Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6iV3wS_gM4tN_0HK6M8UWpQOFM.roa
File: V6iV3wS_gM4tN_0HK6M8UWpQOFM.roa (raw, json)
Hash identifier: PZ2F2NO5ek9xOsBfG9RJ0M42pYvJcfZln0i6bmVa9DQ=
Subject key identifier: 57:A8:95:DF:04:BF:80:CE:2D:37:FD:07:2B:A3:3C:51:6A:50:38:53
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26B5B2AEB1BCACACBA23111374118
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6iV3wS_gM4tN_0HK6M8UWpQOFM.roa
Signing time: Wed 01 Jan 2025 11:48:48 +0000
ROA not before: Wed 01 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207168
IP address blocks: 85.142.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:6b:5b:2a:eb:1b:ca:ca:cb:a2:31:11:37:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a895df04bf80ce2d37fd072ba33c516a503853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:6a:08:24:ac:c5:8a:55:b4:0a:d5:bd:2e:
d5:ec:99:ad:72:f3:4c:c6:03:b4:fd:64:b6:d4:95:
f9:8e:94:04:1f:7e:a2:bd:45:99:0c:16:21:a9:7a:
08:10:b1:5a:a3:c4:0e:f5:64:fc:ed:a5:a3:9e:3a:
5d:35:e8:8a:f1:f8:d9:17:f3:2a:8b:06:cb:9a:6e:
9e:24:0d:70:62:53:b7:09:7c:76:2a:d7:63:ba:49:
cc:fc:28:2b:bd:7f:e2:dc:cb:6e:3b:3f:b7:ed:80:
d7:88:94:18:9d:b3:8e:50:1b:74:e6:99:4e:f7:bf:
e4:39:19:3e:d9:03:58:0d:b2:f8:09:5c:9a:5a:7f:
9c:4a:16:bc:ae:ce:31:ae:f0:f8:72:48:c3:ad:d3:
08:72:8f:d4:14:e0:0d:91:e5:1f:20:34:3c:45:42:
c8:17:0c:6e:6a:10:f0:a6:0c:a3:fa:66:cd:89:13:
f0:69:50:ca:c7:b8:7d:b6:57:9d:d5:ac:19:d5:c1:
fd:1e:e6:83:09:42:84:b4:d5:2d:10:b1:34:98:99:
f9:1f:9f:99:8b:a2:65:35:17:ac:fb:1b:68:66:6b:
0e:26:7e:4f:99:a7:82:8a:9a:77:e9:2e:65:60:6e:
39:00:7e:57:b6:80:a4:46:ce:67:12:ac:42:67:17:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:95:DF:04:BF:80:CE:2D:37:FD:07:2B:A3:3C:51:6A:50:38:53
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6iV3wS_gM4tN_0HK6M8UWpQOFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:6d:0d:69:c2:6a:21:98:b3:d8:9d:e6:84:b5:51:b0:cd:9d:
7f:95:f4:ca:e4:67:09:e6:ad:b4:27:0d:7e:ba:b2:20:b4:ba:
ac:4e:fd:75:92:e6:91:bf:db:05:24:66:b5:db:94:29:26:e7:
67:39:39:69:d7:85:35:e0:cb:ba:28:66:be:ff:ba:70:08:8b:
8d:4a:ad:4e:56:5c:66:42:9b:89:4c:61:29:66:2e:d5:7c:57:
b9:3f:27:63:aa:9e:3d:b1:2e:96:17:68:8a:53:6c:b6:2a:e3:
aa:ad:9c:98:85:00:c2:f8:bd:f4:48:c5:5f:3d:e5:97:3f:45:
71:f8:d3:f4:3d:c5:40:48:94:cc:b0:31:20:3b:d2:17:c9:41:
ea:f5:35:1e:be:88:4c:00:21:8c:7f:8d:14:b3:2b:1d:10:e1:
a8:fe:60:53:0f:ee:9f:a8:bf:bf:1c:72:6c:4d:17:25:3b:21:
39:33:e0:a3:3e:5a:3c:d0:34:0e:68:a4:25:66:bc:67:48:ae:
bc:0d:f4:9f:b2:f6:5c:95:2d:bb:5b:85:01:dc:a7:9b:12:a6:
3e:11:97:a9:6d:00:27:bc:10:f9:8b:65:5c:be:bf:29:19:d7:
45:ce:fc:a7:0b:2f:bc:51:a3:32:81:51:76:2a:58:9f:b5:93:
4b:c4:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:50:40 2025 by rpki-client