Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa
File: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (raw, json)
Hash identifier: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=
Subject key identifier: BF:3E:05:0C:5D:A0:7C:69:79:38:50:4E:BF:FF:D3:8F:71:B3:78:A7
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8DC04B8C94578D17A338D274164A
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51486
IP address blocks: 85.14.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:c0:4b:8c:94:57:8d:17:a3:38:d2:74:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3e050c5da07c697938504ebfffd38f71b378a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:a4:ce:d9:f2:e2:6b:22:3e:ec:91:3b:44:
86:d4:a8:bf:34:b1:ab:58:a7:3d:04:5c:8e:cc:f6:
ad:a0:83:f9:6a:80:69:66:0f:9e:61:2d:64:27:0c:
45:f8:b8:fa:22:23:92:91:af:7e:70:76:7a:46:3d:
26:8a:03:03:36:ba:91:f5:5d:00:43:8f:be:ba:83:
d1:d5:9f:45:28:84:8e:7a:0c:b0:d2:c3:ae:e7:48:
ed:4b:b6:fc:e8:88:30:c3:45:23:14:60:d2:a4:5a:
99:55:34:d1:cd:76:42:46:b8:14:1e:ba:e6:32:27:
05:c2:3a:6e:06:35:f7:22:2e:d0:0f:64:78:dd:ef:
5d:ad:24:6b:e6:c4:65:84:10:c3:ef:b9:9d:cc:11:
fb:44:d5:f2:8a:96:f1:e6:cb:f2:7d:38:f6:45:62:
b6:0e:95:bf:83:fd:39:2c:e9:0b:4f:00:8a:03:43:
89:05:68:4a:f0:e7:5b:d9:55:09:be:ca:70:63:07:
de:52:aa:64:a4:1a:0d:d8:e9:0d:01:38:98:20:f7:
bd:55:09:ac:16:cb:2f:66:ce:99:d9:bc:51:ab:12:
fb:ac:42:81:39:84:c9:ef:9f:57:b2:91:0a:43:8e:
bd:59:e3:ad:02:d8:35:b0:d5:bc:5d:bf:8b:37:29:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:05:0C:5D:A0:7C:69:79:38:50:4E:BF:FF:D3:8F:71:B3:78:A7
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.18.0/24
Signature Algorithm: sha256WithRSAEncryption
98:eb:8a:6f:49:b1:a5:6d:98:19:d9:d1:1f:4b:3a:b5:f6:06:
7a:91:89:80:73:fc:b9:c2:84:bb:52:7c:66:30:0c:9e:9a:90:
1c:bf:14:fa:af:a8:4b:2b:d2:44:3b:fb:ee:86:0e:34:1c:85:
d1:be:46:45:fe:51:45:95:6e:8e:f7:50:2d:63:36:2f:a2:56:
fb:f4:19:33:09:aa:a6:ef:65:98:0e:02:25:13:37:f3:06:2f:
e9:82:6e:eb:fc:8a:33:a4:db:9d:24:5f:a3:32:3b:cc:70:d1:
85:95:91:99:18:f2:cd:d1:e9:19:34:2f:5a:90:df:80:3f:0c:
80:f2:05:96:e2:8e:20:8f:6e:78:9d:fa:a8:ed:7d:db:2f:ff:
6a:c6:7c:ca:ae:77:e4:c6:14:60:e2:28:92:e8:f7:10:6b:3d:
92:9d:f0:0e:da:34:86:e6:35:9b:f1:5c:36:28:6a:2b:52:ef:
23:cd:75:8c:12:90:b5:d8:74:c9:24:54:44:c5:21:c6:92:0c:
88:71:85:f7:7f:97:c6:81:37:d0:c7:8a:31:c6:66:1d:b5:53:
c0:e2:a7:23:05:f4:72:35:c0:aa:0d:ab:70:7b:ae:63:9e:6c:
c5:21:68:77:77:02:81:a9:91:e2:10:96:1b:dd:db:93:4a:2f:
09:d5:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:49 2025 by rpki-client