Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa
File: vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa (raw, json)
Hash identifier: KCT7eisgtXh1YmsQ/Nh86nF1rLU2oyDhZb6B9PyRluA=
Subject key identifier: BC:C4:1C:BB:C7:55:41:35:F0:38:75:90:C1:CB:31:00:7C:D4:3B:10
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 0194282DD2FC677DAFF4FCEA326D138BF3F9
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa
Signing time: Thu 02 Jan 2025 18:01:19 +0000
ROA not before: Thu 02 Jan 2025 18:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:2d:d2:fc:67:7d:af:f4:fc:ea:32:6d:13:8b:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 2 18:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc41cbbc7554135f0387590c1cb31007cd43b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:52:35:06:2e:6c:d6:48:b5:81:27:44:47:
ff:52:83:64:2b:55:d0:b3:5f:83:37:fc:03:a8:4e:
75:a2:df:99:5e:e3:75:a2:34:15:33:2f:9f:af:7d:
ad:7c:bf:79:f8:31:45:f4:46:9d:b8:dd:8d:55:25:
66:19:b4:66:b5:23:de:06:e8:01:b6:7d:3f:fd:cb:
ae:df:ea:57:cd:71:a8:19:59:07:bf:ad:06:b6:5e:
bf:da:63:ba:86:4a:d7:0f:a2:fc:36:ad:2b:15:25:
b6:28:46:1a:ea:7c:7c:21:5d:35:1c:01:b1:51:de:
67:65:a8:54:bd:e2:c2:15:58:04:ab:e8:88:7b:7e:
05:21:4d:56:5e:13:b1:61:61:56:44:56:d2:6d:5b:
45:47:45:95:de:34:1a:3f:26:a2:12:7b:5c:ae:65:
d4:d8:6a:96:de:c1:4d:10:f5:95:61:2e:4c:12:af:
34:87:66:28:75:d5:dd:00:42:0a:6a:cb:79:33:9d:
c1:31:27:08:b3:f7:38:4a:41:92:6d:11:08:c6:ec:
61:d5:dd:c5:3b:57:5e:1d:10:a1:28:4e:dd:44:2b:
da:cf:9f:57:59:ea:85:f9:90:f1:40:d1:e0:a8:18:
06:de:58:5c:d5:07:78:2d:06:24:3f:64:48:09:0a:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:1C:BB:C7:55:41:35:F0:38:75:90:C1:CB:31:00:7C:D4:3B:10
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff69:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff70::/48
Signature Algorithm: sha256WithRSAEncryption
0e:51:2c:eb:c3:f7:b8:6d:19:d1:22:7e:8d:ee:8f:95:e7:1e:
86:1b:63:de:c8:4e:c7:db:98:13:d5:5f:c7:e1:6c:59:e4:1a:
d7:05:26:e5:e6:af:30:90:40:f5:ed:9c:2e:27:d9:69:bd:e1:
e0:19:37:7d:85:49:26:ef:0a:b6:fc:80:2b:38:a0:20:75:ad:
82:42:0b:e8:75:1a:32:e6:df:ea:ac:b5:b3:e7:bd:43:a6:1e:
c6:6a:97:7e:5b:19:8d:bd:a5:9a:4c:d3:16:2a:80:ef:4a:48:
42:56:09:b7:5b:18:3e:09:e2:2a:8e:c1:41:69:34:7e:cc:ce:
e8:9b:a2:b7:33:b6:0e:e1:a5:58:84:50:f7:96:09:44:85:d5:
7d:51:03:e8:5a:1a:16:f9:1d:f5:8e:07:44:dd:a4:af:f6:da:
a3:b0:22:cb:89:a9:4e:22:49:05:ea:5d:c0:39:aa:66:42:a3:
e1:9a:bc:45:e8:b3:ca:19:d2:6b:4b:6a:23:48:1e:30:10:f8:
0f:eb:c7:8b:25:6d:37:d9:44:5d:79:5e:63:4a:69:29:2b:a9:
54:7f:9f:d7:0f:a2:1b:d9:cd:f2:49:9a:c9:d0:0e:12:e7:7b:
35:93:26:d8:b9:5d:5c:2c:74:da:80:d6:c4:17:b9:fe:c9:0d:
e8:c8:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:41:54 2025 by rpki-client