Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/vXhROvq6dHg3IVhsptYB0hsFKPs.roa
File: vXhROvq6dHg3IVhsptYB0hsFKPs.roa (raw, json)
Hash identifier: hpN+IOYMgx8uK9b8PolIZIthzx/Zctok5yQQ+JSebAs=
Subject key identifier: BD:78:51:3A:FA:BA:74:78:37:21:58:6C:A6:D6:01:D2:1B:05:28:FB
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01958B406D70C0ADEAC72382720DB36C178F
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/vXhROvq6dHg3IVhsptYB0hsFKPs.roa
Signing time: Wed 12 Mar 2025 16:46:50 +0000
ROA not before: Wed 12 Mar 2025 16:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.160.0/23 maxlen: 24
185.1.203.0/24 maxlen: 24
2001:7f8:10f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:40:6d:70:c0:ad:ea:c7:23:82:72:0d:b3:6c:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Mar 12 16:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd78513afaba74783721586ca6d601d21b0528fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:a3:60:c8:15:06:8a:45:be:b0:dd:48:77:
07:78:58:3b:58:7a:21:64:8f:0d:5f:b0:3b:e0:9c:
c1:ea:98:72:5c:7d:ed:65:f7:e0:3d:d7:af:76:3e:
d5:82:95:13:0c:e4:dd:5c:4d:23:3e:ff:3b:de:88:
18:55:46:24:ed:e9:ae:4e:68:da:10:98:9a:43:80:
9e:3a:59:83:8f:82:dd:4f:5c:23:15:af:f8:de:3f:
1a:4b:c8:0a:18:ec:cc:57:a4:4d:e2:9a:8c:56:fc:
e7:b0:9f:3c:cb:e4:fa:2e:3f:30:89:78:ae:c9:d8:
56:fb:81:e6:50:cb:5b:a0:3c:c5:90:32:fd:56:98:
04:19:22:48:09:1b:9a:59:28:56:d9:ac:23:ce:62:
05:7b:6f:16:0f:aa:cb:b2:a3:02:17:d3:4a:92:37:
97:40:92:ee:33:f5:ba:87:dc:f9:22:57:7c:7b:66:
27:4a:e7:4f:fd:62:37:b1:a7:ce:d2:70:80:d7:d3:
5e:f3:35:94:19:db:cc:21:d3:8e:8f:cb:31:e5:9a:
e8:8f:e3:dd:03:ff:60:7f:66:e8:95:20:be:48:f9:
0b:5b:b2:fc:34:5a:22:35:7a:31:c9:ac:d2:09:e3:
d9:37:84:cf:76:8f:07:00:35:74:f5:bb:d9:0e:99:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:51:3A:FA:BA:74:78:37:21:58:6C:A6:D6:01:D2:1B:05:28:FB
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/vXhROvq6dHg3IVhsptYB0hsFKPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.160.0/23
185.1.203.0/24
IPv6:
2001:7f8:10f::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ff:1b:f6:47:b5:41:2b:7c:76:af:a3:5a:e9:87:bf:63:b7:
97:13:31:c3:8a:5d:b7:a4:bf:76:82:73:8e:66:a5:b7:e4:a5:
f4:15:d9:5b:10:2b:4d:6f:3b:7d:78:49:a3:f3:57:9a:58:e1:
59:0d:12:63:65:d3:6c:82:c3:55:7f:54:72:14:b6:21:1c:63:
92:73:a2:ff:91:e1:c4:56:d4:17:03:f8:5e:18:15:9c:32:8a:
e5:60:a8:8c:5c:df:06:07:7e:ab:7f:8e:0e:b5:29:42:a7:76:
de:38:7e:51:d0:6e:f6:c6:ac:e1:ff:d7:1b:01:9c:d4:be:b9:
4e:5b:4b:d2:0b:c3:db:07:11:60:a9:a2:ac:65:44:07:2e:72:
5b:b3:fe:d7:cd:b4:c9:41:fc:06:e9:a9:2e:1c:8e:a5:d5:4d:
28:0d:2b:f5:4a:12:b0:5c:46:bd:7e:20:fe:89:b2:aa:78:d1:
d1:41:79:80:59:7e:1b:70:d7:25:ec:82:bc:de:3d:c7:ae:c7:
ae:c2:6e:b5:8f:53:84:42:0c:d3:b6:63:40:99:1c:25:7d:15:
fa:8f:ff:ba:af:7b:99:ab:62:df:61:a3:d6:d7:1f:cd:79:08:
b3:21:be:33:75:78:19:16:31:af:b4:2c:df:88:40:6e:55:c0:
d2:c3:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:48 2025 by rpki-client