Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/bVXGLrP9JWYq0sAMxong0O-uVCA.roa
File: bVXGLrP9JWYq0sAMxong0O-uVCA.roa (raw, json)
Hash identifier: tMlJzjeD2TcT0G04U2ocPrelsQVTQej18BVAuvg1N+8=
Subject key identifier: 6D:55:C6:2E:B3:FD:25:66:2A:D2:C0:0C:C6:89:E0:D0:EF:AE:54:20
Certificate issuer: /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial: 019766C7C66BC2D192AE9BA75BC615F67346
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/bVXGLrP9JWYq0sAMxong0O-uVCA.roa
Signing time: Fri 13 Jun 2025 00:54:17 +0000
ROA not before: Fri 13 Jun 2025 00:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49867
IP address blocks: 185.155.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:c7:c6:6b:c2:d1:92:ae:9b:a7:5b:c6:15:f6:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
Validity
Not Before: Jun 13 00:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d55c62eb3fd25662ad2c00cc689e0d0efae5420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:7f:e4:6d:c3:cf:67:63:d5:02:7e:b4:e2:
d3:c0:1f:f8:06:b4:d9:93:2d:cd:4b:c2:7f:2f:00:
84:72:c6:f1:c9:75:8b:9c:ea:ba:3e:7f:6d:df:b6:
25:ef:0f:18:95:ec:11:10:61:06:3f:ac:ff:17:96:
95:be:a1:1f:66:c2:e6:de:f5:bc:fa:80:0e:ae:66:
9c:33:87:f0:b6:4b:8c:bb:e9:6c:9f:f4:71:b6:7f:
39:26:3d:b6:d8:bd:74:ed:e7:e7:9f:df:5c:c4:62:
ed:ca:43:9a:21:f5:f0:89:64:20:24:5c:c2:4b:87:
53:35:30:90:5d:00:8e:b0:2e:a9:a8:28:73:07:52:
d1:10:4d:fa:8a:23:f8:ed:34:4a:40:80:a6:a8:c8:
0d:56:c4:2d:7f:66:4d:60:a5:db:56:a7:a7:90:cb:
c0:e6:39:45:6e:5c:19:89:ec:82:60:01:c2:2c:eb:
85:64:ca:75:dc:4c:32:02:cd:e5:19:cd:be:3f:92:
3f:13:d7:90:2f:da:33:df:25:ff:5b:08:a5:45:80:
0b:2b:18:9e:d5:63:90:18:12:2e:9c:a0:00:db:0c:
cb:ee:79:05:6f:5d:13:73:c7:99:75:0c:39:7b:de:
7a:bd:50:b2:98:7d:92:d4:09:e2:d8:7c:3f:2c:d4:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:C6:2E:B3:FD:25:66:2A:D2:C0:0C:C6:89:E0:D0:EF:AE:54:20
X509v3 Authority Key Identifier:
keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/bVXGLrP9JWYq0sAMxong0O-uVCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ad:a3:61:34:94:21:48:33:b2:a3:d3:47:cb:8f:2f:51:5f:
2b:8e:f9:df:e9:10:95:ae:47:0d:e6:6c:a8:c4:20:07:ca:35:
1f:eb:8c:87:64:9b:cd:1d:a2:1d:66:e1:8c:e4:0d:15:01:84:
c0:21:ae:49:5c:7e:4c:0f:22:37:d5:ff:9a:9f:97:da:2a:d4:
52:d3:d0:2c:63:17:b0:6e:2c:b9:4c:2a:90:53:24:00:18:be:
ca:f4:f6:d3:93:61:94:80:76:ed:b6:05:54:9b:d4:87:87:15:
e0:18:b6:78:85:33:b9:81:58:45:65:36:85:4e:f4:97:ab:18:
f5:05:72:5b:3f:33:26:a8:f5:3c:d2:1c:04:3b:ea:92:34:d0:
58:7c:67:f9:ff:3d:39:f8:56:6a:8f:df:a6:ad:7c:25:03:18:
4b:9f:14:a9:e7:6d:81:7b:b4:70:99:35:c5:b8:60:c1:9c:0f:
2c:a9:82:c9:bd:a7:89:f9:80:90:18:2e:bd:17:ed:01:b0:45:
61:39:c4:1f:1d:34:d4:5e:ee:2d:62:75:c0:17:07:ae:b7:82:
a2:db:e6:b1:30:39:70:f9:11:b6:3b:4d:39:a1:05:f6:39:35:
fe:93:83:a5:c2:eb:e5:35:74:7f:f3:26:51:f0:78:7a:91:4b:
68:35:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:14:52 2025 by rpki-client