Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/vBSjooCv1VbYtFGvr_WsQil5zco.roa
File: vBSjooCv1VbYtFGvr_WsQil5zco.roa (raw, json)
Hash identifier: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=
Subject key identifier: BC:14:A3:A2:80:AF:D5:56:D8:B4:51:AF:AF:F5:AC:42:29:79:CD:CA
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 0194266A4C8E43B172B062483C7F57263408
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/vBSjooCv1VbYtFGvr_WsQil5zco.roa
Signing time: Thu 02 Jan 2025 09:48:08 +0000
ROA not before: Thu 02 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203525
IP address blocks: 185.131.248.0/22 maxlen: 22
2a06:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4c:8e:43:b1:72:b0:62:48:3c:7f:57:26:34:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Jan 2 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc14a3a280afd556d8b451afaff5ac422979cdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:4a:db:58:0f:8b:df:e0:83:df:fa:31:f1:
b3:a4:92:c3:59:fd:c1:b0:52:37:89:d2:5f:cb:65:
2c:e0:37:f9:96:36:66:cb:31:5a:34:36:42:dd:67:
0f:5f:e2:cd:22:78:91:44:fd:07:d4:a0:0c:b5:7d:
9d:e5:65:24:7f:55:db:fa:24:0f:3b:1d:81:76:5e:
02:cc:99:ed:9a:dd:08:c8:49:ad:e5:29:e1:0c:df:
52:62:4c:f1:3e:96:fc:e5:0f:64:7a:80:5b:06:73:
8d:d2:ff:09:7a:d8:12:4e:e6:39:af:15:90:f9:67:
7e:87:19:f1:02:2f:71:73:70:cd:f7:b5:90:42:a4:
3c:d1:10:58:24:40:c9:1f:b2:da:e5:a3:9a:ca:36:
28:f9:d9:ec:e2:b6:aa:41:e9:51:ef:b5:28:52:e4:
67:f4:66:70:4c:bb:df:2f:08:46:f9:a3:bc:30:f3:
23:1c:6a:e1:c0:bd:40:9a:8a:b5:40:8b:11:1b:b7:
a2:d4:67:48:7f:5f:4e:75:ae:1a:82:c1:35:9c:d3:
55:fe:38:ee:4f:7a:da:5e:6f:95:bb:7e:41:f5:2e:
82:d1:f9:4b:c8:b7:09:ce:63:00:cd:3a:7d:a2:60:
e1:cf:2d:35:1a:4b:f7:96:b2:44:42:ce:01:60:ad:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:A3:A2:80:AF:D5:56:D8:B4:51:AF:AF:F5:AC:42:29:79:CD:CA
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/vBSjooCv1VbYtFGvr_WsQil5zco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.248.0/22
IPv6:
2a06:df00::/29
Signature Algorithm: sha256WithRSAEncryption
7e:d7:a3:fd:70:ba:4f:f0:ab:15:b9:95:59:7f:6d:79:ac:78:
1c:59:53:04:9a:0f:00:95:f1:ba:93:39:b0:9e:45:42:ef:ac:
5e:2f:7f:81:dd:e3:83:87:99:36:0b:52:36:d2:e7:70:e9:59:
e2:01:cc:69:18:67:a7:cd:63:4e:30:e1:74:01:54:c2:3d:4b:
1e:f0:6b:7d:8f:e9:03:e1:6b:c5:13:a7:9c:7e:01:94:2e:e5:
0d:62:14:fa:33:63:a4:54:50:6f:7c:e0:84:96:50:c9:d4:9e:
07:8a:e4:c7:83:dd:43:7f:a8:e1:de:02:99:a3:01:d6:bf:41:
65:3b:18:99:73:13:43:3c:6c:44:7e:3f:5c:34:40:9a:34:7a:
64:9f:a1:e9:5f:13:1a:1e:2c:9b:37:c5:31:44:21:5b:64:24:
08:ed:49:d0:04:73:75:e4:0e:f9:fa:8c:1b:ef:ef:9c:38:48:
c4:fa:68:0e:71:48:11:f7:a4:2f:1c:f2:f8:1a:8a:16:07:37:
ba:3f:bd:46:23:e7:db:af:53:bf:3c:60:7f:ec:f6:6b:94:2b:
0a:6a:42:bb:ae:27:ca:69:c8:00:ff:6a:33:93:a4:e4:27:1a:
fa:ff:a3:44:dd:90:f7:01:69:5b:ce:d9:eb:08:ad:99:dd:fd:
53:18:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:08 2025 by rpki-client