Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/VEacVgiUB2mSTjU4m54DaN-4dWE.roa
File: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (raw, json)
Hash identifier: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=
Subject key identifier: 54:46:9C:56:08:94:07:69:92:4E:35:38:9B:9E:03:68:DF:B8:75:61
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 0196623FB8F9A6D3C54DEE3F6BC16B24C91E
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/VEacVgiUB2mSTjU4m54DaN-4dWE.roa
Signing time: Wed 23 Apr 2025 10:44:25 +0000
ROA not before: Wed 23 Apr 2025 10:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39019
IP address blocks: 185.213.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:3f:b8:f9:a6:d3:c5:4d:ee:3f:6b:c1:6b:24:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Apr 23 10:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54469c5608940769924e35389b9e0368dfb87561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:82:ae:e8:da:68:6a:de:3c:95:ef:cb:31:
08:5a:26:0f:6c:3f:55:03:bc:4d:7c:44:0a:6a:cb:
9c:3a:89:7d:64:4f:d3:f6:37:7b:77:15:d9:19:c8:
5d:22:34:92:4b:de:23:5e:5e:13:67:ae:b4:02:78:
6b:2c:ad:f3:9a:b4:aa:0b:37:3f:30:ee:02:10:77:
08:d5:06:f2:d2:90:68:a6:09:05:f6:69:21:00:c1:
4c:be:99:6d:24:cb:53:2d:35:04:63:1f:b8:e8:55:
98:e4:44:d9:eb:dd:35:24:72:95:b7:53:71:da:63:
94:0a:c0:86:36:2e:d4:80:c5:34:66:72:de:65:24:
9c:f3:29:fc:4b:05:c0:4a:32:f3:cf:a7:c3:f4:71:
90:d9:91:02:5d:a5:db:0b:c5:0a:57:d0:a3:a3:e6:
25:56:dc:64:a0:e4:72:62:5c:c3:8e:76:37:3b:90:
f5:d0:31:5a:b9:f1:b1:01:72:64:b2:3f:de:63:0f:
4d:8f:ef:ce:41:57:24:fc:6e:12:d4:2a:9a:ef:e1:
d0:a2:b0:6d:5d:e0:78:44:e6:aa:89:bb:4d:10:6c:
7d:a7:34:05:95:40:b4:8a:fb:8f:80:d4:2a:34:91:
1d:bd:80:f0:55:b8:1e:d2:1e:f4:c4:8f:11:e6:d3:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:9C:56:08:94:07:69:92:4E:35:38:9B:9E:03:68:DF:B8:75:61
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/VEacVgiUB2mSTjU4m54DaN-4dWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5f:26:96:2b:de:d2:11:75:f2:4f:4c:cf:88:12:66:00:74:
74:ec:51:0b:eb:83:45:ab:95:33:69:0d:40:49:4f:31:da:ff:
f9:b5:12:48:e9:76:df:a7:2b:4f:29:60:ff:9c:44:85:70:91:
7c:6a:e6:da:d1:08:f2:1a:62:06:61:35:58:29:74:ac:3d:3d:
42:55:b1:a8:9f:6b:45:e8:24:44:5d:81:36:d1:25:89:c0:f4:
6c:e3:f9:7d:17:df:75:5f:e7:40:b6:23:06:3e:9e:58:ed:74:
7d:d2:52:46:d0:b7:5e:60:20:f2:30:f7:66:cd:58:91:46:b2:
1d:05:98:99:3e:f8:e8:fe:94:d5:15:57:89:55:8f:5b:c1:fd:
93:0e:d0:a9:ea:60:d7:0c:49:19:d2:08:6d:5a:68:91:32:73:
0b:d5:f3:75:ef:6e:ee:1b:75:d3:7b:c5:d3:52:71:ce:62:4b:
2d:63:fb:fd:5e:57:a0:3d:41:39:8f:00:fc:e4:48:80:e3:b2:
dd:bb:f0:14:81:07:cb:98:aa:23:35:b5:55:c8:9c:a0:ac:a5:
10:a7:7b:8c:3c:b9:95:c3:03:d3:d0:14:27:3a:96:06:08:0a:
2f:86:70:31:ed:2e:64:42:04:0d:9f:12:53:78:23:5a:07:71:
12:57:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:34:09 2025 by rpki-client