Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAZxSJwcgiBcI_82IoG7w0HDsHY.roa
File: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (raw, json)
Hash identifier: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=
Subject key identifier: BC:06:71:48:9C:1C:82:20:5C:23:FF:36:22:81:BB:C3:41:C3:B0:76
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0194266B9A5CCB284956C2C9605B06854376
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAZxSJwcgiBcI_82IoG7w0HDsHY.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214359
IP address blocks: 2001:3680::/29 maxlen: 29
2001:3680::/48 maxlen: 48
2001:3680:1::/48 maxlen: 48
2001:3680:2::/48 maxlen: 48
2001:3680:3::/48 maxlen: 48
2001:3680:4::/48 maxlen: 48
2001:3680:5::/48 maxlen: 48
2001:3680:6::/48 maxlen: 48
2001:3680:7::/48 maxlen: 48
2001:3680:8::/48 maxlen: 48
2001:3680:9::/48 maxlen: 48
2001:3680:a::/48 maxlen: 48
2001:3680:b::/48 maxlen: 48
2001:3680:c::/48 maxlen: 48
2001:3680:d::/48 maxlen: 48
2001:3680:e::/48 maxlen: 48
2001:3680:f::/48 maxlen: 48
2001:3680:10::/48 maxlen: 48
2001:3680:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9a:5c:cb:28:49:56:c2:c9:60:5b:06:85:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0671489c1c82205c23ff362281bbc341c3b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:af:20:e9:a7:81:a8:1e:d5:a4:3c:f0:c5:
7c:e0:6e:42:d6:09:4e:a6:51:25:db:e5:35:c0:b0:
66:bc:ce:70:fc:5f:9c:a7:cc:4d:58:08:a3:ad:87:
26:e0:dc:5e:c3:5c:44:eb:ac:02:74:ca:3c:f7:86:
37:52:9f:4e:49:cd:df:ae:0b:40:ab:57:8a:f3:15:
f1:f5:9a:e2:a3:dd:ad:be:d5:67:f8:cf:f1:c3:1e:
b1:a0:aa:ab:08:ea:21:54:cb:a2:71:0e:dd:46:2b:
3b:dd:e4:df:15:3a:21:d9:cf:e8:e6:ae:f5:29:4c:
89:2c:74:71:56:86:ac:4e:2a:f4:a3:7c:67:4e:69:
6a:dd:e6:f4:65:79:0e:52:66:9e:0b:51:94:63:33:
45:a1:f0:ff:5d:da:a0:35:01:eb:04:f3:53:66:c6:
93:42:4b:f2:a6:fa:ca:87:1e:d6:8e:e0:35:25:56:
22:6e:8d:4d:b7:a6:c3:ad:49:6b:6c:6d:37:79:f6:
03:db:18:10:67:8c:aa:c1:dc:7f:70:5d:86:68:56:
69:db:e2:27:09:04:ab:c8:e1:76:50:94:48:b6:d3:
b5:ca:b1:ad:16:79:a3:03:65:55:71:08:8f:17:01:
b4:14:9b:0c:0b:cb:9d:f4:8d:33:49:ec:da:e1:82:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:71:48:9C:1C:82:20:5C:23:FF:36:22:81:BB:C3:41:C3:B0:76
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAZxSJwcgiBcI_82IoG7w0HDsHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3680::/29
Signature Algorithm: sha256WithRSAEncryption
09:4c:d0:03:99:2a:2e:f2:f9:ea:ab:19:90:e4:a0:0e:0c:2c:
1e:21:95:d4:d9:45:63:ee:7e:aa:9e:37:43:bc:e7:db:58:eb:
17:62:9e:22:16:f7:50:a4:dc:04:02:f8:67:c3:58:bd:47:76:
85:ca:e4:c3:5a:d2:0e:e6:3b:9f:28:6f:1a:3a:c3:7d:6a:cb:
04:1d:34:de:83:88:5b:d9:ed:78:32:d8:bc:68:31:36:24:4b:
5b:1c:31:36:1a:da:4a:4b:da:96:3a:24:91:8c:ea:c7:dd:e8:
02:41:ed:49:93:fd:ac:db:aa:85:29:29:4c:d0:89:48:5d:1c:
c3:a1:73:f9:1f:ba:92:e2:e0:60:64:91:20:9b:dc:8a:25:cc:
06:af:dc:15:91:e2:77:6f:ee:6c:a8:47:75:f6:c2:86:17:85:
52:3e:c6:e9:66:76:75:2e:70:9c:70:39:f9:15:dd:32:8a:51:
c5:83:0e:fe:9a:0a:30:8b:31:0e:1a:30:93:77:e1:5f:e8:6f:
c7:52:9a:ab:88:c5:1f:03:2f:48:ce:d0:be:cb:6a:06:1f:4b:
9a:43:8d:1e:32:89:10:bd:4b:f8:82:0c:e5:62:08:fe:cf:86:
22:de:79:98:9c:29:1d:89:a1:cf:fd:66:2b:a9:9e:0c:22:df:
67:41:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:30 2025 by rpki-client