Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/VrkSL_uLOzBJaQboxgGZhD5yRHs.roa
File: VrkSL_uLOzBJaQboxgGZhD5yRHs.roa (raw, json)
Hash identifier: uhelo2jKYMgJm7cPXMljK9cyP0e88kVGFreD1+QpSuE=
Subject key identifier: 56:B9:12:2F:FB:8B:3B:30:49:69:06:E8:C6:01:99:84:3E:72:44:7B
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0196A99F98E4C72DEAA9AE772772E817E56B
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/VrkSL_uLOzBJaQboxgGZhD5yRHs.roa
Signing time: Wed 07 May 2025 07:22:10 +0000
ROA not before: Wed 07 May 2025 07:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 185.49.105.0/24 maxlen: 24
185.49.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:9f:98:e4:c7:2d:ea:a9:ae:77:27:72:e8:17:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: May 7 07:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b9122ffb8b3b30496906e8c60199843e72447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:fb:d7:25:39:6e:69:30:b1:52:cd:71:4a:
69:27:fb:fa:6c:b8:69:b7:af:2b:34:db:f0:68:84:
df:4e:c8:a2:63:43:c6:9e:47:f9:c4:b0:18:27:8e:
5a:4b:b7:41:e2:b1:67:c9:fe:e8:ae:13:fc:00:12:
e8:00:58:0d:36:c4:10:9e:ce:f9:32:51:df:46:6c:
81:81:1b:1e:74:04:6b:ca:ba:bf:ab:a8:24:a7:7e:
22:0a:d7:b7:c7:10:5c:94:83:ca:05:78:14:a6:01:
e0:b5:7d:33:a7:0b:b1:4d:ec:6f:3e:04:ad:9f:aa:
67:48:67:db:65:99:f4:bc:d0:77:2a:91:36:5b:08:
17:c6:f1:9a:6b:0d:8c:c1:af:c7:c6:d5:6d:28:d5:
54:de:39:0f:98:4f:fb:28:75:d1:55:80:35:f0:8e:
12:24:c9:d1:d1:c3:a6:04:67:ec:27:a2:97:c7:53:
86:57:a1:1a:0c:8c:52:af:42:7b:f1:2e:5e:5e:27:
e6:11:66:8a:3e:28:33:42:20:0c:8d:7f:e1:e0:a7:
61:ab:b4:11:a7:44:1d:af:eb:3c:de:85:b3:ba:63:
af:bf:82:7c:09:92:48:e6:70:1c:cd:c6:ae:2c:48:
d9:0f:9f:26:5b:88:9e:06:c1:78:83:7f:eb:9d:fa:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:12:2F:FB:8B:3B:30:49:69:06:E8:C6:01:99:84:3E:72:44:7B
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/VrkSL_uLOzBJaQboxgGZhD5yRHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0-185.49.106.255
Signature Algorithm: sha256WithRSAEncryption
8f:c9:5c:e8:a1:64:b7:25:44:ba:5c:20:f2:65:3b:80:38:19:
29:f6:02:d0:61:76:d8:17:fe:d5:64:86:57:25:86:d4:e4:db:
ad:47:41:e8:d5:8b:e7:42:12:84:47:d7:b3:81:ad:e3:11:0a:
dc:cf:67:db:7c:ac:74:f3:dd:f0:46:7f:19:dc:11:4c:0b:e1:
3c:d6:8b:84:f6:65:24:13:82:3a:2c:a3:ab:4e:3a:96:a6:e3:
6e:6c:44:15:36:b8:ce:4a:0d:f3:f9:6e:03:78:24:be:d5:65:
18:94:09:a0:ed:a5:06:d1:5e:71:7e:32:22:74:19:42:bd:1d:
90:37:78:a1:da:79:99:bb:a9:4f:8e:eb:e4:0e:ef:a0:db:40:
f8:47:2e:59:dd:3d:0e:b5:2d:3f:22:97:c5:1b:ba:37:b6:17:
ef:48:52:f0:35:65:27:28:5f:b1:67:40:ad:fd:08:d5:73:ba:
f8:88:66:8c:0f:18:6a:46:38:08:d3:da:c7:50:ff:28:4a:0e:
9a:07:29:12:40:61:10:1f:dd:e7:59:69:87:fa:ad:b1:37:57:
b6:5c:fa:9a:ba:a1:4c:b6:80:6a:14:9c:1d:8e:85:4d:3e:90:
ae:97:f1:16:a6:7c:f3:0d:fe:21:0a:88:9b:3b:05:6f:e0:b1:
19:26:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:32 2025 by rpki-client