Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/VHnEdWOU21TmJWTQH9-doQXQ0yk.roa
File: VHnEdWOU21TmJWTQH9-doQXQ0yk.roa (raw, json)
Hash identifier: pFCoqQmJJvFJk4sf3//959OhDhdVi2aYYgZGYzF037A=
Subject key identifier: 54:79:C4:75:63:94:DB:54:E6:25:64:D0:1F:DF:9D:A1:05:D0:D3:29
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019426D9A295EA9B61A2A600BB5ED9A9AF4E
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/VHnEdWOU21TmJWTQH9-doQXQ0yk.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 185.189.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:95:ea:9b:61:a2:a6:00:bb:5e:d9:a9:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5479c4756394db54e62564d01fdf9da105d0d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:41:00:f7:8e:81:b8:c5:e6:f2:aa:4a:96:
b4:15:1b:af:91:de:a4:7a:cd:46:37:d9:6b:8e:97:
fe:29:81:89:37:22:2c:d1:21:d1:01:9e:1e:de:5e:
fb:3e:cf:03:be:35:d1:e4:57:25:a7:5e:d4:10:7e:
f6:ac:8b:02:28:e3:e9:8c:cc:3d:e6:3b:e9:5b:5d:
bf:ab:a6:dd:2e:84:9c:4b:12:58:82:bd:67:e3:fa:
ad:db:88:69:4e:e5:66:f6:37:88:34:65:0e:db:00:
b1:2f:43:76:cb:af:88:ad:5b:cb:5b:fd:dd:a4:16:
65:4b:7f:52:59:58:c7:8a:47:03:d0:7e:23:c6:9a:
d2:ed:84:8b:c0:4a:c7:7e:82:a0:23:c5:5c:c5:5a:
71:a6:97:3d:f6:57:50:59:7d:c0:d7:e5:c1:18:45:
0f:b4:97:87:7f:89:26:51:bd:54:7c:96:76:e2:56:
54:4b:f1:5f:76:9a:eb:3e:8e:c1:9b:f6:5e:5f:f9:
cd:6d:9a:af:a8:4d:93:df:5e:5a:54:02:7b:a5:14:
14:48:f3:55:a6:6f:b3:b6:5d:7b:f0:4b:13:cc:ff:
46:b2:ba:4a:9d:27:59:e3:8b:72:c1:e2:58:f0:c3:
41:f4:a9:04:8a:43:0b:76:e7:a9:26:bb:74:58:6a:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:C4:75:63:94:DB:54:E6:25:64:D0:1F:DF:9D:A1:05:D0:D3:29
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/VHnEdWOU21TmJWTQH9-doQXQ0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:54:63:72:c6:03:fb:64:6d:57:60:03:81:a4:39:a6:a0:0b:
df:0a:e0:58:63:ad:56:7f:2c:c2:06:63:d7:d8:42:ed:88:9e:
f1:d0:79:4c:27:b9:49:a5:a1:77:78:21:c4:40:67:56:41:30:
23:ad:41:70:e4:fd:31:f3:6a:8a:3f:82:f8:a5:f0:57:35:ba:
46:1b:af:61:ed:7d:17:fd:bc:41:15:6e:55:a4:ee:47:74:b6:
28:f7:3f:d1:ce:c0:b1:42:90:61:6f:e1:5f:bd:11:c3:26:8b:
50:f1:77:4f:ea:37:c8:e2:df:8b:70:65:62:ff:60:07:bf:4c:
67:dd:28:87:9e:21:7c:00:00:39:68:96:91:03:f6:5c:c5:b6:
ff:29:b4:88:d7:52:ff:ec:91:59:bb:fa:16:a1:65:ca:34:9e:
85:5d:aa:1b:45:2f:e8:8b:63:02:a3:c0:cd:6f:54:43:ff:21:
90:7f:3f:a4:e2:22:e3:88:a0:91:4f:97:e7:34:3d:54:7a:a9:
f4:29:e0:d8:d4:62:49:73:80:0b:e7:f5:a0:b3:ae:91:68:18:
1e:8c:dd:20:57:bb:55:6b:60:41:1d:fc:30:d5:11:ec:eb:bb:
bc:14:26:a3:4f:da:e4:51:47:46:89:1f:68:15:34:ad:b0:51:
14:c4:3b:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2aKV6pthoqYAu17Zqa9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjUwMTAyMTE0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDc5YzQ3NTYzOTRkYjU0ZTYyNTY0ZDAxZmRmOWRhMTA1ZDBkMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV1BAPeOgbjF5vKqSpa0FRuvkd6k
es1GN9lrjpf+KYGJNyIs0SHRAZ4e3l77Ps8DvjXR5Fclp17UEH72rIsCKOPpjMw9
5jvpW12/q6bdLoScSxJYgr1n4/qt24hpTuVm9jeINGUO2wCxL0N2y6+IrVvLW/3d
pBZlS39SWVjHikcD0H4jxprS7YSLwErHfoKgI8VcxVpxppc99ldQWX3A1+XBGEUP
tJeHf4kmUb1UfJZ24lZUS/FfdprrPo7Bm/ZeX/nNbZqvqE2T315aVAJ7pRQUSPNV
pm+ztl178EsTzP9GsrpKnSdZ44tyweJY8MNB9KkEikMLduepJrt0WGpyvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFR5xHVjlNtU5iVk0B/fnaEF0NMpMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEvVkhuRWRXT1UyMVRtSldUUUg5LWRvUVhRMHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub0gMA0G
CSqGSIb3DQEBCwUAA4IBAQCmVGNyxgP7ZG1XYAOBpDmmoAvfCuBYY61WfyzCBmPX
2ELtiJ7x0HlMJ7lJpaF3eCHEQGdWQTAjrUFw5P0x82qKP4L4pfBXNbpGG69h7X0X
/bxBFW5VpO5HdLYo9z/RzsCxQpBhb+FfvRHDJotQ8XdP6jfI4t+LcGVi/2AHv0xn
3SiHniF8AAA5aJaRA/Zcxbb/KbSI11L/7JFZu/oWoWXKNJ6FXaobRS/oi2MCo8DN
b1RD/yGQfz+k4iLjiKCRT5fnND1Ueqn0KeDY1GJJc4AL5/Wgs66RaBgejN0gV7tV
a2BBHfww1RHs67u8FCajT9rkUUdGiR9oFTStsFEUxDtZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:05:05 2025 by rpki-client