Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa
File: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (raw, json)
Hash identifier: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=
Subject key identifier: BE:08:B5:13:2F:C4:EE:E1:7D:35:4F:74:17:F3:7A:6C:1F:AD:0A:B0
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019421445B0206F8925F1C4F31BDBAB1CEC1
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20454
IP address blocks: 45.131.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:02:06:f8:92:5f:1c:4f:31:bd:ba:b1:ce:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be08b5132fc4eee17d354f7417f37a6c1fad0ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:cf:21:11:7a:1f:a5:aa:51:aa:7a:9e:a0:
8a:60:13:09:62:da:6b:42:33:6b:5f:94:85:2d:3c:
21:2a:10:35:6d:3d:ed:b8:92:26:f9:58:ea:9e:ec:
84:12:5d:0a:15:56:0a:68:86:fe:ff:5b:10:09:e6:
87:4d:0c:76:99:67:fa:03:a9:4c:9b:c5:60:b9:b5:
7b:4b:bc:54:f0:a3:49:70:4b:6b:c4:fb:9b:b3:16:
fb:6e:91:49:58:e5:fb:49:63:c9:71:8e:b3:ca:2a:
9a:79:0c:44:52:19:7a:91:c9:06:37:b7:1f:1c:f8:
8f:7b:0a:b8:16:5e:3f:a0:6c:fd:c8:c1:49:a0:31:
9c:6d:12:4a:ae:39:2f:00:ce:c7:d1:25:d9:ff:59:
79:22:13:ed:54:9c:68:07:d1:be:52:d2:e7:fa:59:
60:44:65:e8:89:f8:67:b2:b4:28:d4:a0:64:3d:a8:
6b:45:53:a6:e1:f2:20:22:1f:ac:ad:98:1e:09:03:
d0:1d:ea:75:fb:d9:90:41:da:cb:6f:fb:be:f2:65:
17:56:47:a8:4e:e7:d0:06:a9:22:02:60:f7:1d:df:
bf:bd:e2:28:05:89:ce:7c:df:a6:74:6c:1d:61:df:
42:67:38:9c:9e:fe:48:74:b3:50:cd:31:92:d9:69:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:B5:13:2F:C4:EE:E1:7D:35:4F:74:17:F3:7A:6C:1F:AD:0A:B0
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.12.0/22
Signature Algorithm: sha256WithRSAEncryption
25:d5:e4:3d:3b:84:2d:3e:fe:71:de:74:57:8a:ae:b8:19:8b:
86:63:e4:c5:78:b6:d3:0f:25:0e:be:84:37:9f:c9:5f:92:bf:
36:b2:ea:15:1b:e3:82:5a:39:12:7e:69:38:2b:ba:c3:83:42:
b7:36:ec:8d:61:a9:61:e6:24:81:8b:9e:56:7e:d0:50:46:3e:
8e:57:3f:72:49:63:98:13:94:f5:2f:d7:f2:be:52:56:e8:a4:
0f:d4:26:27:f2:9d:f2:99:6c:1b:91:b5:1b:00:5b:cb:3b:c3:
26:ca:f5:c1:cf:0e:f1:f8:cc:33:4f:77:9d:a2:dc:7c:5a:7c:
c9:f9:ec:29:a6:fe:ac:55:8e:fd:c8:b3:c8:4d:73:74:11:36:
18:a6:27:9b:f1:d0:6d:c7:e8:56:43:02:d8:95:72:5b:4a:3e:
d5:c0:56:bd:a8:4d:d3:ca:97:7e:21:86:6c:30:1e:f8:ab:fd:
70:0d:37:2a:89:54:b3:dc:d8:e5:5f:ca:82:15:a9:1b:4f:b0:
d4:b3:87:84:1d:d4:24:03:da:db:5d:5e:4f:5d:4c:13:2a:1d:
36:92:f8:4a:6b:1a:d1:7c:61:9f:60:6f:a8:85:58:63:d8:74:
b3:54:0a:ac:a1:97:b9:21:9b:b3:5f:9d:ba:3e:7e:96:00:c8:
e3:cf:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:29 2025 by rpki-client