Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/vCe1hhmPjnbb0XE8yiRxgRed8A0.roa
File: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (raw, json)
Hash identifier: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=
Subject key identifier: BC:27:B5:86:19:8F:8E:76:DB:D1:71:3C:CA:24:71:81:17:9D:F0:0D
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019421B16EDEB30282B6A26F295B63350131
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/vCe1hhmPjnbb0XE8yiRxgRed8A0.roa
Signing time: Wed 01 Jan 2025 11:47:43 +0000
ROA not before: Wed 01 Jan 2025 11:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39210
IP address blocks: 185.235.152.0/22 maxlen: 23
2a02:8387::/48 maxlen: 49
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:6e:de:b3:02:82:b6:a2:6f:29:5b:63:35:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jan 1 11:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc27b586198f8e76dbd1713cca247181179df00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:09:b0:16:40:b6:88:96:c6:8a:5c:7e:2c:
2c:a0:06:c9:a2:7d:1a:70:be:b8:b8:df:7a:c0:a5:
35:50:f7:01:78:20:c3:2f:bd:ec:1a:34:bf:3a:13:
e1:ba:94:96:ae:9d:11:68:4b:28:73:c2:0d:c7:2d:
93:c4:23:ac:a4:ae:f7:42:5b:f0:e9:77:c0:f6:4b:
75:2a:b6:b1:52:56:a7:09:01:d6:68:18:2c:7e:94:
cc:74:5e:c3:f5:f0:2b:82:a8:44:b2:c8:00:07:28:
4f:1d:81:dc:b6:fc:ff:c1:c8:91:50:11:37:5a:d8:
6f:e2:a8:97:93:57:1f:ff:1f:69:ac:a3:b8:dd:14:
5c:3a:ab:72:c5:16:47:f5:cc:5e:96:d7:8d:69:6b:
c9:9d:f2:c6:53:32:bd:77:00:2f:13:fb:81:27:e2:
cf:e8:28:3c:40:9b:47:b0:d4:02:8d:97:11:a0:dd:
20:85:a5:2e:b1:1f:d9:51:db:58:1e:f5:92:2f:53:
b7:9d:2f:69:76:c7:cc:63:4f:01:db:04:05:75:6e:
5a:c3:86:74:af:7e:4f:46:af:f1:de:0d:db:40:27:
0f:73:5a:98:92:bc:ba:f9:e4:21:15:19:17:8b:5e:
b5:e7:e4:76:ea:f6:0e:6e:f4:31:b7:b6:ea:d1:6e:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:27:B5:86:19:8F:8E:76:DB:D1:71:3C:CA:24:71:81:17:9D:F0:0D
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/vCe1hhmPjnbb0XE8yiRxgRed8A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.152.0/22
IPv6:
2a02:8387::/48
Signature Algorithm: sha256WithRSAEncryption
33:6c:10:b1:9d:52:15:1a:ee:a5:db:e2:a9:67:19:13:4c:25:
a6:71:79:a1:c4:9e:ab:b5:42:66:29:c7:ac:39:d1:36:de:dc:
e7:b9:6a:b2:ec:bf:1b:22:4e:42:23:0d:c7:62:57:24:9e:c5:
2f:c7:ae:11:6f:c4:3f:05:fa:55:b9:59:a5:21:ef:35:ca:8d:
37:05:0b:06:3a:dd:a1:7d:47:3c:4f:41:9c:5d:59:52:8f:af:
04:fa:a9:90:61:67:6d:72:cd:89:53:65:96:5c:04:df:61:cc:
fd:8b:90:5b:a3:54:2e:bf:97:34:a9:9a:77:cb:58:50:37:7e:
1f:76:f8:59:c5:15:2a:79:3e:67:a4:cd:6b:72:f0:78:ac:1d:
13:e9:3f:7f:95:53:7d:86:b6:c7:62:ac:d4:68:cd:b2:24:4c:
76:94:b9:05:42:7b:ce:e1:9e:19:99:a0:92:84:1c:f1:9c:a2:
68:48:87:a1:25:5a:00:c4:44:1f:91:53:63:63:53:f8:ee:92:
5d:76:71:aa:c3:37:25:0f:73:b5:72:e7:19:d1:d6:36:51:69:
f1:19:4b:61:0e:be:17:cb:40:fc:04:ae:74:03:c9:14:3b:4b:
82:84:d9:75:7b:c8:23:92:f6:bf:1a:9f:89:cd:2b:c5:82:73:
69:a9:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:44 2025 by rpki-client