Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa
File: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (raw, json)
Hash identifier: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=
Subject key identifier: BC:0B:DB:86:44:2F:0F:D4:EC:40:26:74:36:FB:18:59:E0:55:08:BA
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAFA2BC8FEFF4FEB7579414CCF826D
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207469
IP address blocks: 2a0f:607:1053::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fa:2b:c8:fe:ff:4f:eb:75:79:41:4c:cf:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0bdb86442f0fd4ec40267436fb1859e05508ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:18:c8:96:c8:6a:70:cd:04:3e:29:5b:51:
6f:5f:95:e0:d2:63:2b:88:c4:f5:0b:43:9a:89:7c:
bb:70:a3:44:0e:6c:4e:55:a2:36:f5:2b:00:ef:3a:
73:96:4c:fc:15:73:25:80:82:d2:00:bd:4e:89:45:
bd:26:a1:07:af:78:ce:5b:4f:59:fb:0b:82:78:ac:
6b:60:0b:76:02:fd:b2:30:e9:6b:0a:12:4f:c8:d2:
7b:7e:0a:0f:67:e8:1e:40:a4:02:7b:80:a4:22:27:
67:e8:5d:92:08:47:3a:c2:86:91:cb:27:dc:62:9c:
38:93:2d:dc:7a:93:14:f3:0e:64:9b:a3:01:0d:91:
d2:bb:c0:39:3f:f3:da:74:2b:2b:fc:b9:af:c9:33:
52:52:89:84:10:6d:91:91:8d:c1:20:70:7c:84:59:
8f:fc:3f:88:1a:27:8b:93:59:1f:ee:50:b1:10:ac:
2d:6b:31:55:c8:0a:3a:4a:7a:4c:1d:f7:fc:26:3f:
7f:2e:4f:f8:f0:b5:6b:b7:91:ac:b4:d1:a7:61:e4:
6c:6a:0e:cd:2f:21:91:d9:63:2b:ed:6d:55:d8:b3:
5f:c6:ac:ad:7e:79:78:91:d8:b7:b8:a7:c2:57:c1:
43:df:98:45:98:78:4e:71:0f:91:7a:81:30:9f:84:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:DB:86:44:2F:0F:D4:EC:40:26:74:36:FB:18:59:E0:55:08:BA
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1053::/48
Signature Algorithm: sha256WithRSAEncryption
95:9d:c1:24:b5:be:e5:8d:51:fa:ee:91:01:8a:14:84:a0:1e:
75:f1:f6:79:13:0c:8c:de:a0:da:9d:91:5f:35:30:53:e9:23:
66:73:a5:58:70:9f:24:d0:82:e0:f2:44:ab:4a:6e:a3:85:39:
6e:96:ec:de:91:0a:ab:fa:f5:33:b7:1d:8b:a5:6e:05:33:60:
d0:18:be:d8:8e:16:0c:95:07:65:b9:0a:04:97:f8:87:9b:c9:
e3:06:7c:cc:a2:93:92:eb:0f:96:1b:3d:83:07:13:76:03:b1:
75:9c:c8:e5:6d:f2:9a:1f:cb:6f:09:58:9f:69:e3:60:91:ff:
f5:88:b3:1c:78:ba:b6:e3:f4:48:80:55:87:d3:e8:99:e2:3d:
4d:75:42:25:23:92:a3:25:08:6f:18:79:ad:c7:fc:85:2d:17:
2f:af:35:55:84:e1:ef:3c:c2:15:01:78:b6:1d:be:6a:71:e0:
d7:a5:31:38:ba:36:2f:4a:f2:90:0c:46:b4:94:25:15:02:c5:
38:e0:65:d1:9d:20:bc:3e:e6:5a:fc:8f:88:1a:3b:cf:8d:40:
d2:47:2f:87:c5:55:f7:69:07:ef:03:29:31:72:29:d8:16:c6:
fd:30:f6:f4:88:44:2f:64:d4:95:65:55:f3:e3:79:a7:a5:7d:
45:50:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:14:56 2025 by rpki-client