Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VO1QZo2vfxheLbeFL1rejYxNYBI.roa
File: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (raw, json)
Hash identifier: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=
Subject key identifier: 54:ED:50:66:8D:AF:7F:18:5E:2D:B7:85:2F:5A:DE:8D:8C:4D:60:12
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0194252237C9DFDA93FEA42F02D274C77FAC
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VO1QZo2vfxheLbeFL1rejYxNYBI.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201749
IP address blocks: 2a04:2dc0:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:c9:df:da:93:fe:a4:2f:02:d2:74:c7:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ed50668daf7f185e2db7852f5ade8d8c4d6012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:63:8e:df:c0:dc:a2:94:97:9a:13:49:b8:
09:06:2b:05:3d:be:d2:3a:51:60:d8:28:d5:9c:08:
f8:00:d0:57:95:9c:fe:5f:84:69:99:ad:6f:7a:74:
5a:c0:aa:f4:ce:67:39:64:16:ca:dd:26:2b:11:36:
27:ff:e3:53:e4:a4:47:f0:94:b6:42:ae:82:7a:b9:
2a:83:fa:7a:85:c9:40:aa:23:01:13:fb:40:c5:89:
8a:c2:3a:e4:a5:e4:36:d6:30:6a:35:6f:a0:4a:09:
ce:a8:ef:a0:8b:ac:5d:3b:d8:10:06:cf:99:18:87:
20:1a:62:90:2d:70:97:ab:0a:d7:c5:f6:a3:81:47:
c7:88:d8:86:57:32:e7:dc:69:7b:c4:63:1c:30:8a:
37:85:1a:52:30:f4:96:32:cf:fa:57:21:17:cc:e6:
ee:8e:81:36:f4:6f:dc:1c:20:02:fd:df:3a:72:b7:
64:99:20:e6:c9:0e:64:d0:3e:be:4e:8a:1d:48:a0:
b4:67:9a:25:3a:50:05:9e:1f:5b:b8:de:19:4b:b9:
f5:ec:d8:dd:08:58:64:13:21:d4:47:d9:e1:b8:7c:
40:1d:e2:ad:00:f5:3f:71:fa:b4:4b:2a:d9:88:32:
d1:b7:09:13:d8:1a:b4:07:47:28:3b:8d:cb:25:71:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:50:66:8D:AF:7F:18:5E:2D:B7:85:2F:5A:DE:8D:8C:4D:60:12
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VO1QZo2vfxheLbeFL1rejYxNYBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
54:6d:f1:c5:ff:c3:63:53:a4:92:9e:c3:08:5c:4e:d9:7f:82:
8d:bc:5b:a8:bd:c5:2f:c6:51:28:35:bb:4f:14:c3:25:1b:79:
7e:da:7c:16:b1:27:05:55:a2:fc:04:00:bc:68:7b:3c:3a:b5:
f5:00:d1:fc:9b:5a:4e:08:db:ec:8d:0b:93:01:58:34:98:99:
d8:9f:8e:a3:bb:bf:6b:94:a2:4c:ec:5e:f1:94:04:9e:36:ef:
b0:6d:2b:af:22:83:5b:73:2d:98:1b:a3:3c:dd:c8:40:31:93:
6f:12:13:85:8e:66:d0:28:a9:06:89:7d:c4:38:54:94:5a:c8:
99:23:c1:d1:b9:3b:31:e4:0a:62:c5:23:dd:c4:5b:cc:86:35:
fe:01:bb:6c:69:ce:aa:0b:ec:ff:ac:bc:7a:7b:c2:b7:b1:7d:
59:5c:df:0f:ab:2a:0e:bd:ba:d6:d1:63:04:b4:ee:4e:0e:6f:
43:f5:77:17:71:a7:e7:19:f8:56:f9:c9:45:e2:c1:eb:56:af:
bc:5a:13:c0:59:fe:bd:c1:73:f6:66:df:c6:61:47:e4:69:7c:
6e:5d:55:0e:b1:10:35:3e:1f:29:d2:5e:6b:81:e2:16:f6:a4:
f1:ad:71:cf:16:d3:4e:8c:08:a3:46:ab:ef:44:62:c1:1f:95:
ba:dd:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:09 2025 by rpki-client