Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKg2WR1NbAGhfphzj4aGcm74ttQ.roa
File: vKg2WR1NbAGhfphzj4aGcm74ttQ.roa (raw, json)
Hash identifier: 5YDoQa9D7Jne6Hwh9fMaVqsSOikoxj6jyF6OTDIvK4c=
Subject key identifier: BC:A8:36:59:1D:4D:6C:01:A1:7E:98:73:8F:86:86:72:6E:F8:B6:D4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9A6F7E6FE293AFE013B332F82EB9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKg2WR1NbAGhfphzj4aGcm74ttQ.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210732
IP address blocks: 2a0c:b641:4d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:6f:7e:6f:e2:93:af:e0:13:b3:32:f8:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bca836591d4d6c01a17e98738f8686726ef8b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:03:b4:2a:b2:00:33:49:f5:59:dc:2e:49:
87:cc:0b:8d:bc:9b:e2:2d:94:4f:ef:9f:0c:8a:b4:
3c:48:97:58:f2:2a:46:dc:2d:ba:84:ba:57:4d:e5:
0b:3f:40:ea:71:85:69:0c:ce:15:7b:fb:64:c9:d6:
37:8e:44:ac:e7:47:95:c3:44:ac:f7:54:86:c4:15:
3f:53:74:1a:81:98:3d:28:e7:0d:c5:1c:7e:30:c2:
f0:2e:ab:76:c0:95:90:15:ca:80:8f:05:9e:e6:7d:
c8:13:3e:f3:fe:18:20:b3:8d:bb:2b:3f:d9:67:24:
0e:14:3c:70:df:60:79:3e:aa:b0:b3:97:10:55:bd:
a9:13:1e:6a:ee:fa:eb:b5:78:3f:43:ab:d6:b1:0b:
35:5a:5c:77:85:c6:b3:7a:3d:66:56:ce:4c:15:04:
f1:53:4c:fc:4c:a9:fb:e7:92:09:66:50:1b:0c:89:
88:78:1e:33:33:24:8a:d1:38:c9:c2:e5:ae:8f:6e:
4e:7a:5f:bd:f9:30:0a:47:f9:50:51:4f:f0:36:17:
07:9a:a2:ae:4e:10:65:e1:be:11:b1:68:b9:f5:a6:
cb:08:34:c9:a5:45:20:08:45:5a:ec:11:31:68:98:
69:44:82:9e:45:46:12:2d:e0:b6:00:4e:3a:30:91:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:36:59:1D:4D:6C:01:A1:7E:98:73:8F:86:86:72:6E:F8:B6:D4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKg2WR1NbAGhfphzj4aGcm74ttQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4d0::/44
Signature Algorithm: sha256WithRSAEncryption
4f:84:bf:77:50:24:44:4e:a9:1d:64:30:1c:58:5e:ca:90:11:
4f:28:d1:e6:3f:a0:92:45:df:5c:ba:0f:25:94:16:e7:9d:af:
79:65:e0:f2:66:c0:b3:66:d3:69:17:27:4e:9b:b4:ce:1c:b1:
36:e6:fb:36:e1:21:3d:d1:c9:15:fa:4b:03:2c:bc:c2:73:19:
89:6a:e0:3d:0a:e0:f3:0d:f1:89:b0:9a:52:2a:67:48:4d:94:
a7:94:0c:f2:c9:21:a0:0e:2d:3e:80:27:a2:88:ae:35:8f:be:
97:a2:e6:60:83:73:fe:e3:34:63:b9:f7:14:cd:38:32:92:04:
26:f8:7f:01:d8:e0:bb:41:03:80:3a:b4:59:e5:61:76:f5:f8:
50:ad:d1:42:79:70:cf:2e:27:18:13:5f:95:7f:ce:65:f3:a7:
65:39:1d:d6:5f:99:b8:ab:4a:72:e1:9d:b3:8b:a2:a3:b0:d5:
9b:fb:1f:09:fd:48:d2:b5:f7:1b:1b:03:48:35:9c:5f:fa:de:
c8:d1:2a:17:4e:e7:f1:6c:7f:96:06:16:ae:68:8c:36:24:06:
36:ed:c9:65:85:94:91:88:fb:00:eb:af:b4:15:c3:fb:48:b1:
35:d5:ca:9a:e5:2b:4c:98:e5:fe:cf:5f:e9:74:fa:90:01:6c:
3b:13:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:10 2025 by rpki-client