Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa
File: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (raw, json)
Hash identifier: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=
Subject key identifier: 55:AE:25:4F:87:5C:7A:06:FA:C0:0C:6E:E5:DE:A1:02:D6:74:B0:F7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 01942747EA5A9AABDC96A3EE67DFE8C9E38B
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 185.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ea:5a:9a:ab:dc:96:a3:ee:67:df:e8:c9:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55ae254f875c7a06fac00c6ee5dea102d674b0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:9c:94:d6:be:43:4a:b2:75:79:7f:48:4e:
94:08:80:16:6d:36:c0:25:f6:a2:72:55:ac:a6:78:
69:2c:71:0d:3e:0e:50:73:b3:e0:db:24:51:ad:32:
ff:04:f1:e1:90:e5:44:de:39:91:cd:9c:e3:db:b2:
46:2d:ec:99:4f:ec:9c:9b:5b:99:cc:08:ea:31:44:
c8:1f:4a:ee:02:0b:09:25:6d:3b:6f:0d:d0:b7:de:
ff:e9:99:73:eb:dc:8a:75:27:78:39:e5:da:61:8f:
c2:16:60:e1:49:3d:f0:8d:c3:b3:8a:b7:b7:8f:5b:
fc:59:f3:25:20:ab:a5:8f:75:f0:03:a6:89:2a:5a:
dc:c7:42:1d:5c:15:42:78:01:eb:84:3e:7f:be:69:
ce:b0:14:38:7d:93:ca:48:a9:31:45:b6:95:5a:88:
f7:66:ac:fb:e4:f6:66:8c:f6:16:80:e0:ac:65:21:
ef:19:f5:cf:a8:f1:be:36:db:29:cc:22:a1:70:bf:
0d:ea:b8:31:80:e9:e5:21:dd:ba:25:20:9f:52:f4:
64:ba:f3:99:97:32:fb:73:61:f9:b4:60:6b:1c:3a:
06:9c:95:48:99:54:de:ce:c8:cc:54:29:d5:24:f6:
63:3b:dd:cd:75:9c:43:78:8a:fb:01:33:4a:ec:28:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AE:25:4F:87:5C:7A:06:FA:C0:0C:6E:E5:DE:A1:02:D6:74:B0:F7
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e2:1e:e1:f7:ab:67:18:fb:db:45:ef:c3:08:41:c0:1c:4e:
7a:d3:e2:f4:95:47:52:ad:46:f9:38:8c:e9:48:aa:9c:7a:b4:
03:25:c2:20:8e:83:d5:ff:43:aa:8d:1d:20:ab:46:93:6c:ba:
03:6f:71:3a:cf:fa:7f:5c:62:33:b0:0f:4c:fc:90:33:85:39:
52:82:46:73:b9:3d:56:2e:90:c7:7a:e4:da:4d:3a:12:87:a9:
af:5f:a7:57:ed:0b:1a:2b:7a:e5:35:4b:42:0e:8a:f9:b6:3f:
91:d0:92:6d:bb:0e:61:e2:13:c5:b1:3b:83:d3:88:db:62:81:
f7:bf:b5:d3:a9:72:9f:1b:c5:3a:42:ee:d1:47:ed:e2:b1:90:
90:14:a4:cf:b2:ce:92:79:1e:3b:04:65:97:12:f3:d8:c8:d7:
b3:83:fb:df:25:b5:c5:99:38:77:3d:69:7a:bd:35:ca:ac:7f:
88:24:1d:fe:d6:a7:ea:f7:a8:c5:70:dd:17:f8:25:0d:c3:1a:
80:77:8a:43:7d:a2:e2:b0:3d:5f:8a:00:37:b6:49:14:72:c1:
50:62:88:1f:4b:eb:e8:ff:b3:96:ad:76:17:eb:bd:cf:92:87:
07:41:23:37:b3:9f:7f:24:4f:3d:02:00:8e:8d:f0:ff:96:b4:
48:44:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:51:41 2025 by rpki-client