Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa
File: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (raw, json)
Hash identifier: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=
Subject key identifier: 56:1F:C9:53:10:F4:17:8F:0D:6E:3C:98:45:C0:E1:5E:E1:B2:11:72
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019421B1F4C04D5CDF9C6FEFD5DDE5DA50B6
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 185.94.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:c0:4d:5c:df:9c:6f:ef:d5:dd:e5:da:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=561fc95310f4178f0d6e3c9845c0e15ee1b21172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:a3:53:d4:52:75:b0:27:11:ae:11:f4:7d:
8f:7f:0f:7f:47:78:7d:50:fd:83:e0:1c:f2:b6:eb:
7a:bc:8c:30:36:5a:c4:bd:ef:30:ef:96:cb:09:f2:
e0:e0:6e:44:0b:ae:0a:8d:08:82:00:79:f6:d2:6a:
12:e3:39:d2:84:5a:e3:58:69:f9:eb:b6:84:e5:eb:
c7:34:8b:a5:aa:02:14:e2:b6:de:41:78:53:33:96:
4e:32:77:4f:eb:4c:1b:3a:dc:38:7f:f2:b6:c1:32:
ae:4e:49:08:84:cc:6e:27:21:f4:4f:64:86:d5:fe:
2d:71:99:e2:8d:74:1d:12:6a:d6:d4:1c:a4:dc:4b:
af:c0:15:f7:a7:be:bc:73:33:45:75:50:03:cc:1c:
0e:94:5c:04:ec:0a:5a:53:d2:30:c7:c7:0b:ee:27:
a2:a2:ae:09:ef:d3:5e:cb:2b:a1:bc:cd:b3:5f:ca:
66:5f:2d:b8:d4:b2:3c:c2:51:e5:cc:c8:e1:3a:cd:
27:0f:70:26:23:52:fa:37:8b:41:24:f2:c2:7a:6a:
db:30:72:07:86:c0:f8:b3:5b:aa:f2:64:6d:1a:6e:
e3:9d:26:4c:83:78:51:74:19:fc:24:5b:d2:2f:2b:
e7:f1:c8:25:cc:6f:bf:a3:9e:e1:9b:b6:15:28:4e:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:C9:53:10:F4:17:8F:0D:6E:3C:98:45:C0:E1:5E:E1:B2:11:72
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.184.0/22
Signature Algorithm: sha256WithRSAEncryption
02:7e:98:e1:c3:0b:98:7e:4e:ca:e5:64:79:58:b6:86:24:b8:
21:c5:21:61:47:21:9a:81:58:01:0d:3d:b6:fa:39:d2:e0:14:
0c:5f:13:e6:29:12:8c:bb:6a:8f:c1:24:83:08:fd:6b:82:60:
6d:36:2d:7f:c5:32:a6:59:27:64:38:08:09:18:57:96:d4:46:
9f:5e:1e:c3:99:20:e7:7d:2e:81:6a:35:0f:db:51:ba:4e:19:
b8:78:6c:fe:b3:86:05:79:e5:05:fb:1d:64:04:85:8a:d2:1a:
08:8b:06:9d:36:f9:a5:fe:c8:11:5a:ac:4a:a9:b7:ae:19:83:
02:62:d3:7b:42:4f:c4:c2:a3:0f:f9:d1:27:e5:a7:73:ce:47:
73:bd:41:c5:95:67:05:36:64:8f:a0:c8:4a:67:78:9c:3e:36:
43:c2:fa:bf:2f:12:c6:95:65:cb:5e:93:c3:e1:07:e4:cf:87:
e6:67:dd:06:b0:93:df:de:5c:4a:07:d0:10:e7:8c:c4:5f:14:
ac:8d:0a:dd:fe:56:9c:a2:fb:4d:a9:ea:82:14:25:65:f2:f9:
39:d1:32:d7:0b:69:14:ed:f4:36:bd:9c:3c:7f:a0:d8:c7:66:
f1:d2:85:76:89:e9:9f:4d:5c:3e:a1:d5:b6:29:4a:de:57:7e:
77:98:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:53 2025 by rpki-client