:c5:49:da:f8:4f:00:d5:d8:eb:
3e:b8:d6:77:bf:87:b4:3d:16:4a:42:6c:d5:34:76:97:15:85:
9b:f0:39:c9:81:24:a2:32:e7:52:41:30:a7:14:3b:f6:c3:9b:
20:61:7d:51:72:9f:96:18:30:00:4f:68:9e:0b:67:3a:4d:ee:
60:be:ca:5b:50:6f:bd:4a:0a:ee:95:42:d9:a2:bc:8b:e7:8f:
2b:b7:61:a6:cb:f0:0a:66:df:19:33:d0:19:17:c5:02:0e:71:
0d:26:da:64:07:01:ac:99:b6:cb:1c:fe:d6:c3:d5:91:78:45:
11:36:9d:2a:3d:cb:e0:84:92:c1:44:ae:d0:9d:66:f6:55:65:
fb:07:03:21:36:5e:a8:cc:8f:1f:81:ed:61:be:6a:e1:27:88:
01:a8:8c:57:75:29:b2:f4:33:81:fd:c7:0c:5a:94:7c:4c:8e:
f4:91:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:56:21 2025 by rpki-client