Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/va7G1Etlo6KFOzv3RXEcOofD7SM.roa
File: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (raw, json)
Hash identifier: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=
Subject key identifier: BD:AE:C6:D4:4B:65:A3:A2:85:3B:3B:F7:45:71:1C:3A:87:C3:ED:23
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01963EA1C15DA0309FAE38758B74BBF8945F
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/va7G1Etlo6KFOzv3RXEcOofD7SM.roa
Signing time: Wed 16 Apr 2025 12:45:10 +0000
ROA not before: Wed 16 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29134
IP address blocks: 185.65.220.0/22 maxlen: 24
195.181.248.0/22 maxlen: 24
212.57.32.0/21 maxlen: 24
2a00:1e40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:a1:c1:5d:a0:30:9f:ae:38:75:8b:74:bb:f8:94:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Apr 16 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdaec6d44b65a3a2853b3bf745711c3a87c3ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:e0:cb:f0:8d:b6:12:e7:e4:64:25:6d:15:
41:b3:4e:d1:d2:2e:21:f0:5e:24:62:f5:4b:c9:ab:
61:52:67:6a:f6:43:80:0d:ef:89:ee:55:42:be:98:
77:a4:d1:e5:e1:93:ea:8b:72:17:99:3d:d6:e2:df:
57:54:88:bb:e8:52:11:77:2b:5b:da:bc:2f:1d:5b:
09:a1:57:87:3d:22:2e:26:c0:74:cc:8f:92:13:26:
46:72:b4:b0:5a:e4:c8:2e:26:67:fc:e5:95:76:ce:
a7:d4:0c:81:4e:66:0f:23:39:10:bd:ba:90:a7:d9:
a5:47:e6:3e:b0:45:7a:c8:ee:a1:a8:60:e5:13:d4:
0e:df:38:e8:5f:ca:e7:93:a2:8c:42:c7:d7:87:6d:
18:2d:d6:c8:9f:7f:96:f4:73:17:b1:76:8e:10:42:
d8:03:b2:33:61:c4:d6:82:a2:d7:ba:ae:26:9a:49:
f3:9d:6d:7f:b5:dd:b9:8b:f0:19:c1:55:12:00:fe:
ce:dd:d9:de:33:2d:3f:34:ee:a0:1d:8b:6d:c7:9a:
c2:53:6a:72:c2:17:21:1f:91:64:2a:9b:55:e1:0f:
76:73:e5:e2:1f:fd:d4:d0:0b:da:1f:56:07:c1:05:
d5:00:f0:e4:0e:f0:d6:f7:2a:be:e6:02:f8:a6:a5:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:C6:D4:4B:65:A3:A2:85:3B:3B:F7:45:71:1C:3A:87:C3:ED:23
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/va7G1Etlo6KFOzv3RXEcOofD7SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.220.0/22
195.181.248.0/22
212.57.32.0/21
IPv6:
2a00:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
3d:8b:08:e8:f4:0e:14:b9:77:ae:80:03:9e:cd:74:cf:cd:06:
fd:78:f5:ca:a5:5b:71:84:0e:86:f2:a3:4e:51:34:24:52:9d:
cb:7c:2e:66:61:1d:a8:ad:d5:dd:25:b1:93:52:22:0b:db:03:
66:d2:7f:5f:c6:34:15:f0:22:60:d4:77:48:7d:1a:46:97:10:
83:53:35:3f:fd:e4:19:2a:bd:3e:a5:c6:7d:5a:03:07:db:c9:
6c:ce:05:ff:3c:e3:66:f7:72:3c:2d:ba:69:6d:cc:56:03:7d:
bb:08:38:98:bf:2f:37:87:e4:90:d0:ef:6b:b5:3f:1f:17:bb:
27:35:bf:04:ee:e0:5b:23:b6:4b:d5:ff:9e:e0:ce:7e:2f:f1:
ab:fa:cb:3d:c7:44:91:6b:3e:1b:df:2d:00:d0:b0:e3:81:26:
46:c9:d0:4c:00:54:9c:5b:f1:8a:c8:30:2b:a9:48:6f:2e:33:
20:f2:7a:a4:4d:f3:fa:76:2e:69:6c:2c:12:b3:ca:3f:ae:66:
93:dd:07:ae:32:b4:73:3f:52:3d:bf:65:3c:19:66:b2:5b:84:
25:4d:52:88:bb:32:21:6b:21:10:04:d2:8f:0b:66:bd:04:c8:
71:e1:99:83:cf:c8:23:1b:8c:f6:5e:86:62:4b:7b:7e:b7:45:
3c:8c:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:06:25 2025 by rpki-client