Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/VPRuREJE-YCpaLhsXMmuU88NcOk.roa
File: VPRuREJE-YCpaLhsXMmuU88NcOk.roa (raw, json)
Hash identifier: QpfRCNAQqKKaxZZw7ChyCaPP/Ca6vuy0NdiRqmD4MbM=
Subject key identifier: 54:F4:6E:44:42:44:F9:80:A9:68:B8:6C:5C:C9:AE:53:CF:0D:70:E9
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 01949916A8A178B3CB0DF16A3F36F0486045
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/VPRuREJE-YCpaLhsXMmuU88NcOk.roa
Signing time: Fri 24 Jan 2025 16:13:06 +0000
ROA not before: Fri 24 Jan 2025 16:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207160
IP address blocks: 2001:67c:232c::/48 maxlen: 48
2a14:d100::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:16:a8:a1:78:b3:cb:0d:f1:6a:3f:36:f0:48:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jan 24 16:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f46e444244f980a968b86c5cc9ae53cf0d70e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:e2:80:e5:4d:60:d2:18:85:e7:cc:df:53:
2d:c4:d8:d7:14:bf:b8:b4:f0:90:db:e6:23:b6:b1:
ff:ea:8a:49:5b:b5:81:62:a5:c5:85:ee:6b:2d:26:
27:12:d9:c8:f2:d7:af:e4:b1:64:26:4b:da:dc:0d:
11:4b:9a:74:98:ec:a2:bb:a0:3e:95:1f:97:c2:12:
26:fd:ec:c5:5d:37:77:ba:d9:5a:9c:f2:c5:1a:a5:
0a:ea:6c:c5:d2:bd:84:d4:2a:3a:94:5e:4d:ca:1f:
7b:95:3a:13:3e:7e:b8:33:cf:e6:ad:ae:2b:29:d5:
4d:fa:3e:a7:af:61:a4:39:1e:03:6e:58:7b:b5:c1:
e4:49:7d:9f:af:6c:29:ce:1d:9f:a3:9a:6a:c6:6e:
26:cc:b2:13:6a:bf:2f:41:03:a8:83:8d:53:7d:d0:
96:80:fa:05:00:35:ac:5a:b8:66:bf:ca:e9:ec:e4:
c1:a0:77:96:7b:90:78:d9:f9:88:a1:dc:f3:15:e6:
2a:1e:4f:96:de:9b:8e:8a:a6:e0:8d:b6:06:5b:46:
4b:f5:18:5f:9e:c7:2f:42:28:0f:f4:10:2f:0f:5d:
8c:e1:4f:34:89:6a:e9:4a:74:0f:0b:d9:0e:5e:28:
34:0e:76:f2:5b:70:c6:9d:fd:95:4c:be:e0:a3:08:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:6E:44:42:44:F9:80:A9:68:B8:6C:5C:C9:AE:53:CF:0D:70:E9
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/VPRuREJE-YCpaLhsXMmuU88NcOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:232c::/48
2a14:d100::/33
Signature Algorithm: sha256WithRSAEncryption
44:0b:37:a8:ac:42:c6:5f:52:5e:52:32:b1:d6:1f:01:37:b9:
39:9c:b4:7b:47:0b:9d:a9:b0:99:22:f5:21:c9:3a:18:01:b2:
c4:fa:83:3f:22:d7:68:7c:77:00:ac:fa:b4:b3:46:ee:c9:c2:
36:a8:f3:66:25:84:9d:54:99:08:c6:bb:a4:24:54:47:51:e2:
7f:d5:4c:4a:4f:be:d1:bf:04:37:7c:88:7f:47:b2:10:20:6e:
a5:3b:d5:74:fc:8f:8b:27:bd:c9:49:57:81:af:96:90:f7:8c:
7c:9f:13:ce:25:63:76:a3:93:22:76:41:73:4e:52:81:b6:95:
42:38:d1:f1:a9:04:9a:36:3f:c8:b7:0f:fe:5a:11:5b:3b:44:
f7:ac:61:d9:64:1a:48:f5:d1:00:55:c2:15:01:9b:19:db:93:
02:17:99:41:d4:a1:e4:80:05:29:dc:a8:7c:6e:da:94:30:3a:
35:9a:b4:55:19:d1:1c:b2:8b:25:7d:8f:80:69:22:c7:c4:13:
c6:3e:90:73:a9:75:94:f7:3a:6a:6c:3d:7d:1d:78:fc:fc:e1:
9b:a3:bf:66:75:5d:af:cd:30:d8:98:05:76:39:b3:55:86:77:
40:6a:cb:b6:17:22:c3:f7:ac:78:f0:de:87:1b:26:88:cd:c8:
99:5c:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:55:21 2025 by rpki-client