Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/VIlea1HGjGCn_MVKwJV926-pJjE.roa
File: VIlea1HGjGCn_MVKwJV926-pJjE.roa (raw, json)
Hash identifier: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=
Subject key identifier: 54:89:5E:6B:51:C6:8C:60:A7:FC:C5:4A:C0:95:7D:DB:AF:A9:26:31
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019425FCC4ECB65703E4F24786180783245C
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/VIlea1HGjGCn_MVKwJV926-pJjE.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20495
IP address blocks: 185.184.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c4:ec:b6:57:03:e4:f2:47:86:18:07:83:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54895e6b51c68c60a7fcc54ac0957ddbafa92631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:1f:e1:3d:24:5d:35:f0:7c:79:22:68:e7:
db:77:05:b8:e3:36:f2:06:72:6f:52:4b:a8:ea:99:
7f:3f:03:d7:93:7d:cc:23:5d:d1:59:f5:e3:f8:c3:
31:c5:c8:20:2e:78:21:33:62:86:0b:e6:0e:80:dd:
fe:0c:70:d6:be:80:05:04:4f:82:70:0e:c3:b4:e8:
50:ed:b4:73:86:e6:7a:07:ea:4e:a7:2f:b8:7d:e2:
01:8b:a0:8b:89:cd:aa:b9:c4:58:c9:13:01:52:12:
56:ec:cf:e5:ab:19:ce:5f:ab:ff:ad:a5:0c:b2:69:
f6:c2:75:39:2f:fb:99:35:61:48:2d:0b:1c:15:fe:
07:0b:40:9a:61:27:70:83:66:b2:3c:82:66:45:c0:
c4:21:eb:59:b4:b9:f0:d9:14:f8:c0:bd:5e:83:bc:
2b:d5:07:fd:fc:9d:99:9c:ba:01:63:35:24:59:b2:
2a:c1:3e:02:01:7d:cc:13:eb:49:d2:71:4a:82:b3:
5b:8d:e5:fb:d2:be:1e:11:d9:1a:7b:d1:69:79:95:
5d:de:c0:8c:a6:a8:9c:4a:55:3d:e7:27:3b:43:18:
92:be:d8:fe:c6:a8:c7:7d:f5:9c:bc:66:f0:83:83:
b2:b0:32:24:1d:39:db:c6:83:55:f2:d0:9d:ff:c3:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:5E:6B:51:C6:8C:60:A7:FC:C5:4A:C0:95:7D:DB:AF:A9:26:31
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/VIlea1HGjGCn_MVKwJV926-pJjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.108.0/22
Signature Algorithm: sha256WithRSAEncryption
24:bb:83:23:df:2f:9b:85:76:11:15:c5:3c:47:79:46:2e:fc:
92:90:93:4a:44:21:4f:0a:2f:c6:79:fc:18:9a:5c:9d:37:e3:
f1:74:92:ab:60:2b:5b:13:f0:b3:46:0b:f1:a0:f0:04:e2:80:
9f:87:d6:09:c6:91:1c:0e:8c:b3:f5:25:bc:85:00:2c:21:e4:
db:12:6e:5e:10:2a:9c:5c:87:b0:b8:c9:6c:81:69:23:a1:5d:
41:55:43:db:6c:3d:e8:c5:33:b3:7a:75:19:d3:97:18:42:f4:
ef:23:87:6e:ca:f6:e8:b6:b1:6b:bc:26:1d:82:b8:5d:2e:e4:
bb:87:4c:75:51:08:2e:cb:0d:00:6b:b1:36:18:ee:8f:94:88:
de:0c:4c:1a:8e:5e:96:5d:fa:60:d4:0b:86:22:ec:3f:70:8e:
f0:76:da:ce:a1:bc:e4:d4:74:d8:67:a7:bd:f4:55:ba:b6:6b:
4b:68:bc:02:89:f0:0c:f8:08:1b:c7:5f:46:28:f3:4c:64:8f:
56:44:b2:98:31:17:89:7c:f4:54:0e:40:8b:b1:32:97:d4:45:
49:ff:89:95:31:8b:a2:8a:4c:34:a0:da:96:c9:32:56:24:04:
4d:95:0c:36:5f:38:d9:34:2b:fb:dc:9b:ca:f4:85:fe:cf:85:
a7:37:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:57 2025 by rpki-client