Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa
File: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (raw, json)
Hash identifier: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=
Subject key identifier: F9:51:8C:5C:C3:15:D8:2A:B2:D3:74:75:64:8C:C8:4F:CC:E3:48:7B
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019428252130D016C606C42285984C2D0820
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa
Signing time: Thu 02 Jan 2025 17:51:49 +0000
ROA not before: Thu 02 Jan 2025 17:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202675
IP address blocks: 185.221.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:21:30:d0:16:c6:06:c4:22:85:98:4c:2d:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Jan 2 17:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9518c5cc315d82ab2d37475648cc84fcce3487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:50:99:69:5e:09:7e:18:1b:bc:4b:50:d6:
56:73:a4:40:0e:cd:63:51:c4:65:8e:1d:fb:9d:7a:
e8:4b:19:23:dc:ef:70:3a:4b:13:16:55:29:2f:e4:
09:63:b8:db:fa:df:13:bb:88:35:50:e2:79:9d:04:
51:0b:a5:72:65:73:bc:8a:29:6c:6e:0e:92:78:0f:
ab:39:bd:3f:36:e5:74:23:ec:a6:9d:87:b0:90:bb:
b2:c9:90:d1:30:55:b7:8b:04:9a:03:9a:71:9a:cb:
53:1b:34:9c:eb:f5:cf:93:0a:6c:61:75:b4:68:bf:
f8:74:bf:50:b4:9c:8c:f8:60:bc:60:fc:a1:45:29:
66:4c:4c:20:83:b3:a0:79:8a:d5:27:05:37:84:21:
3d:83:f6:b0:de:bb:e0:d8:df:05:07:40:d2:64:92:
1f:62:c4:01:94:54:4c:ff:3e:4b:d7:06:16:8f:55:
7a:3f:e5:7c:e4:fa:15:59:0f:04:ca:12:01:53:9b:
64:7f:4d:da:b5:1f:a9:2c:56:b7:2c:66:c9:5b:f1:
f7:41:76:07:52:2c:51:34:4d:78:7b:3a:96:51:93:
2e:5f:f6:7d:78:08:50:8f:cb:5d:ad:76:e4:89:ab:
b6:11:9f:ba:c6:63:a6:4c:b2:b0:ea:9e:67:1d:a6:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:8C:5C:C3:15:D8:2A:B2:D3:74:75:64:8C:C8:4F:CC:E3:48:7B
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
33:82:26:d6:89:d0:1a:60:43:01:81:28:4f:76:c6:28:78:ac:
e9:f7:09:29:25:77:ac:0a:26:19:fb:2d:23:d5:ef:a3:b5:0c:
0d:36:87:1a:29:a0:fe:08:0e:65:2b:de:6f:54:e2:34:5d:36:
99:e1:8c:eb:06:29:59:bb:ab:78:e3:f2:9a:d4:d9:1a:fc:13:
60:2f:24:ee:d2:28:ab:9b:f7:a3:16:40:19:57:95:31:4a:4a:
b6:e3:e0:b6:ae:3c:e5:b2:08:4f:05:f9:23:88:ea:04:fd:9e:
fc:e2:2e:ed:64:41:95:5d:fd:f7:ce:b7:95:45:7c:e4:2a:d7:
71:6f:b7:0e:37:20:0e:b8:f6:3c:3f:e9:b8:7e:6f:07:0b:25:
29:2e:b0:08:ec:a8:a3:da:48:60:af:73:90:6c:8c:ec:b3:29:
5e:c7:19:ce:ca:4f:f7:ba:d7:2b:d0:c6:48:7e:d3:79:d9:5d:
25:b2:9e:e3:b8:87:1e:63:65:84:7f:0d:dc:46:5c:73:e1:99:
22:e3:14:95:f0:45:1b:d3:b2:a8:22:2e:49:c0:92:bc:ea:24:
19:51:e3:7a:75:f7:44:7f:87:f4:fd:f7:5f:9f:f9:f7:58:e9:
40:f3:fe:f1:3e:e0:8c:1b:5e:97:39:b7:8e:66:39:dd:51:e1:
0c:17:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:56:24 2025 by rpki-client