Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/vtbeMLgEiJIMz5_yaCwan-k-_x8.roa
File: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (raw, json)
Hash identifier: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=
Subject key identifier: BE:D6:DE:30:B8:04:88:92:0C:CF:9F:F2:68:2C:1A:9F:E9:3E:FF:1F
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019422FBFBCE24D98864E00A2F18AEEF735D
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/vtbeMLgEiJIMz5_yaCwan-k-_x8.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 151.248.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fb:ce:24:d9:88:64:e0:0a:2f:18:ae:ef:73:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed6de30b80488920ccf9ff2682c1a9fe93eff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:fd:8e:e1:7d:fb:df:c8:b7:6b:9d:70:a3:
9e:2b:1d:fc:21:6c:9f:32:e9:7a:2b:c6:b8:dd:4d:
9b:5c:ca:e3:f8:25:69:56:3a:68:2e:c5:66:d3:c3:
74:a7:73:cd:99:64:9b:02:1e:af:54:62:b7:f8:33:
fb:29:4c:2b:6b:e8:7a:bd:58:c5:10:9a:2f:92:42:
60:20:e7:e9:02:41:61:44:22:3a:f9:d2:22:f2:9d:
e8:f4:0b:68:3f:b6:20:aa:b3:2d:f1:85:a7:31:c8:
e9:ce:0a:7c:f2:52:5c:cf:c1:26:db:e4:18:98:50:
8f:e0:60:96:8e:b5:5d:ea:c6:dd:8b:52:24:39:18:
10:a5:21:5b:b3:00:1e:bd:69:ed:4b:48:45:80:88:
23:e6:19:95:98:d8:da:ab:d3:4b:c3:cd:b5:07:a5:
69:f4:f1:ce:99:e6:a7:2e:d0:ac:27:8c:9b:e9:26:
e0:56:6f:c4:fa:8a:d8:70:9e:a9:51:6f:7d:9b:fd:
de:81:53:da:11:b8:2a:03:18:c8:29:aa:fe:55:83:
60:fb:b0:c5:e5:fc:6d:26:54:c0:d0:9c:5d:93:a8:
7b:ce:f7:6b:ad:ba:b3:88:0a:60:42:f8:ac:c8:97:
13:b4:4b:3f:1d:e1:56:d0:97:c0:6b:50:25:8b:46:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D6:DE:30:B8:04:88:92:0C:CF:9F:F2:68:2C:1A:9F:E9:3E:FF:1F
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/vtbeMLgEiJIMz5_yaCwan-k-_x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ab:89:28:b5:a2:3f:4f:34:77:57:88:b3:85:b5:73:46:a7:
e0:2a:67:f6:8a:30:d9:8f:db:fb:f6:70:30:e1:e4:1f:7d:6f:
d0:cd:3d:e6:0a:fd:a7:bb:bb:54:9a:d3:aa:f8:92:fe:3f:78:
1b:94:ed:b8:3d:40:21:ac:24:1b:7d:3c:95:b4:87:7f:6c:0c:
9a:4e:70:68:9f:a0:96:72:a1:a8:03:66:95:8b:68:9f:fe:71:
91:32:6c:9f:e2:46:b8:76:79:f4:30:e9:ed:15:bd:80:eb:e9:
38:9b:7f:5c:99:02:b1:c6:b2:8d:d7:ec:1e:18:71:05:5c:e1:
ed:fe:74:57:78:bf:dd:95:f1:b1:55:2f:ad:95:b8:d5:6d:a5:
78:b1:73:f4:f9:03:c4:2a:af:d4:2b:73:64:65:36:4e:66:7c:
85:e3:99:90:f9:56:b9:25:90:6d:2e:c3:de:4b:ef:e5:d3:2b:
66:0f:a4:e9:0a:35:66:4f:0a:20:8b:36:ec:20:36:a2:cf:1a:
89:1b:26:07:0d:d1:98:68:0a:17:05:e1:90:9c:1c:92:c4:85:
94:76:ab:75:58:82:38:3b:6d:a0:1c:96:6a:aa:27:a2:46:a2:
ca:eb:ed:16:c1:74:d1:f1:6b:c9:9f:16:66:1b:70:57:8f:ed:
e6:be:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:31 2025 by rpki-client