Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/VABLE3iBHalb6Jl_c3u-oyHeiS8.roa
File: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (raw, json)
Hash identifier: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=
Subject key identifier: 54:00:4B:13:78:81:1D:A9:5B:E8:99:7F:73:7B:BE:A3:21:DE:89:2F
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 01942521EC983406A9D93CD27194E9AE5D81
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/VABLE3iBHalb6Jl_c3u-oyHeiS8.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210182
IP address blocks: 185.250.112.0/22 maxlen: 22
185.250.112.0/24 maxlen: 24
185.250.113.0/24 maxlen: 24
185.250.114.0/24 maxlen: 24
185.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ec:98:34:06:a9:d9:3c:d2:71:94:e9:ae:5d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54004b1378811da95be8997f737bbea321de892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:4f:30:6d:d2:89:5c:55:6d:b2:e6:bc:93:
6e:e1:d2:dd:71:b2:da:06:9b:f0:b1:22:b0:e8:42:
4e:64:03:8a:ed:fb:e5:53:97:8e:fb:79:f4:49:64:
21:8d:8b:be:67:85:f1:dd:f3:09:12:e2:c0:0b:03:
27:cd:4b:90:1e:b7:22:b2:36:64:ee:bf:37:05:f5:
6d:f8:c9:f2:86:86:8a:85:0b:3a:40:15:4e:f2:cf:
21:a4:98:e6:3e:9e:01:d6:a4:e8:df:16:6d:f6:2c:
06:cc:93:38:ee:e9:1e:e0:dc:3d:f0:f8:88:21:62:
33:9f:7f:cd:c2:66:34:25:10:f8:24:05:e8:d5:82:
e6:d5:60:bb:25:fd:aa:1d:cc:0e:53:51:48:bb:63:
36:89:4d:b3:bf:8d:eb:09:f7:60:da:67:c5:aa:1e:
94:f4:4a:a4:71:be:40:25:40:d0:4a:6c:57:40:82:
c4:09:96:36:4b:b8:04:1f:ae:58:d9:eb:65:38:e9:
c7:8f:e0:b6:99:26:3c:dd:bc:7b:a1:d6:c0:8f:e9:
d0:2d:9d:27:b5:b8:65:6a:25:c7:2c:d8:a9:4c:ee:
dc:78:bc:6e:e3:33:01:55:0e:6f:e1:ff:1c:4e:46:
23:c3:b9:a0:8b:cf:8b:d9:06:93:30:cf:c5:5d:70:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:4B:13:78:81:1D:A9:5B:E8:99:7F:73:7B:BE:A3:21:DE:89:2F
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/VABLE3iBHalb6Jl_c3u-oyHeiS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.112.0/22
Signature Algorithm: sha256WithRSAEncryption
36:3d:77:8a:36:f8:a9:f4:07:ff:e6:41:46:ee:4e:65:6d:99:
35:3e:41:37:a3:cd:9c:ca:3c:81:2d:db:b9:98:c3:b7:e0:87:
e3:34:d9:b4:f3:46:57:4f:73:82:5e:92:c4:67:e5:ad:ae:e7:
d8:b9:d6:18:14:d6:ae:5b:f9:49:3e:4e:e7:c2:5c:84:4a:7d:
ab:c0:08:9d:14:c8:91:01:7f:22:8a:8a:0c:18:93:2c:b3:c6:
11:4a:a5:ac:25:c2:a0:76:6c:c3:c6:ad:5d:b2:66:86:94:69:
7c:bc:fb:1a:1f:de:ea:53:50:42:aa:12:53:8f:66:fe:90:2c:
41:f8:11:51:7b:b4:a4:44:ff:be:e2:78:2a:a6:08:af:20:be:
19:43:15:dc:e8:6b:61:ca:03:19:ed:c4:0f:60:7e:1d:23:81:
be:b3:a5:fa:d8:88:31:95:04:f2:a0:d3:5b:7d:03:3f:48:9c:
fa:5b:2c:9a:b7:30:70:e9:8d:c7:8c:77:9e:03:f9:6c:1c:c7:
73:89:a2:57:ad:2c:6e:54:d0:ed:01:76:9c:9d:21:94:70:78:
6a:ea:a5:6f:a8:2d:15:66:8d:8a:c3:74:ba:4e:98:69:92:60:
31:99:3a:b7:e4:83:84:9e:5e:f4:3e:18:f5:38:be:2a:78:15:
c6:97:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:52:35 2025 by rpki-client