Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vBlQ_RHf2kj7VvKUCJfVyT1tU2k.roa
File: vBlQ_RHf2kj7VvKUCJfVyT1tU2k.roa (raw, json)
Hash identifier: kOH7LUidVJR5SmJ2mtNz1pLlCqQN3kdi3r/H3IqUoA4=
Subject key identifier: BC:19:50:FD:11:DF:DA:48:FB:56:F2:94:08:97:D5:C9:3D:6D:53:69
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFA1F17B57D40DA036684DA74DB7C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vBlQ_RHf2kj7VvKUCJfVyT1tU2k.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41280
IP address blocks: 85.187.244.0/22 maxlen: 22
151.237.24.0/24 maxlen: 24
151.237.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fa:1f:17:b5:7d:40:da:03:66:84:da:74:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1950fd11dfda48fb56f2940897d5c93d6d5369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:91:47:f7:2f:bd:37:e4:24:8d:e4:f5:70:
01:f0:3d:15:b7:6f:5a:64:3d:a5:7d:c8:8d:e2:6c:
e0:37:eb:54:dc:21:31:9d:ab:07:25:f8:0c:16:65:
e8:7f:cf:df:c1:7a:38:48:92:68:fb:7d:0a:22:ce:
ea:ff:26:99:4b:98:45:bb:16:c1:ab:23:55:df:6f:
ba:96:6b:46:7a:a1:e2:b4:cc:4f:b3:80:9b:6d:c1:
47:48:10:1d:8f:11:b1:94:b4:0f:50:f3:23:8e:ab:
24:64:7f:79:6d:8a:9f:43:47:63:2a:43:e8:9b:26:
2e:8c:16:d6:c3:aa:1f:06:ce:0b:18:28:e1:2a:e8:
41:1b:27:59:80:b8:41:5a:a5:b8:f1:2c:ab:f1:f9:
60:52:73:20:74:9c:19:71:6a:4d:3f:62:1c:98:a3:
5c:c4:be:2f:5b:c4:df:55:4c:3e:2b:7e:5c:cd:f9:
b2:d5:df:6d:6f:4f:75:d6:b4:da:ad:cd:3f:9b:d0:
6f:42:5a:b1:83:f5:fd:49:c2:f4:d0:2d:5f:51:b6:
bf:04:90:60:89:27:0c:91:9c:46:27:89:6e:55:bf:
bb:78:e0:6f:18:37:d6:2a:0e:55:4b:ea:4f:86:8e:
8c:b4:61:d3:62:88:2b:88:83:56:f0:36:56:32:d2:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:50:FD:11:DF:DA:48:FB:56:F2:94:08:97:D5:C9:3D:6D:53:69
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vBlQ_RHf2kj7VvKUCJfVyT1tU2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.244.0/22
151.237.24.0/24
151.237.26.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fa:b6:e3:96:68:1e:7f:75:5a:69:98:9e:3a:b7:59:52:37:
85:a4:59:6d:c3:45:a8:ba:1f:83:ee:b5:ed:72:f5:22:c4:a5:
c3:ac:96:76:d5:4e:94:3b:eb:99:dd:84:9e:d5:3d:7a:a4:e2:
e0:3b:75:3a:af:9b:19:83:68:d5:34:f6:4f:dc:dc:69:3d:55:
d8:c7:48:87:aa:00:92:70:99:00:00:2a:54:f8:0e:d7:90:92:
fa:0f:12:e2:00:3a:45:bd:5b:b9:53:ad:3f:ff:5a:7b:2f:48:
9a:8f:b0:92:e4:0e:01:f1:78:e6:6f:5a:a2:dc:ba:31:de:2f:
88:5d:21:fa:2c:ba:cb:af:5c:87:38:19:73:0f:a4:3d:51:ec:
09:e7:ac:65:b3:78:1e:29:f4:e3:0e:66:28:65:22:14:d0:69:
34:46:ab:98:7d:0d:da:ed:61:6f:2c:dc:a7:b2:8c:f1:f2:4d:
65:39:4a:7e:5d:e7:84:d5:2e:82:8b:9b:47:d2:62:de:cd:f0:
3a:37:5c:ed:d8:f6:9c:48:a9:c1:23:c7:ec:7e:a8:e5:25:b7:
cd:a1:c3:ed:0a:46:6c:e2:f3:b7:95:13:7d:92:ec:3e:55:a9:
8f:69:4a:c8:96:b0:7e:de:e2:e2:66:be:95:4d:95:9f:ef:64:
ab:65:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:51:42 2025 by rpki-client