Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VyUpOByWHBMAiLFnw18vtuiXk3g.roa
File: VyUpOByWHBMAiLFnw18vtuiXk3g.roa (raw, json)
Hash identifier: 2vpWIb9bRbh3ccUc+pID2ixyXu9azGpTm9K0k1Q/NW0=
Subject key identifier: 57:25:29:38:1C:96:1C:13:00:88:B1:67:C3:5F:2F:B6:E8:97:93:78
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484EE840624D4B9776E0C2FE5B4085
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VyUpOByWHBMAiLFnw18vtuiXk3g.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264825
IP address blocks: 185.181.32.0/22 maxlen: 22
185.181.32.0/23 maxlen: 23
185.181.32.0/24 maxlen: 24
185.181.34.0/23 maxlen: 23
185.181.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:e8:40:62:4d:4b:97:76:e0:c2:fe:5b:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=572529381c961c130088b167c35f2fb6e8979378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:db:eb:78:ee:ff:59:96:57:95:57:da:16:
41:0d:be:e6:9d:49:0e:cf:f4:1b:75:07:74:2a:b5:
b7:b8:57:25:5f:9d:5d:aa:fd:0b:c4:25:aa:2d:ec:
8d:0e:05:61:a2:e4:e9:9d:62:15:92:ee:21:5f:08:
10:42:f1:2e:74:39:2f:e3:f6:86:05:4f:c1:c1:e5:
95:d5:cf:c1:5d:da:c1:e1:82:f6:c0:87:c4:45:d2:
48:15:26:11:9a:16:b5:da:92:e9:be:0a:6c:af:95:
e9:87:13:39:eb:7a:55:44:36:6b:95:85:54:e7:e3:
c3:21:6e:26:e0:a1:e8:ce:e9:df:67:76:07:55:3e:
78:2c:55:49:46:90:35:f1:36:cc:7d:3b:13:bd:69:
06:63:09:94:7a:4a:82:1c:e6:44:ba:b7:56:59:79:
6d:0b:a8:ab:0e:dc:2d:6d:cc:bf:95:e2:12:30:0c:
08:e2:56:2b:52:cb:de:5d:1e:03:9e:02:60:01:ca:
11:6d:d8:c2:59:ae:8b:7b:2b:aa:21:15:d0:0a:73:
43:84:57:cd:04:ec:e2:22:9f:73:aa:e4:4d:65:43:
23:cf:26:bd:bb:f2:2c:28:4d:19:97:8c:3d:51:c3:
16:ff:44:4c:ef:ba:0c:44:80:f2:18:49:4f:ac:4a:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:29:38:1C:96:1C:13:00:88:B1:67:C3:5F:2F:B6:E8:97:93:78
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VyUpOByWHBMAiLFnw18vtuiXk3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ae:7b:5c:68:f4:5f:cb:31:e6:4b:e5:4c:9a:ce:bd:bf:05:
65:2a:cc:e1:20:44:8f:74:8a:67:24:1e:98:c0:88:b8:25:45:
a7:12:e7:4d:28:ac:9e:92:72:db:7a:c5:bf:49:c2:13:21:61:
e2:39:33:ab:e9:68:63:56:b4:a0:9c:5d:4f:0f:75:ef:ab:a5:
8e:d7:91:bb:67:81:28:89:fd:23:81:52:1f:e2:d9:b2:76:bd:
1f:0e:69:b9:a7:cc:a1:87:a8:fb:2b:2e:5b:bf:67:bd:e1:64:
28:7a:0e:4d:16:0c:cd:f8:9b:40:10:16:6f:10:6a:48:13:f3:
a9:23:9c:e0:fd:27:38:ad:30:74:83:2a:78:8f:f2:c3:99:2b:
8f:6d:b8:3b:2c:f7:e4:85:5b:81:e1:c8:23:bc:98:1d:bc:2a:
f1:fc:76:44:84:70:4b:69:96:49:45:27:47:a0:61:a1:27:93:
ca:b0:ef:ca:31:9b:48:22:f0:d0:aa:5e:d5:32:87:ae:e6:f3:
97:68:25:4c:91:26:91:56:d6:e7:aa:3d:18:f1:94:f7:77:e4:
c0:fc:ce:28:6c:a2:19:e3:4d:2b:97:68:bf:cd:86:48:54:a4:
aa:da:9f:5d:ee:80:93:a8:49:c6:5c:da:c6:78:b0:3b:74:83:
a1:5b:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:44 2025 by rpki-client