Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa
File: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (raw, json)
Hash identifier: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=
Subject key identifier: 54:3A:62:FD:33:21:BB:43:2E:6C:EC:CC:81:29:17:43:58:06:11:5A
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 01942067C1B3326745E36DB7C942F55B70A3
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204204
IP address blocks: 185.142.17.0/24 maxlen: 24
185.142.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:b3:32:67:45:e3:6d:b7:c9:42:f5:5b:70:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543a62fd3321bb432e6ceccc812917435806115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:58:48:57:f5:ba:9c:bb:c4:26:b6:49:9d:
44:08:27:0a:de:a7:4a:8a:5c:b9:95:6f:5a:e7:1e:
70:0c:cc:f1:44:c8:88:4e:6d:44:f5:27:d3:33:0e:
ee:83:b2:f5:87:a0:ac:9b:f7:d5:ae:c7:8b:b2:44:
c4:5d:fa:8e:91:ea:c7:67:8b:7c:6f:2b:18:5b:28:
c7:0b:27:da:b2:20:e6:58:d5:e2:2a:e6:4c:00:91:
8a:1c:03:f7:33:9a:10:cd:c7:0b:f3:f2:53:8c:6a:
04:79:67:fb:96:0f:a4:99:9b:15:68:92:83:7f:25:
b6:c0:51:de:e4:df:0f:b7:10:bc:c4:54:21:f5:de:
04:eb:60:71:a1:c6:9a:d4:cd:79:1f:ed:f6:8d:fc:
ec:3b:99:70:69:29:1b:e4:2f:1f:1a:a3:63:92:19:
c6:77:c6:78:ec:26:89:4c:1c:3c:23:53:96:1d:c0:
50:13:95:60:12:ca:18:3f:39:10:35:b6:11:47:0e:
f7:14:b4:07:41:65:54:31:33:8e:a8:2f:50:ad:ce:
ee:cf:59:bf:d1:14:e3:62:1c:90:0a:8d:19:fb:9d:
8b:83:b2:fa:89:b3:5f:d0:b7:ff:a4:f0:62:f1:75:
ca:c0:2f:36:94:fe:0c:49:93:8c:58:d4:c7:4d:9d:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3A:62:FD:33:21:BB:43:2E:6C:EC:CC:81:29:17:43:58:06:11:5A
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.17.0-185.142.18.255
Signature Algorithm: sha256WithRSAEncryption
09:cc:5c:e3:91:37:8e:09:26:64:02:a2:e8:60:99:3d:f7:8a:
2e:1c:f1:79:4b:93:e3:36:47:05:6e:9b:ad:94:42:1e:35:36:
1d:51:e5:6a:ff:28:1b:69:c9:e1:dc:fa:d2:56:de:e6:a3:a5:
ee:08:75:1b:0e:da:f4:a5:dd:42:c5:b0:8b:a5:8e:ba:73:3b:
1f:ec:56:50:1a:5f:4b:fc:97:be:79:40:3f:b8:01:79:aa:cb:
dc:f4:3f:b0:fb:62:d0:12:44:a7:86:78:4c:e1:69:0c:c8:5a:
0c:d2:6d:8e:1f:f6:9b:1b:e4:0b:2b:8e:01:20:da:01:53:ef:
e7:64:66:d0:ff:7a:42:96:64:fd:45:69:fd:7d:51:97:64:e4:
8f:83:84:43:0f:e8:05:9a:28:1a:b9:66:1f:94:07:4a:ba:47:
42:a1:79:27:26:3d:59:5e:15:40:20:c3:85:79:78:94:0d:ac:
90:bd:fd:f6:f1:f9:7e:41:a4:db:c9:93:53:ac:df:6a:38:a1:
40:13:f6:3a:3b:77:73:7e:6e:af:af:cf:a4:25:61:55:0a:18:
a7:0b:c1:2c:92:64:ca:1c:58:8c:06:94:36:47:ce:ba:ff:18:
8e:49:37:38:2b:c8:41:f9:03:16:a9:91:f6:a4:89:ad:df:e3:
46:3d:25:8d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgZ8GzMmdF4223yUL1W3CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2M2VkZGI5MWI1MzhmODNlOGFlZGY1NTY1Yzk2MGRmMGIx
MDdlYTIwHhcNMjUwMTAxMDU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDNhNjJmZDMzMjFiYjQzMmU2Y2VjY2M4MTI5MTc0MzU4MDYxMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ZYSFf1upy7xCa2SZ1ECCcK3qdK
ily5lW9a5x5wDMzxRMiITm1E9SfTMw7ug7L1h6Csm/fVrseLskTEXfqOkerHZ4t8
bysYWyjHCyfasiDmWNXiKuZMAJGKHAP3M5oQzccL8/JTjGoEeWf7lg+kmZsVaJKD
fyW2wFHe5N8PtxC8xFQh9d4E62Bxocaa1M15H+32jfzsO5lwaSkb5C8fGqNjkhnG
d8Z47CaJTBw8I1OWHcBQE5VgEsoYPzkQNbYRRw73FLQHQWVUMTOOqC9Qrc7uz1m/
0RTjYhyQCo0Z+52Lg7L6ibNf0Lf/pPBi8XXKwC82lP4MSZOMWNTHTZ1HdwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFQ6Yv0zIbtDLmzszIEpF0NYBhFaMB8GA1UdIwQY
MBaAFEY+3bkbU4+D6K7fVWXJYN8LEH6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUt
MTg3NjI1MDBmZTI1LzEvVkRwaV9UTWh1ME11Yk96TWdTa1hRMWdHRVZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUtMTg3NjI1MDBmZTI1
LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5jhED
BAC5jhIwDQYJKoZIhvcNAQELBQADggEBAAnMXOORN44JJmQCouhgmT33ii4c8XlL
k+M2RwVum62UQh41Nh1R5Wr/KBtpyeHc+tJW3uajpe4IdRsO2vSl3ULFsIuljrpz
Ox/sVlAaX0v8l755QD+4AXmqy9z0P7D7YtASRKeGeEzhaQzIWgzSbY4f9psb5Asr
jgEg2gFT7+dkZtD/ekKWZP1Faf19UZdk5I+DhEMP6AWaKBq5Zh+UB0q6R0KheScm
PVleFUAgw4V5eJQNrJC9/fbx+X5BpNvJk1Os32o4oUAT9jo7d3N+bq+vz6QlYVUK
GKcLwSySZMocWIwGlDZHzrr/GI5JNzgryEH5Axapkfakia3f40Y9JY0=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:06 2025 by rpki-client