Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa
File: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (raw, json)
Hash identifier: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=
Subject key identifier: BC:A5:E0:78:7C:72:7F:D2:23:F0:F6:C1:B7:00:16:93:83:E4:48:D3
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019661E30643E50DEA95C1AF92E4786E8B2E
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa
Signing time: Wed 23 Apr 2025 09:03:10 +0000
ROA not before: Wed 23 Apr 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211343
IP address blocks: 185.53.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:e3:06:43:e5:0d:ea:95:c1:af:92:e4:78:6e:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Apr 23 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bca5e0787c727fd223f0f6c1b700169383e448d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:67:c6:73:e2:1f:0f:55:ff:d3:d9:77:fe:
12:71:e5:74:79:dd:fc:b3:b1:6f:9e:df:f1:17:b8:
f1:9d:9e:82:52:44:11:6e:d0:55:1d:95:84:37:01:
92:4e:d5:1e:5b:97:1d:9e:c3:d7:04:05:29:0d:4c:
b0:b4:4b:50:0e:15:fe:64:b4:ad:24:0d:a3:ba:b1:
40:50:48:54:f6:c8:5e:cc:34:7c:e7:e9:36:d5:88:
5d:29:b9:93:a6:80:a2:53:7c:63:cc:23:32:94:28:
00:2e:c6:cc:68:e0:26:fa:2d:a4:e7:22:df:c7:f3:
35:81:9e:7f:54:99:92:15:22:a1:72:91:eb:2d:e4:
bd:1c:b4:26:69:82:20:f7:12:6b:0e:ea:f4:8b:33:
7f:4d:64:b0:8c:07:45:43:85:82:73:08:47:dd:c9:
b2:d9:80:22:05:08:0d:94:be:7f:4b:5a:94:66:35:
32:82:09:03:6e:75:d8:a2:d4:d4:87:c4:14:47:44:
1b:1f:76:2a:74:02:4d:2b:ee:e1:ba:06:c2:42:ed:
1d:74:15:c3:25:43:f5:7e:7b:a3:ad:e6:6b:05:b3:
ac:89:7f:b6:70:fc:b7:0e:cd:25:52:bc:28:e4:e8:
ac:38:b7:fb:2b:64:4f:92:31:9d:61:eb:c3:90:83:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:E0:78:7C:72:7F:D2:23:F0:F6:C1:B7:00:16:93:83:E4:48:D3
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.106.0/24
Signature Algorithm: sha256WithRSAEncryption
35:12:9c:4d:13:3e:4d:19:a0:75:86:e8:1a:03:48:36:36:ff:
57:30:7c:35:f7:d1:b6:ef:70:a7:a9:09:37:e4:99:a5:d2:17:
7d:54:18:01:6d:21:45:c2:fe:c6:61:43:cf:fc:aa:d5:56:a9:
97:20:40:43:8a:21:42:a4:9f:e0:0d:40:c5:14:3e:dd:b5:43:
e4:90:fe:2c:5e:c6:ea:c8:6d:9b:dc:1a:6e:25:94:f8:d3:94:
e5:47:68:f0:c8:48:e6:15:62:f3:4b:af:5b:57:f1:2e:e0:e5:
3a:a8:cd:6a:36:3a:25:f8:c6:f2:5a:f4:6c:8d:c8:1e:2e:75:
2a:cd:bf:25:c2:2b:c0:83:ff:45:7f:6b:46:2b:20:fe:6e:17:
de:68:3a:ed:a8:69:b4:2d:ea:d9:c5:cd:33:6f:75:5c:e8:36:
a2:a9:6f:b5:c1:9f:30:b7:57:9e:df:be:77:9c:42:d6:38:52:
14:2b:3e:0c:c7:1b:e6:16:b6:4f:c9:b4:b6:9d:6c:a0:a6:33:
21:dd:8c:d8:14:dd:2e:bd:9e:76:d6:c8:93:d3:ed:44:a1:53:
51:73:a0:4f:ec:64:98:f1:13:6c:42:2f:0e:80:95:b5:f3:ea:
21:9c:2b:8b:1f:bd:0e:74:2b:ab:b3:ce:85:2d:3f:b3:45:be:
b6:3d:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:02:37 2025 by rpki-client