Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/vkWj2nsjhackefLzTv92x4E_mxA.roa
File: vkWj2nsjhackefLzTv92x4E_mxA.roa (raw, json)
Hash identifier: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=
Subject key identifier: BE:45:A3:DA:7B:23:85:A7:24:79:F2:F3:4E:FF:76:C7:81:3F:9B:10
Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial: 0194274790B43EA1C69D874F767846D835A4
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/vkWj2nsjhackefLzTv92x4E_mxA.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.89.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:90:b4:3e:a1:c6:9d:87:4f:76:78:46:d8:35:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be45a3da7b2385a72479f2f34eff76c7813f9b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:9e:68:15:65:d4:ba:e1:45:7c:a3:22:49:
75:61:21:3e:8f:33:87:7c:96:0a:e3:c0:d8:71:f3:
ed:1f:10:fa:3a:53:44:aa:3a:54:43:a6:d6:05:e7:
43:a4:23:bb:4c:37:a8:b1:cd:17:50:5e:0f:45:f8:
c5:85:af:9c:ac:9a:3d:1f:e4:b2:d7:02:bc:71:97:
06:9f:69:6b:89:90:66:20:5d:85:a8:b3:eb:8d:8e:
7f:23:5c:62:1d:62:a1:5b:a0:85:b0:b5:ef:09:5f:
84:ca:51:73:f6:29:fc:dd:e5:8c:6c:11:bc:af:9c:
8c:f4:16:16:3b:ef:4b:99:8d:d3:d4:8a:43:80:bb:
40:90:b0:c1:d3:ac:a9:67:08:05:fa:f9:e2:86:09:
ea:18:1f:91:e0:53:6f:f4:54:f9:c0:9a:2a:c2:37:
64:ad:a0:37:89:52:5e:13:d1:ff:b0:e7:a3:16:e6:
c7:57:e9:0f:fd:e3:55:86:df:a3:7b:e4:23:4b:7c:
91:49:57:5a:85:77:ab:be:2f:00:eb:e8:f2:61:ac:
35:8e:85:67:48:57:e9:ae:a2:7f:22:67:db:a3:ba:
54:d2:34:e4:62:c1:b0:fb:a2:96:d1:ab:6c:ea:c6:
06:60:dc:bb:d6:f8:5a:4e:92:ce:03:d2:93:c6:d0:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:A3:DA:7B:23:85:A7:24:79:F2:F3:4E:FF:76:C7:81:3F:9B:10
X509v3 Authority Key Identifier:
keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/vkWj2nsjhackefLzTv92x4E_mxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.98.0/24
Signature Algorithm: sha256WithRSAEncryption
49:02:52:87:79:66:4d:e1:a7:84:53:70:67:03:9d:5d:4c:bf:
da:75:21:1e:28:85:5c:7a:16:54:de:f5:d8:ac:b4:38:3d:93:
e7:1a:8a:e1:84:20:b0:41:b9:56:2f:6d:2a:e7:07:2f:9b:dd:
05:6f:d4:7e:2d:69:9e:dd:74:86:2d:fa:76:ed:cd:9d:92:85:
32:8c:92:c4:b3:18:2b:d9:ab:08:c3:cd:e7:e6:a0:75:3c:ad:
7f:3e:bb:4d:0c:a1:8b:09:15:c8:2b:d1:7f:9c:48:dc:13:aa:
13:a3:2e:36:b2:7a:0f:67:40:ba:a3:eb:70:c2:e9:d5:1b:9e:
3e:6a:95:0f:26:66:1d:fb:ce:a5:19:f7:78:87:a5:a4:25:25:
57:8b:7c:38:40:0a:c0:9e:83:1f:ac:24:13:e9:f2:03:d5:88:
08:2d:04:40:8e:b2:f7:d3:4a:91:f3:c9:68:8e:c5:fa:79:c4:
67:3c:3a:1a:91:7e:ea:de:58:42:be:92:69:64:34:1b:41:d3:
e8:53:70:43:f7:41:fb:04:69:20:83:e8:61:da:58:b8:6a:8b:
c0:ff:39:e8:4a:40:97:77:bd:0e:ee:12:11:25:d6:f4:ae:a4:
5f:37:03:09:ff:b6:83:c8:bf:ef:5f:51:63:7a:4d:0a:c2:c0:
67:de:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:53:00 2025 by rpki-client