Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VGFw4hCZzsJOlhOA73QGytvIikA.roa
File: VGFw4hCZzsJOlhOA73QGytvIikA.roa (raw, json)
Hash identifier: DtmKwnkss1NrPB245opzp9IKZq83hnINbIPVnczeYSQ=
Subject key identifier: 54:61:70:E2:10:99:CE:C2:4E:96:13:80:EF:74:06:CA:DB:C8:8A:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259014C3FEA1E9B4CEA1A85F4F07FDA1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VGFw4hCZzsJOlhOA73QGytvIikA.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214362
IP address blocks: 92.38.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:14:c3:fe:a1:e9:b4:ce:a1:a8:5f:4f:07:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546170e21099cec24e961380ef7406cadbc88a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:eb:29:54:54:97:7b:dd:e3:b8:4a:cf:7b:
e1:2e:11:33:74:f3:15:14:6d:43:b1:be:11:8c:14:
13:58:24:6b:f3:be:3b:4e:e2:9f:5a:29:74:bf:21:
7b:08:a8:a0:9c:ff:4e:c3:b7:38:f8:23:42:68:61:
89:7a:07:a3:56:b4:b6:59:19:3b:9c:ae:6b:53:ab:
3e:cf:a6:15:36:ec:3c:ca:f9:39:ec:0c:27:0f:c2:
c0:cf:f6:ed:12:6f:3a:e4:b4:48:1d:70:d4:9d:eb:
eb:02:2b:af:2e:ea:c8:66:ed:18:f2:3b:05:c1:9f:
7e:2a:03:fe:4b:8c:13:55:5f:d4:13:66:19:15:a7:
e8:b3:46:93:9b:15:91:e5:80:e2:e0:0b:06:99:47:
40:ba:3b:77:7d:53:14:37:d4:f1:40:83:e0:a9:2d:
66:67:50:d0:08:e6:03:ad:32:db:95:b3:8e:ad:b5:
27:ad:42:fd:6f:d0:ed:f5:ce:5d:90:a3:de:19:08:
95:8c:c2:b7:b8:d5:bb:16:84:73:0b:e9:8e:9d:19:
3b:ba:9a:d5:91:51:58:33:e6:1a:76:71:02:70:0f:
40:84:2b:02:dc:72:84:86:31:80:eb:87:e9:87:53:
d6:18:a6:0b:6c:c7:99:40:fe:d4:7d:8a:37:61:6e:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:70:E2:10:99:CE:C2:4E:96:13:80:EF:74:06:CA:DB:C8:8A:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VGFw4hCZzsJOlhOA73QGytvIikA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.35.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bc:05:db:f8:20:d6:21:49:ee:4c:3c:13:66:ab:06:25:c1:
97:06:a6:07:ff:e4:dd:10:3b:b8:56:37:f4:7d:20:bf:d6:4d:
a2:80:cb:37:be:c5:3a:73:76:71:19:b7:6a:5b:ae:d9:95:b7:
e6:e1:06:2f:48:9a:e0:7c:06:cb:81:8a:25:e3:b1:29:5b:12:
4a:99:7c:10:ba:ce:d6:3f:4f:e6:29:f8:30:de:64:81:30:f2:
e7:32:ed:93:be:ce:92:50:7a:0c:8b:7a:4c:01:7d:e3:e0:fa:
30:e6:92:53:54:4b:4a:58:38:36:26:cb:d8:40:e2:aa:a7:c9:
b1:63:d5:db:20:a6:f9:f8:73:a3:b4:d5:9a:d1:e3:f9:69:9d:
c4:9e:6b:1f:28:38:39:f6:d2:ef:85:62:7b:f9:49:e7:51:cf:
c3:1b:83:87:94:41:ca:c5:df:8e:55:2a:cf:72:dd:02:61:18:
9c:3c:d1:b3:e9:00:81:7e:43:72:2d:e1:58:c8:a5:22:54:d6:
c7:3a:d3:52:16:de:67:5c:dc:8d:0d:fd:76:d9:85:79:09:f0:
04:37:5e:89:50:3c:bc:c4:9a:c0:39:7e:8a:1e:f8:9c:d3:13:
bd:e9:de:78:61:2d:3d:61:76:10:2d:2f:71:f9:12:81:b1:6c:
0b:f4:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:47 2025 by rpki-client