Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa
File: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (raw, json)
Hash identifier: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=
Subject key identifier: 54:00:BF:E9:1B:04:DA:8A:B9:30:3D:25:AA:65:EF:E8:A0:B3:C0:34
Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial: 01941FFA17C2D0F2AE86E0D2E39B3D759A55
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 87.77.0.0/16 maxlen: 16
130.133.0.0/16 maxlen: 16
160.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:17:c2:d0:f2:ae:86:e0:d2:e3:9b:3d:75:9a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5400bfe91b04da8ab9303d25aa65efe8a0b3c034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:dd:b1:be:7c:7b:34:88:c4:bd:08:d5:44:
b6:59:31:4c:f5:53:87:fd:64:80:1c:10:36:ef:1a:
98:3e:f2:84:e2:00:1a:9b:6c:6e:bb:d7:f0:b2:dd:
dd:15:ba:96:ad:a8:bd:26:db:c9:f9:f3:ba:d3:07:
02:41:3e:e3:52:fa:22:e6:64:39:2d:76:27:a3:6b:
d9:bc:ae:d9:66:b3:0f:9c:ae:36:3a:0c:e2:fc:7e:
e7:b1:eb:14:13:dc:9a:45:cb:fd:ab:71:5d:78:18:
7f:cb:8b:38:dc:75:f3:11:13:82:93:36:0d:ff:af:
c9:5b:52:94:ec:7a:88:02:c3:76:72:fe:e1:8d:43:
b4:0a:fc:65:74:c8:6b:ad:1d:d5:f0:a6:da:ca:d8:
ba:63:3b:99:7c:e3:1d:13:a7:f2:fb:50:bb:54:2e:
27:d7:3a:16:7c:4f:ec:f7:51:4e:cd:33:6f:0b:98:
5f:78:95:6e:f9:4c:0c:d2:9f:58:d5:cb:a1:8f:80:
d2:95:72:16:d8:96:ea:b5:f7:97:da:2f:b5:f8:ff:
89:05:ac:11:55:80:36:13:08:82:15:b6:2f:0b:8e:
46:72:d5:c0:1a:53:98:dc:24:b4:7e:61:81:b9:16:
6b:64:bb:36:7a:45:c3:76:71:99:60:85:cb:0a:a3:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:BF:E9:1B:04:DA:8A:B9:30:3D:25:AA:65:EF:E8:A0:B3:C0:34
X509v3 Authority Key Identifier:
keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.77.0.0/16
130.133.0.0/16
160.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:bf:75:c1:67:4b:69:a4:30:3f:c8:d6:3b:5f:55:b2:c7:0c:
f8:4c:70:04:96:06:9f:37:f2:ec:3b:91:1e:f2:3e:46:44:d3:
70:f8:0d:a1:91:6b:bd:4a:6a:c1:ae:5b:fe:68:4c:8f:3e:e7:
e5:79:40:a0:94:87:4e:8d:c3:52:3b:1e:2a:33:97:b6:1d:28:
c8:7a:7e:8a:b5:1f:15:d1:52:7f:8f:d9:a0:2c:f0:96:02:55:
a0:ab:0c:82:0f:d9:dd:e4:e3:82:26:c4:a1:29:ba:67:ee:19:
aa:c1:ea:ff:59:b7:09:f9:46:7b:4c:a9:75:c8:05:49:9b:ed:
69:4f:fa:a5:b7:9c:4c:50:38:2d:1b:bb:04:c7:7f:48:c6:8e:
23:29:9c:55:38:43:ac:dd:12:9a:6a:44:cb:b6:e6:e5:53:26:
99:f3:4c:dc:b7:16:dc:2b:c7:c5:77:30:40:a9:38:26:3a:f3:
0a:cc:76:6d:8e:7c:8b:a7:86:2b:a7:f3:2d:02:07:1d:70:2c:
52:5f:8e:22:ce:d1:ea:07:ad:2d:3a:ee:ba:18:cc:49:16:5b:
1a:0d:6f:5b:43:67:10:35:ea:b4:f4:9f:ff:0a:fd:e1:30:b2:
bc:ec:bb:de:90:5d:ee:b4:1b:76:1b:37:47:40:e6:bf:ac:40:
9b:b5:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:25:00 2025 by rpki-client