Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vaOjwYVaxXmWgqo9crB9cGBZhZs.roa
File: vaOjwYVaxXmWgqo9crB9cGBZhZs.roa (raw, json)
Hash identifier: znD43/5g+3tYPp814zQb5LE9DwATZNIKh5p8Q/CFnw4=
Subject key identifier: BD:A3:A3:C1:85:5A:C5:79:96:82:AA:3D:72:B0:7D:70:60:59:85:9B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222040B6AB0835530B47F372B5588360
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vaOjwYVaxXmWgqo9crB9cGBZhZs.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212008
IP address blocks: 2a0e:8f02:20f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:40:b6:ab:08:35:53:0b:47:f3:72:b5:58:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda3a3c1855ac5799682aa3d72b07d706059859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:20:8e:3c:9f:8a:2d:b6:33:cd:b3:e2:9a:
5c:b5:71:69:9d:6e:52:3e:4f:2e:5f:89:d7:dc:99:
27:1c:60:5d:35:78:3b:4b:12:b6:14:e5:b8:8f:b4:
c5:d0:d9:fb:14:35:d1:f8:ff:ee:bc:24:4c:01:77:
08:7a:7f:de:59:ff:30:db:41:8e:14:62:02:69:09:
c3:b7:3b:ec:ae:f1:7b:f9:77:cd:df:c0:9b:09:f9:
45:1f:16:75:64:cf:c1:f1:40:71:49:74:e8:d5:de:
06:c0:44:f9:c5:c9:70:bd:09:28:64:8e:00:07:27:
c9:be:59:2c:20:30:e4:d6:08:ec:c2:4e:5d:23:b6:
e2:0f:40:24:04:e7:d8:dd:72:56:d4:a6:d7:b1:b9:
82:ae:a2:8f:fb:6c:60:67:15:ee:58:00:9e:9b:dc:
82:1b:ce:a6:b3:b0:e4:ad:af:9d:61:0d:3c:f2:ac:
04:5c:76:7d:26:9f:c8:11:16:bb:09:2f:7c:34:67:
ac:c2:60:7a:b4:ad:d9:8c:c6:00:19:28:17:fb:8e:
dd:0d:2d:30:a9:76:be:9b:95:4a:39:4e:0a:65:77:
dd:f3:1f:87:47:5e:88:b5:09:4e:28:5c:dc:b1:5c:
78:8b:45:3f:32:3b:34:02:9a:4d:54:03:4d:c8:96:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:A3:C1:85:5A:C5:79:96:82:AA:3D:72:B0:7D:70:60:59:85:9B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vaOjwYVaxXmWgqo9crB9cGBZhZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:e4:66:dc:99:83:89:7f:ba:41:cd:b3:79:b6:42:5d:81:f4:
f7:b7:ee:00:ed:83:a2:cd:d3:a8:1f:81:9f:23:c3:a3:d5:2f:
6a:7d:10:62:b9:d2:fe:ef:f2:df:44:7c:b5:df:fa:5a:8c:a3:
37:5b:c8:81:f5:8f:d2:f9:b1:85:42:65:7a:dd:ac:73:67:c0:
fe:4c:b8:2d:9f:b1:11:f7:dc:60:8e:cc:88:5d:03:72:66:f8:
19:8e:56:1b:bf:a0:ab:5f:b9:e0:d5:4d:07:d1:b5:3e:26:0e:
ab:c0:53:84:09:69:60:65:ff:16:d7:49:fb:8b:fd:bb:bb:3c:
7d:96:ba:09:31:32:11:76:21:71:ff:c9:c8:65:77:2f:d7:8e:
31:90:1e:e4:6d:ef:4f:0b:ef:cd:70:40:e7:67:b9:1e:00:79:
98:5e:48:3d:23:70:92:ff:ed:1c:e5:59:e2:da:3f:ad:08:4e:
0a:03:55:ed:71:5c:1a:78:14:4c:3f:94:a0:d8:50:e6:e3:35:
b6:7b:1c:f0:f2:a7:ef:7e:36:e2:70:c5:15:31:78:98:ed:36:
ed:1d:32:a7:79:f7:ee:3c:63:81:03:c6:94:b4:9c:6d:08:1b:
5d:1b:48:57:d3:22:87:11:25:cb:f0:bf:56:59:fe:eb:42:2d:
8b:56:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:53 2025 by rpki-client