Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vH3uZ08iyiY8zb-A3dRrracn6LQ.roa
File: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (raw, json)
Hash identifier: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=
Subject key identifier: BC:7D:EE:67:4F:22:CA:26:3C:CD:BF:80:DD:D4:6B:AD:A7:27:E8:B4
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 019421B1DFE3997346401F28CDF6EF08BDDD
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vH3uZ08iyiY8zb-A3dRrracn6LQ.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206496
IP address blocks: 185.198.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:e3:99:73:46:40:1f:28:cd:f6:ef:08:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc7dee674f22ca263ccdbf80ddd46bada727e8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:30:e9:a0:2d:91:b9:a8:85:a5:e0:11:1b:
c5:6e:65:56:41:d1:f1:89:3d:e3:be:1e:37:21:30:
a5:a6:26:ef:01:77:e6:e0:78:d7:ee:bd:c3:d2:68:
93:a9:9c:70:d9:99:a7:8b:aa:23:6b:c2:71:61:d6:
38:ac:88:c7:f8:76:7c:bb:73:f8:92:56:90:68:f8:
fe:f5:6d:59:3c:70:4b:e2:91:03:34:c2:9b:79:21:
b8:4e:e4:af:65:94:f9:18:c7:82:1c:ba:72:3d:af:
a6:13:f6:d8:a7:cb:ac:6f:e2:a6:09:28:36:d8:91:
dc:72:77:99:9b:03:86:4d:08:5f:74:0f:98:b2:97:
de:4d:6d:43:ad:6f:ff:8a:2e:14:ad:7e:78:68:ef:
ef:10:76:a1:93:ac:1b:3e:d4:48:1d:47:d2:e8:d8:
8a:fb:cb:9c:33:dc:66:ba:c9:31:4f:2c:dc:6c:05:
aa:9f:66:1f:72:86:25:5d:57:e5:70:4f:c3:0d:a8:
fd:ab:b6:fb:b4:92:e3:c2:44:d0:65:3c:a5:d1:81:
bf:4c:2e:f0:b5:c6:1a:1b:94:b0:ac:ea:0a:46:7e:
ef:4d:45:0d:78:a1:9b:d6:80:17:5e:03:ee:34:e1:
40:23:de:99:6e:49:34:f8:46:8b:d5:f1:ab:ea:55:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:EE:67:4F:22:CA:26:3C:CD:BF:80:DD:D4:6B:AD:A7:27:E8:B4
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vH3uZ08iyiY8zb-A3dRrracn6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:df:ea:df:05:f3:fc:20:fe:db:c0:b1:6a:8d:8a:4c:2b:
79:61:42:86:2a:d2:d5:38:3d:ba:8f:62:5c:b4:06:85:4d:7f:
24:a4:00:0c:37:2e:30:c3:2c:32:62:11:43:f2:3b:43:e3:ad:
86:80:d9:7e:bb:12:d6:28:2b:fc:54:ca:0f:c9:1c:fb:79:84:
0d:e8:67:02:ec:0e:61:d6:1e:c8:8d:7b:6d:e4:9f:19:c9:26:
79:79:e4:c8:34:cb:43:ce:ac:32:a9:a3:3d:0e:3f:a9:f2:11:
32:5c:66:29:ec:11:04:94:96:93:4c:08:1a:c8:b5:7e:d8:2b:
33:0c:83:2e:3f:b6:ca:e3:e2:53:eb:b7:43:5a:8d:07:6c:72:
0b:db:d0:a4:d5:ce:b3:53:c9:54:39:6d:be:bd:5e:f6:cb:f5:
9b:c5:5d:56:66:31:e0:85:32:99:44:51:ae:c2:d8:0a:f9:da:
46:ef:32:a5:d8:65:cd:cc:03:43:10:32:21:ae:43:0d:32:28:
76:83:7c:7e:b8:fc:9d:aa:36:03:a1:8b:31:57:79:5b:2b:af:
08:8b:a1:2c:d0:c9:dd:c8:48:2e:9f:6f:3a:9d:60:03:0b:81:
58:3c:9f:d0:96:c1:7e:42:99:5e:5e:e6:50:55:12:93:4b:42:
67:c5:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:24 2025 by rpki-client