Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/vq_lB1n1a8tSkpEaBYJenT9A5i0.roa
File: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (raw, json)
Hash identifier: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=
Subject key identifier: BE:AF:E5:07:59:F5:6B:CB:52:92:91:1A:05:82:5E:9D:3F:40:E6:2D
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 019421B1763A36EABE8575C621B1B4894CFF
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/vq_lB1n1a8tSkpEaBYJenT9A5i0.roa
Signing time: Wed 01 Jan 2025 11:47:45 +0000
ROA not before: Wed 01 Jan 2025 11:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204894
IP address blocks: 91.239.240.0/24 maxlen: 24
2a12:fc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:76:3a:36:ea:be:85:75:c6:21:b1:b4:89:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Jan 1 11:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beafe50759f56bcb5292911a05825e9d3f40e62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:41:01:79:94:81:2b:fc:ee:7c:aa:9a:a3:
b2:69:fc:37:8c:4d:87:25:8c:87:49:92:26:cc:04:
a5:18:31:79:be:e5:ba:65:aa:8c:f9:8a:7b:6a:6c:
06:5f:39:dd:cf:38:06:9c:23:27:d2:c7:25:d1:11:
41:96:82:8a:5e:5d:66:74:77:31:3e:c8:d2:d3:4e:
98:f2:78:af:dc:86:34:cd:ea:1f:6e:b7:33:f5:91:
43:33:0b:c9:9b:20:9e:a7:68:7e:1c:93:eb:83:4f:
65:29:9c:f2:6d:d9:8e:06:07:ba:8b:9d:ef:63:d5:
5d:40:b7:81:ec:9a:29:35:a5:8a:ef:67:e0:06:35:
68:32:58:63:f2:ba:78:6a:a3:80:ba:18:ea:4f:82:
6b:5d:a3:8f:2c:50:8f:59:b0:a3:1d:0d:18:6d:d2:
66:e3:e4:78:bc:3b:db:a8:a2:80:20:ae:c2:f6:79:
d7:b9:1f:e0:8d:1c:78:6d:b2:b0:ea:25:18:08:ec:
aa:aa:23:cf:6a:7e:16:8e:00:8b:46:5b:76:6f:0a:
05:45:2f:d7:57:03:cb:9e:9e:96:a5:fc:7b:b6:cb:
b1:78:5b:d4:03:51:92:87:e5:89:8e:a7:92:00:9c:
10:2b:15:09:d7:b8:d3:cb:92:b1:7b:fb:99:d0:2b:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:E5:07:59:F5:6B:CB:52:92:91:1A:05:82:5E:9D:3F:40:E6:2D
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/vq_lB1n1a8tSkpEaBYJenT9A5i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.240.0/24
IPv6:
2a12:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
94:dd:e4:f1:5a:57:86:3b:84:5c:b1:bb:90:e3:35:87:25:97:
22:8a:7f:b4:97:b6:41:9b:8a:7d:cb:d7:81:ec:5c:50:68:37:
9b:5c:f6:8a:d1:cc:a3:29:51:e8:a3:e5:4f:d0:ea:61:76:91:
10:db:8f:a5:b5:0a:5e:25:80:09:b9:01:5c:e1:6f:d3:bd:ea:
bc:dd:9e:db:19:78:95:96:b6:c1:25:e1:d1:15:40:7b:6f:4b:
d5:bc:a2:6b:14:cd:4a:82:43:5b:3e:f9:b7:4a:72:44:0a:5a:
30:da:9a:d3:1d:7d:bf:79:9f:e3:a9:be:3a:59:38:b5:84:bd:
ce:81:ae:d7:e0:9c:fa:df:c6:d3:74:d0:44:c8:00:ad:23:bc:
ac:f1:2b:87:42:b6:c1:ea:89:c0:95:b1:61:14:d8:37:cd:47:
ea:54:58:2a:86:2f:71:c1:db:d0:04:1c:7a:a6:7b:0a:96:86:
b0:d6:7b:0b:8a:32:80:a8:93:3a:12:90:94:11:87:c4:80:49:
97:3d:1b:2c:b4:f6:00:93:5d:9b:34:42:10:86:db:7b:e1:d2:
a0:9b:75:4b:c7:a1:b9:84:02:fa:a5:71:f3:a3:9e:e3:b1:79:
c7:5d:41:75:fb:87:5d:2e:ae:e1:33:8e:68:2c:ff:0b:92:7b:
ed:fb:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:19:53 2025 by rpki-client