Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa
File: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (raw, json)
Hash identifier: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=
Subject key identifier: BC:20:EE:63:79:71:0E:F1:46:97:F4:24:CD:51:5B:08:A6:FE:66:C1
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747E03C48CCBA3319347C1D8D1092F8
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200299
IP address blocks: 2a04:ff00:b00b::/48 maxlen: 48
2a04:ff07:fefe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e0:3c:48:cc:ba:33:19:34:7c:1d:8d:10:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc20ee6379710ef14697f424cd515b08a6fe66c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:53:b2:7d:f4:3b:49:97:19:94:a8:41:63:
c7:c5:89:56:ed:35:85:fc:19:3a:88:75:f6:8f:7f:
99:60:49:63:f5:fb:32:5d:b8:80:ba:ca:97:89:e5:
02:e7:dd:d2:8b:07:af:06:ad:02:07:57:b0:e0:cc:
60:65:f4:e6:d6:4c:03:37:58:a7:43:c1:e3:b3:70:
0b:f4:64:88:58:09:1b:98:c2:d2:17:c8:f4:bf:42:
ca:ff:58:81:9d:c4:d3:16:54:bb:c8:e7:2d:a4:ea:
9a:f1:5c:1d:65:77:2b:c5:ee:28:6e:fa:28:25:5e:
48:41:38:fc:ae:9a:2f:4b:e2:53:43:7c:c0:36:8c:
57:48:5d:60:d1:fd:d5:a4:c4:37:dc:28:9c:5d:58:
15:89:f2:89:2d:bc:df:62:16:96:5f:a5:44:03:35:
29:26:14:42:08:c1:e4:a8:ff:5e:2d:22:cb:57:28:
33:fc:7f:11:57:56:3a:28:e2:0b:4a:62:98:9e:70:
23:85:7c:22:09:36:45:6f:75:14:9c:5f:75:00:0c:
da:c1:a7:7c:a9:6b:e5:1c:93:03:8f:dc:86:32:25:
e6:73:42:d3:aa:0c:60:dd:65:71:f1:80:22:01:ef:
a7:c3:3d:ee:86:e6:55:7f:c2:14:bd:bd:e3:fa:4f:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:EE:63:79:71:0E:F1:46:97:F4:24:CD:51:5B:08:A6:FE:66:C1
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:b00b::/48
2a04:ff07:fefe::/48
Signature Algorithm: sha256WithRSAEncryption
90:f4:41:66:6f:1f:79:be:0f:3f:77:50:dd:f7:f6:12:21:91:
8f:a7:e1:a8:0f:ab:cc:d7:ab:5d:75:00:87:2e:06:cb:a8:0f:
9a:a0:a9:98:49:f3:7a:01:9f:e5:b5:c7:2d:44:d6:b8:5b:d1:
ea:29:35:c8:ff:39:e7:ea:4c:5e:a2:4d:1a:1a:e2:96:1a:3e:
df:b4:71:ce:c6:6e:97:f1:6e:1f:66:73:31:2e:d0:3e:35:6c:
62:13:e0:d0:d7:60:af:3a:af:3c:6a:6e:d2:0e:27:6c:ed:4f:
59:59:72:14:16:23:4e:d2:46:44:c4:05:5e:ef:6f:5f:fd:c9:
fa:f3:eb:7c:a8:e7:7e:30:27:6d:f3:e2:02:f0:3b:70:2d:01:
ef:84:36:70:ea:b3:8a:43:58:5c:f5:f7:76:4b:96:e1:98:54:
1c:bd:db:09:3e:73:37:c0:e9:54:a8:2c:8c:41:ac:7b:16:de:
8f:76:4b:ec:7d:98:fa:13:ee:72:fb:bd:d7:ad:b1:a1:5b:de:
1d:3e:b4:30:e5:9e:c0:f0:47:93:d9:17:41:b3:71:21:e7:18:
48:f5:ee:c1:65:a4:67:35:28:85:c1:19:17:1d:a6:e4:f9:b9:
3a:24:70:7a:73:28:6b:af:72:ba:19:49:52:32:6d:1e:e2:88:
ef:de:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:03 2025 by rpki-client