Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/vEaBzwoEAwzosXDFzJLUwLp5Y64.roa
File: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (raw, json)
Hash identifier: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=
Subject key identifier: BC:46:81:CF:0A:04:03:0C:E8:B1:70:C5:CC:92:D4:C0:BA:79:63:AE
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0194F9E6D726EBD4FBE19F8E26A50D686D5C
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/vEaBzwoEAwzosXDFzJLUwLp5Y64.roa
Signing time: Wed 12 Feb 2025 11:24:02 +0000
ROA not before: Wed 12 Feb 2025 11:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 2a0f:4900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:e6:d7:26:eb:d4:fb:e1:9f:8e:26:a5:0d:68:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Feb 12 11:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc4681cf0a04030ce8b170c5cc92d4c0ba7963ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:9d:ef:af:f3:5b:9e:37:3f:c7:5e:ca:03:
57:2d:a3:f9:64:8c:f6:d6:6f:f3:56:db:12:64:f0:
c8:a2:1d:1b:60:9f:13:2b:4f:b9:8d:75:77:cd:7b:
1d:97:3d:e1:22:af:de:ae:b0:8e:b9:9f:be:81:0c:
66:0a:2d:e1:e2:73:5c:7a:10:60:46:68:fd:1d:82:
22:db:81:a1:19:7a:92:5f:26:14:45:4e:78:e0:28:
83:64:7e:91:03:9b:fd:f6:10:e8:0c:41:83:c4:f1:
ef:8e:12:c1:aa:82:37:78:75:54:6a:81:92:7f:20:
fd:f1:6d:a6:05:0b:1c:61:ea:40:24:d6:ba:15:64:
fb:e4:9a:1f:f4:15:67:d8:86:e3:4b:ef:ef:35:32:
d2:24:85:ad:a5:61:bc:6e:6b:6a:fd:16:d7:b2:77:
26:cb:ea:19:f5:22:66:56:7d:a9:d5:2d:ca:4d:6b:
58:02:3d:a0:c4:e5:5d:ef:65:37:75:be:6e:ed:93:
01:3b:08:c2:47:db:35:32:bc:58:78:08:06:74:72:
5c:fc:7c:6b:45:c4:ec:56:ab:b8:e2:8a:94:d0:79:
10:95:53:8e:be:68:94:a9:9a:82:6e:09:3d:4c:5e:
18:73:7b:f3:df:50:35:2e:ea:53:39:ca:61:ca:73:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:81:CF:0A:04:03:0C:E8:B1:70:C5:CC:92:D4:C0:BA:79:63:AE
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/vEaBzwoEAwzosXDFzJLUwLp5Y64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4900::/48
Signature Algorithm: sha256WithRSAEncryption
93:a7:45:93:98:c8:9d:ff:c8:59:bc:78:4c:3a:43:b4:6c:34:
3b:64:8a:3e:53:d8:c3:08:1c:a5:d2:5f:12:47:4d:c4:2a:91:
ec:a9:47:e4:c0:50:b1:cc:4c:1f:5e:24:82:f3:84:88:7c:49:
9d:2f:b7:dd:ec:09:72:be:4c:a5:20:2c:ad:0a:21:6e:50:aa:
89:de:8d:42:77:2b:e8:c5:bd:02:15:10:7d:1f:4a:4a:dd:1c:
d9:ca:bf:89:02:fb:50:90:2e:e6:5f:d7:a5:88:33:c2:f6:4a:
48:db:8d:dd:5e:d6:00:ff:49:62:09:f6:6e:45:e8:28:d9:7d:
53:bc:01:02:f3:7d:55:da:cb:c1:85:84:5b:bf:20:73:f8:3e:
e1:3a:c8:66:1e:0b:6c:93:e0:71:7c:5a:b5:fd:ef:44:b4:3a:
41:fe:31:f4:9e:29:bb:80:a0:bb:74:2d:45:38:1d:8e:1a:67:
eb:6e:98:cf:fb:e0:1d:68:99:a6:13:a6:13:ba:22:12:ec:ff:
39:da:72:2d:6a:6d:24:17:bc:77:63:22:88:4c:e2:5f:cc:f4:
5b:ce:b7:00:61:15:6e:31:a1:ea:60:bc:b1:81:56:76:5f:32:
20:98:0c:cb:f6:35:5b:01:97:dc:2c:e8:71:25:80:a4:df:02:
de:06:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:06:57 2025 by rpki-client