Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/vAu0TRUZ6oCOaUrWzBzbupAQywk.roa
File: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (raw, json)
Hash identifier: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=
Subject key identifier: BC:0B:B4:4D:15:19:EA:80:8E:69:4A:D6:CC:1C:DB:BA:90:10:CB:09
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019423D7C46DD9B98B08E8C94B624B252BF8
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/vAu0TRUZ6oCOaUrWzBzbupAQywk.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398577
IP address blocks: 144.57.40.0/21 maxlen: 21
144.57.40.0/24 maxlen: 24
144.57.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c4:6d:d9:b9:8b:08:e8:c9:4b:62:4b:25:2b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0bb44d1519ea808e694ad6cc1cdbba9010cb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:28:e0:98:ee:55:f6:4f:ff:c8:d5:95:5f:
d9:15:5a:e3:f6:e1:18:70:9e:3c:cf:6f:5f:62:eb:
53:20:19:d9:23:f2:1e:59:6b:43:b7:67:de:ef:c0:
0e:8b:81:52:ea:78:a3:34:a9:e8:56:8e:ce:04:96:
8f:c5:7e:71:6f:fd:22:19:d8:bf:52:38:1a:5f:a9:
27:f4:15:1c:f8:f4:5e:46:88:6b:d4:a2:c6:fe:59:
81:51:98:ce:35:cc:cc:cf:81:4f:66:12:e9:1a:ab:
40:a1:96:dd:a9:4d:4c:d0:10:fa:15:0f:97:01:6f:
12:15:b5:be:b0:4e:ea:27:3a:ef:a1:20:8c:96:19:
40:db:a7:d6:7d:d3:34:8e:2c:d3:0f:be:5b:66:55:
cc:39:ad:37:9e:c7:d6:71:52:03:40:a1:8d:8b:48:
71:3a:1c:7b:f0:4a:3f:a9:df:c8:fa:2d:a6:98:9a:
ff:1a:17:8c:9e:da:76:f8:6e:02:10:10:6f:13:66:
a2:51:62:76:41:ac:90:77:2f:50:61:82:0f:8b:e4:
24:9b:76:4d:49:64:e9:31:57:e3:66:ef:d7:2b:b7:
05:70:30:72:0b:ab:86:61:10:e8:ad:aa:de:8a:5f:
50:0e:43:8c:97:fe:c0:2d:c7:c8:a2:d5:e9:8b:09:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:B4:4D:15:19:EA:80:8E:69:4A:D6:CC:1C:DB:BA:90:10:CB:09
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/vAu0TRUZ6oCOaUrWzBzbupAQywk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
73:8f:2d:b1:80:58:79:6b:7f:99:93:43:2d:59:99:cd:d1:3f:
53:4b:ac:b1:01:31:09:9c:5b:02:3e:3f:cf:eb:41:8d:1e:39:
50:65:ef:49:9a:4d:34:0d:1b:53:70:bf:ab:4a:69:2a:b6:95:
45:be:5f:af:b0:c2:54:6b:d3:8d:67:62:f5:b4:23:6a:0f:86:
47:46:26:b0:84:09:7c:43:0b:5e:b7:bb:5b:39:b3:7c:b8:f2:
f2:73:07:7e:de:b4:75:55:4e:53:6e:ed:16:6e:11:01:96:dd:
30:61:e4:12:3a:67:12:fa:e2:16:ee:61:79:20:cb:e6:ac:08:
cc:f4:b7:b8:11:89:e0:a6:6a:6a:68:26:7b:76:7c:c1:cd:f9:
8e:0e:9c:b6:14:3f:aa:bf:c5:64:02:dd:85:4c:42:1b:fb:ee:
f3:72:42:72:16:41:6a:d3:9e:4d:75:7c:43:f7:29:a3:0f:13:
87:4f:2e:71:5d:f9:d1:6d:ee:91:56:42:5e:43:13:8c:c6:93:
76:87:c4:c7:92:c6:61:1b:7f:98:d1:f3:89:de:9a:15:07:c7:
aa:8c:d1:a6:ba:03:73:a7:2b:09:ba:3d:dc:42:24:a7:92:d8:
03:87:f0:51:44:a8:b7:b9:61:5c:20:3a:77:2d:79:a4:bf:95:
a1:b5:b0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:24:15 2025 by rpki-client