Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa
File: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (raw, json)
Hash identifier: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=
Subject key identifier: BE:DE:05:81:F3:D1:AD:69:7B:67:FC:8B:8E:86:59:1C:46:17:F5:7F
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 019526069F05C62FCCE95F1948B3A7FA6921
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa
Signing time: Fri 21 Feb 2025 01:02:02 +0000
ROA not before: Fri 21 Feb 2025 01:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 194.48.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:26:06:9f:05:c6:2f:cc:e9:5f:19:48:b3:a7:fa:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Feb 21 01:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bede0581f3d1ad697b67fc8b8e86591c4617f57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:e1:f7:c8:fa:22:df:44:8f:bb:02:51:75:
eb:a0:91:61:14:d7:fa:1b:7c:85:7e:48:e7:14:9e:
37:f2:4c:a4:19:9f:c9:80:03:bd:d4:46:93:28:ca:
41:79:b2:a3:88:31:09:1b:2e:3d:0a:49:62:51:e0:
ec:93:03:25:4c:09:5a:b0:2f:c2:40:c6:78:41:f2:
a9:ad:81:8c:aa:b5:3c:ad:4d:65:f8:70:25:c9:2e:
e1:50:78:af:b4:f5:24:8c:60:3f:29:c1:bc:28:fd:
fc:5c:5e:83:5e:8c:c3:78:13:51:f9:eb:f7:92:96:
5d:76:90:a8:cc:e5:21:8d:36:4e:3f:8e:73:9f:8f:
f5:75:b9:d2:6a:79:ce:92:b7:fb:f0:e2:b0:9a:b6:
cb:a0:ab:5d:8e:55:ca:6d:a9:56:f5:7b:63:77:f1:
c4:70:26:c0:67:18:a9:03:e2:58:9e:ad:20:14:dd:
02:75:25:8b:56:5c:23:60:56:d9:3a:e9:22:20:e4:
42:e7:c4:da:17:dd:e7:d2:bb:d0:bc:f2:f5:d3:e0:
40:9c:8f:ff:e2:e4:4b:ba:dd:ec:a5:82:bc:c4:1a:
76:6d:46:87:25:d1:12:73:e5:9a:3a:ab:74:5c:15:
5f:e1:df:cf:f7:91:e1:2f:38:9e:c9:8b:28:e2:b7:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:05:81:F3:D1:AD:69:7B:67:FC:8B:8E:86:59:1C:46:17:F5:7F
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:93:e3:fb:5f:0d:9c:38:bb:0b:9c:0b:42:af:c0:a2:16:b1:
4a:14:01:84:7e:fa:56:6c:00:7b:42:d9:87:59:27:f6:ce:e9:
11:d7:76:0f:76:d8:91:35:76:77:59:55:b1:66:0c:c4:ff:29:
57:71:ce:a5:25:36:c1:cf:92:fc:38:10:72:0e:ed:0e:b9:20:
52:15:a6:42:8c:6f:bb:81:9d:1a:ab:15:02:e4:19:10:1e:ed:
c3:55:ec:b5:98:2f:cc:b8:bd:7d:b3:f3:67:3f:f5:e3:e7:7a:
46:09:65:b0:2b:05:87:61:c4:18:cd:81:a8:6f:1f:f5:2b:96:
44:e2:b8:60:ce:ff:9a:0f:0d:1a:cf:d7:1f:99:a9:e6:d4:f2:
87:9a:da:54:51:a7:42:49:c5:ee:db:06:8d:9c:d1:71:b5:c3:
f0:b8:28:2f:6f:6b:0a:9a:f4:eb:02:90:c1:13:dd:fd:51:66:
1f:0b:87:0d:8c:23:1d:43:5f:60:3a:4a:e1:75:37:a7:f0:6a:
d1:62:4a:30:24:66:22:0c:38:f4:3f:04:6e:e8:9e:26:c5:58:
86:73:2c:c5:47:8f:fa:7c:82:09:06:dd:eb:72:6d:4f:cc:94:
c0:f4:18:9d:e1:74:f2:1c:c4:48:25:ca:63:74:cf:79:75:0d:
37:22:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:06 2025 by rpki-client