Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VH1pxMnN2rZ1SvEMNsBpVlCTswI.roa
File: VH1pxMnN2rZ1SvEMNsBpVlCTswI.roa (raw, json)
Hash identifier: Q32Igrj82pq5PVx8ZubR3lXAFZKI4H6nu+97BR6Xys0=
Subject key identifier: 54:7D:69:C4:C9:CD:DA:B6:75:4A:F1:0C:36:C0:69:56:50:93:B3:02
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26C9757197BFEBD0E2E444E6361BC
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VH1pxMnN2rZ1SvEMNsBpVlCTswI.roa
Signing time: Wed 01 Jan 2025 11:48:48 +0000
ROA not before: Wed 01 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209698
IP address blocks: 85.143.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:6c:97:57:19:7b:fe:bd:0e:2e:44:4e:63:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=547d69c4c9cddab6754af10c36c069565093b302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:24:6c:72:ce:cc:3c:a1:cf:c4:07:98:1c:
8b:d0:0d:c0:24:26:be:91:d3:14:9f:ba:b8:22:e9:
ed:29:ce:8a:7f:83:ea:33:d9:0d:c7:29:c8:5a:ee:
48:ba:b3:c8:a0:24:2e:b6:2a:7a:37:fe:15:2b:f1:
45:b4:5f:33:68:59:ad:4f:11:72:a9:ae:2b:36:62:
7f:b1:33:6c:90:c0:7d:e5:10:eb:ef:76:76:2e:ae:
2c:9c:c3:21:ac:20:0f:d0:1f:8f:3f:ea:14:e6:7e:
87:a4:fd:ba:73:7d:66:07:94:09:a3:ca:32:d2:97:
6c:98:b7:78:68:ce:72:cc:b2:ea:2d:8f:a8:b5:5c:
38:62:d4:08:b3:2c:69:30:f3:ff:7d:c4:df:65:95:
d5:2e:5d:fe:a9:fa:d9:0c:f0:d6:f4:31:36:a6:cf:
fa:ac:e4:8b:3f:de:b8:0a:99:da:1c:1c:ef:7a:eb:
96:4a:a4:a9:1f:be:9e:d9:10:a9:5d:23:64:98:e1:
4d:51:ae:6a:3e:87:b5:3e:87:73:f9:8f:37:da:c1:
9f:80:53:a4:83:65:10:6c:3e:47:03:ca:b6:38:7e:
b8:64:ca:18:58:69:8c:19:c3:23:65:ca:8f:3f:8f:
9f:45:29:0f:f3:f4:a4:87:cf:42:e3:9f:9d:28:49:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:69:C4:C9:CD:DA:B6:75:4A:F1:0C:36:C0:69:56:50:93:B3:02
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VH1pxMnN2rZ1SvEMNsBpVlCTswI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:50:c3:62:e1:0c:c3:d5:7b:02:1f:e1:b3:a4:92:fc:0b:57:
4a:d7:a2:04:30:e5:ff:36:89:02:dc:9b:5b:48:5f:93:8d:be:
36:b8:29:f2:6b:1a:c0:99:0c:ae:76:cc:2b:07:9c:e1:72:fd:
0b:50:12:c2:b2:fd:c4:b6:5f:7e:72:d5:fe:29:06:02:8c:30:
3f:e6:08:67:dc:9a:81:f6:f0:aa:de:bd:10:40:fa:b9:de:93:
f6:25:c8:fd:9c:62:fe:a1:76:5b:6e:e1:3d:5b:98:0d:d6:a9:
de:6d:5d:8a:3b:be:b2:7e:b0:82:1d:9a:dd:7d:ef:3c:c1:75:
f5:20:ef:2e:80:e3:45:25:d3:a5:cc:8e:6e:8d:10:36:f0:fe:
2f:25:68:c6:e6:c3:be:0e:c6:c5:50:47:cc:04:99:f1:9a:b7:
ed:69:7e:2f:3f:34:43:3e:40:00:47:1b:2d:6b:7b:84:c1:bc:
1e:de:cf:4c:ee:3c:fa:c4:fb:fb:15:8f:db:d3:48:7c:8b:8e:
00:ba:8e:01:fc:97:fc:ce:6e:d3:19:56:76:3b:f7:37:f7:ed:
18:f0:70:d6:95:cf:e9:5f:84:ff:e9:ce:40:6c:90:ae:35:be:
77:35:20:81:f8:a5:f8:0c:36:90:a8:63:5a:e2:ee:67:bc:76:
3e:d3:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:01:56 2025 by rpki-client