Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa
File: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (raw, json)
Hash identifier: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=
Subject key identifier: 56:F1:78:56:2E:05:C1:E1:C1:A0:5E:9F:C3:3B:D6:B2:A9:26:77:58
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40C80A54B45B1338623DC72656266
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54641
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0c:80:a5:4b:45:b1:33:86:23:dc:72:65:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f178562e05c1e1c1a05e9fc33bd6b2a9267758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:4e:97:ce:40:66:7a:90:d1:a6:9b:42:1e:
2f:95:df:6f:f7:ac:0e:2b:1d:30:a8:be:82:b4:29:
41:fd:bf:d7:d8:56:c1:bc:9d:f9:9e:a7:13:c7:dd:
81:02:24:dd:ca:dd:53:73:83:6e:30:1a:78:88:0d:
af:81:b8:3e:96:51:59:6a:18:88:63:4c:00:e6:2a:
d9:b0:f8:1b:0a:0b:fa:ea:54:da:9e:08:17:85:6d:
2c:cc:74:67:b0:4c:b0:5d:7b:3a:cd:12:03:df:2a:
b5:49:dc:5d:8c:4d:a3:a0:af:2e:60:75:34:c5:be:
90:f1:5a:5c:c8:8c:0f:e2:9f:1d:ea:7a:68:29:94:
b0:a5:63:f2:44:7b:31:f2:6e:d4:fb:cc:f4:85:ae:
c7:df:1b:96:0e:96:3f:36:b1:b7:40:26:e7:11:e5:
6f:e5:5e:e6:56:d1:45:4e:45:b3:c3:50:96:b5:18:
67:7d:b6:8a:5b:d6:9a:be:2d:72:8a:8f:d7:06:34:
7c:6d:cb:ff:23:c6:19:e5:4a:d1:0a:8d:8f:d8:08:
88:48:7f:55:b8:ff:54:d1:99:ea:c9:ed:4c:39:c8:
d6:1a:34:a5:db:44:98:93:9d:7c:69:c1:fd:f4:1b:
48:00:3f:96:70:bd:e8:55:05:3c:ea:ef:90:2d:05:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:78:56:2E:05:C1:E1:C1:A0:5E:9F:C3:3B:D6:B2:A9:26:77:58
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0f:9f:ab:ef:65:a3:dc:5a:75:c9:71:86:13:8b:8d:2c:19:
dd:5d:3d:d4:e6:4d:da:26:eb:01:2e:bc:54:e7:47:4d:d7:5e:
5f:ca:8f:34:41:e5:55:7b:3e:fd:53:f9:2c:f2:40:f8:18:40:
dc:0a:1d:cc:68:ba:eb:c9:ad:c0:c7:68:aa:7b:f9:81:0c:fe:
c0:3f:9b:ac:d8:b1:04:98:7b:15:e1:ab:04:6b:91:f4:76:9a:
94:00:98:46:39:70:91:8c:d4:86:1d:5c:a7:8a:88:50:07:80:
98:82:f1:dd:ac:28:7e:aa:01:6e:f9:38:3c:b9:c9:38:5e:33:
80:0d:80:9f:92:43:a5:ad:ab:25:30:03:e2:de:2b:e3:76:c6:
42:2b:a3:2f:4e:35:20:b9:e1:d8:e7:cd:23:a2:18:32:45:b0:
77:f3:96:e2:ed:18:13:85:92:d6:15:81:95:ec:56:df:4c:50:
96:63:fa:32:cb:dc:f8:28:f7:3f:c6:d7:7b:9b:19:de:ff:b8:
29:52:8b:77:cc:26:73:3e:19:3a:a1:66:8e:12:3b:f5:7c:31:
e5:06:ce:d7:9f:95:10:a6:df:23:34:61:4e:46:4b:c8:82:41:
d0:02:39:b0:6e:21:76:64:8d:d8:db:2b:45:23:1f:9b:e1:9e:
6b:f6:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:46:04 2025 by rpki-client