Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/VHi9vxpSG4tYfENJTcecEKHCVRo.roa
File: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (raw, json)
Hash identifier: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=
Subject key identifier: 54:78:BD:BF:1A:52:1B:8B:58:7C:43:49:4D:C7:9C:10:A1:C2:55:1A
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 01941F8C6BB42C3FB976263D2DCC315E0D6B
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/VHi9vxpSG4tYfENJTcecEKHCVRo.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49079
IP address blocks: 185.131.20.0/22 maxlen: 24
2a03:a020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:b4:2c:3f:b9:76:26:3d:2d:cc:31:5e:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5478bdbf1a521b8b587c43494dc79c10a1c2551a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:bc:50:58:25:10:e3:28:61:9a:56:21:d6:
06:90:06:9c:28:2c:4d:19:ef:a6:1a:8f:89:53:42:
e5:de:df:c0:e4:54:a0:ef:ce:5b:b9:a5:b8:88:28:
c2:ea:ca:73:27:10:00:93:65:6c:9f:17:a2:54:07:
b0:89:cf:b1:e8:bf:89:61:e6:a8:22:f3:58:86:a6:
fb:7e:01:f6:ee:23:a3:48:50:4e:48:af:76:b7:d4:
d4:cb:bf:de:01:45:47:b1:61:32:00:db:f2:61:62:
2f:e5:d3:50:79:79:a9:d3:ce:25:20:7b:b7:6b:d4:
18:60:b3:19:17:1d:9f:8f:19:00:bb:e0:e3:de:92:
c1:68:4c:83:43:f7:aa:48:50:0f:4c:2c:7f:86:65:
1d:0b:79:2a:08:90:c6:f3:66:c7:08:b0:58:d9:6c:
56:29:5d:e7:98:8d:e5:05:ba:70:cb:b6:b2:81:5a:
39:85:0c:db:c5:e3:d1:92:ac:92:3a:8b:65:1c:1b:
90:bd:45:70:af:fc:b5:b7:bd:10:5f:8b:e1:f0:bc:
3c:02:75:5e:ff:aa:dc:5c:c8:81:5f:3f:10:4e:ca:
27:c9:6d:63:82:46:de:5d:31:c3:29:6f:b5:86:55:
a3:03:88:4e:1f:f8:88:23:be:8d:43:6f:9c:b4:22:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:78:BD:BF:1A:52:1B:8B:58:7C:43:49:4D:C7:9C:10:A1:C2:55:1A
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/VHi9vxpSG4tYfENJTcecEKHCVRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.20.0/22
IPv6:
2a03:a020::/32
Signature Algorithm: sha256WithRSAEncryption
51:3f:18:80:3f:f0:d0:72:60:b6:c6:bb:fb:40:ba:68:a5:61:
14:9e:d4:52:2b:e6:3e:a3:73:3d:71:17:9a:70:39:15:47:ac:
83:94:20:e7:eb:39:7d:a1:7a:02:a8:6f:2a:e3:7b:cb:9d:00:
39:8e:9c:08:c8:c2:99:56:d9:c1:87:d8:7e:99:d3:91:25:7b:
06:73:05:24:28:ba:ea:93:1b:63:27:eb:97:e2:9f:ff:4b:01:
cc:01:32:7d:e5:99:02:d9:2c:0b:14:97:1a:be:f2:88:85:fc:
c2:db:74:ed:12:44:30:12:74:0d:9f:c4:ff:8d:6a:13:94:d0:
a9:3f:bf:5e:22:e0:7f:2a:45:40:57:0f:c0:e9:a0:1c:69:e9:
7d:b2:d9:9e:c5:af:58:fc:d1:f7:63:e5:3a:00:50:c3:ef:e2:
03:e3:bb:70:e3:bb:42:61:24:6c:b6:c0:d5:8d:47:5e:77:d2:
d2:3b:65:39:32:ca:8c:4e:c6:c6:0e:30:63:c3:48:09:c0:a5:
7c:3a:ac:2b:18:c5:01:ac:ed:02:65:d3:6e:dd:b9:2c:84:fc:
8d:e1:15:22:03:bc:f6:d7:c7:f5:24:fe:0b:c5:ef:a2:c2:24:
6a:c1:52:bb:34:e2:d9:a6:06:f3:8a:d3:59:fd:d7:7a:1d:4c:
b6:1d:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:13:39 2025 by rpki-client