Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/VjB61y70CykGJrI1joYA_LZs7BQ.roa
File: VjB61y70CykGJrI1joYA_LZs7BQ.roa (raw, json)
Hash identifier: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=
Subject key identifier: 56:30:7A:D7:2E:F4:0B:29:06:26:B2:35:8E:86:00:FC:B6:6C:EC:14
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0194228E344AA2ADC7BACE477B73FF26CB10
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/VjB61y70CykGJrI1joYA_LZs7BQ.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203408
IP address blocks: 185.237.160.0/24 maxlen: 24
185.237.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:34:4a:a2:ad:c7:ba:ce:47:7b:73:ff:26:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56307ad72ef40b290626b2358e8600fcb66cec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:45:c4:f2:1b:28:f8:e0:0f:83:d4:7d:9a:
e6:9b:98:68:ff:17:3c:59:5b:7f:9e:2b:2e:dd:70:
22:dc:dc:78:be:6e:97:1c:b4:78:e0:31:72:91:b3:
96:58:8b:e6:c5:bb:db:aa:62:1b:68:e5:9c:c3:11:
08:80:b8:73:c9:d7:6f:b9:7b:d3:43:c7:5d:c1:b0:
94:65:e1:ea:a8:b5:ab:31:de:8f:97:e8:76:33:a9:
5b:9a:2c:10:82:ab:c8:b0:76:22:6a:e8:6c:22:9f:
7a:19:2b:8d:fc:f0:e8:2f:fc:d1:2e:c6:c7:7d:4b:
98:41:dd:17:ae:fa:a1:5d:27:a7:4e:5b:8c:0d:ef:
25:9b:92:2b:f7:da:5b:be:64:94:7e:8a:73:61:a4:
b6:11:6f:f4:e9:d5:dc:8e:e4:14:bc:21:07:70:8d:
05:bd:0b:c2:c3:a6:1a:f1:ee:c1:96:d0:a8:65:e6:
f7:4f:e8:35:2e:2e:4d:ee:e0:7d:76:9c:de:b2:3a:
de:1b:9d:5b:4f:51:c4:43:b6:c9:67:f4:bf:31:1e:
55:2c:32:12:31:30:67:30:8a:81:46:a6:2f:f8:69:
3e:6e:0f:97:b3:6e:28:f2:1b:1b:cf:d9:1c:0a:6b:
37:be:04:24:36:e1:b1:ca:ec:b1:9d:e4:ed:eb:63:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:7A:D7:2E:F4:0B:29:06:26:B2:35:8E:86:00:FC:B6:6C:EC:14
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/VjB61y70CykGJrI1joYA_LZs7BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.160.0/23
Signature Algorithm: sha256WithRSAEncryption
af:a9:91:8e:a5:ab:ab:45:4c:ec:56:95:1b:cb:aa:4d:c0:a5:
41:01:f0:69:c1:33:c6:7e:b1:eb:cd:be:2b:b2:a9:e7:6e:77:
2a:ff:f8:35:1f:ab:78:f8:9f:e2:fd:01:57:ba:ac:79:94:51:
4e:a7:d1:a2:1e:89:4d:b5:d3:48:86:26:02:63:69:79:ce:30:
ea:24:11:0a:43:1a:0c:9c:6f:a2:a8:af:18:ba:1f:c6:e0:6d:
3c:3d:6d:01:86:c9:ab:29:89:ff:f6:bf:b3:7f:7d:36:b5:62:
f6:9b:9c:31:83:17:c5:f1:92:dc:13:4f:8c:fb:87:6c:08:8b:
c7:d1:cc:45:37:25:e4:51:46:16:ee:27:ab:4f:c8:cc:d0:b8:
1d:bd:ec:a6:27:b8:80:db:4d:b5:9d:87:6f:4c:b4:ee:af:eb:
ea:64:7e:69:c6:59:33:f0:05:f1:03:d5:a8:3d:e0:cc:65:d7:
9f:4d:a1:b7:63:99:b7:0e:64:b2:de:7b:74:35:47:9f:df:98:
41:a5:84:62:63:d3:a7:57:1c:b6:e1:19:a3:1e:64:03:30:6d:
57:de:b3:e8:4c:f8:de:d0:7f:eb:c6:e1:ee:0e:5a:66:90:f0:
5e:83:9a:0f:d8:c3:13:c0:00:b3:9b:71:22:19:5b:c9:fc:35:
cf:78:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:18 2025 by rpki-client