Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/vAUqTPB1ggTD55ydvicj8MOXqzU.roa
File: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (raw, json)
Hash identifier: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=
Subject key identifier: BC:05:2A:4C:F0:75:82:04:C3:E7:9C:9D:BE:27:23:F0:C3:97:AB:35
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 0194228D59F45FE5B45C57CAFE68253B87A5
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/vAUqTPB1ggTD55ydvicj8MOXqzU.roa
Signing time: Wed 01 Jan 2025 15:47:56 +0000
ROA not before: Wed 01 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59752
IP address blocks: 164.177.168.0/21 maxlen: 24
185.95.128.0/22 maxlen: 24
2a03:2500::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:59:f4:5f:e5:b4:5c:57:ca:fe:68:25:3b:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc052a4cf0758204c3e79c9dbe2723f0c397ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:86:b7:3b:c9:5f:fd:54:61:9f:e1:16:15:
bf:e7:fa:e9:39:0c:66:ca:3f:b5:53:b0:fe:62:60:
c8:23:68:92:ff:8d:49:05:0e:09:01:42:7c:f8:69:
1b:12:dc:26:b2:ce:ee:2a:ba:23:ae:19:df:88:95:
98:4a:f2:f1:d1:61:52:8b:94:d7:09:e4:8d:cf:85:
f2:cd:52:a2:96:52:0c:14:d6:fa:9e:a0:1e:14:29:
0c:c7:0c:ea:70:0c:8d:d2:ba:bf:66:9f:11:8c:05:
86:75:e2:33:c5:56:a9:45:8d:67:0a:80:16:d5:f3:
24:cb:c6:d5:24:65:96:54:a8:00:88:0e:ad:53:83:
ef:46:0d:a1:54:da:bf:42:c6:af:39:ad:04:d6:41:
a6:e3:60:35:d8:02:96:5b:d9:7a:db:70:a7:fe:50:
4d:a6:66:3f:a4:07:6e:86:83:de:66:93:ea:dc:36:
57:91:71:4c:d6:0d:fe:67:8f:ba:2c:6f:a3:6b:b6:
40:ae:48:be:cb:5e:cf:8a:c8:fe:d8:4a:ed:94:d8:
b1:79:f7:c2:bf:43:fc:c1:de:a5:89:d9:c3:3d:80:
7a:7a:c6:b7:15:c9:51:77:4d:26:99:c3:9c:b7:6c:
a0:a0:06:e7:92:67:8e:1f:e3:6e:29:c1:2f:be:d7:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:2A:4C:F0:75:82:04:C3:E7:9C:9D:BE:27:23:F0:C3:97:AB:35
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/vAUqTPB1ggTD55ydvicj8MOXqzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.177.168.0/21
185.95.128.0/22
IPv6:
2a03:2500::/32
Signature Algorithm: sha256WithRSAEncryption
4c:9d:f4:19:c9:6c:c4:d4:c7:d8:a9:2b:e3:7b:f9:84:60:8f:
be:6f:2c:ad:c5:f1:f5:cb:c1:06:ce:14:af:d4:4d:5c:b0:bc:
21:9b:ad:af:bf:a1:65:3f:9b:da:39:44:4c:37:ab:28:8a:ef:
52:c5:3f:76:8a:cb:97:f7:5e:0e:94:cc:60:dc:a1:60:55:6c:
9c:13:e2:8a:85:8d:0b:7d:75:80:72:cc:3f:23:67:64:3f:ff:
47:ef:51:46:83:6d:64:e1:0a:d2:0f:24:af:9a:10:47:84:73:
ce:38:04:1a:a1:90:8f:d8:de:02:6e:71:85:f1:f8:3b:7d:e8:
4d:a9:f8:3f:35:16:d9:6b:0f:73:d0:87:aa:7d:88:f2:f1:5c:
7f:55:a7:3a:92:1d:4b:97:2e:4e:8e:2d:f0:0c:2d:29:34:4f:
af:02:e8:ef:50:cb:7f:ba:6e:70:15:c2:d8:de:50:53:e5:c7:
ae:13:8a:03:12:cf:36:58:f2:66:58:8c:18:30:f8:08:82:59:
dd:35:0a:f3:18:19:b5:78:9b:2e:b9:72:f4:63:74:25:4e:62:
24:ee:73:66:81:d3:a2:38:8f:00:94:7d:7c:8e:0a:98:f3:fd:
1a:81:11:95:51:c4:e5:d9:ff:25:67:91:a0:2e:8d:9b:2e:cd:
8d:bb:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:59 2025 by rpki-client