Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/vCqdKv7R0SPqg2beE-raqVkN9dk.roa
File: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (raw, json)
Hash identifier: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=
Subject key identifier: BC:2A:9D:2A:FE:D1:D1:23:EA:83:66:DE:13:EA:DA:A9:59:0D:F5:D9
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01942444864F28CBF1D14E5F2E5E7DD77E91
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/vCqdKv7R0SPqg2beE-raqVkN9dk.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 134.169.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:86:4f:28:cb:f1:d1:4e:5f:2e:5e:7d:d7:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2a9d2afed1d123ea8366de13eadaa9590df5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:67:33:b2:3d:ab:da:f3:84:ce:0e:19:2b:
13:95:dc:ae:36:56:46:a2:d2:06:6a:aa:a0:17:66:
77:80:c3:07:53:69:e2:a3:fe:78:5b:52:18:58:11:
7e:81:dd:26:25:01:5c:44:79:2b:4a:47:1b:ff:ec:
6b:1c:b5:10:88:1c:13:7b:46:cb:0e:ad:2c:32:c4:
f5:03:bd:8c:42:08:4d:0c:7d:68:8d:3d:d0:5e:6c:
72:55:e8:da:6d:d3:0b:0b:fe:34:3d:8b:21:4f:12:
a5:57:8f:fc:84:98:5a:6e:93:76:46:59:00:ca:87:
3a:c4:cb:60:c9:5c:30:4f:fa:46:a6:ff:f3:30:04:
d1:87:05:e4:a5:dc:29:59:24:a2:8d:25:ce:34:4a:
88:20:5b:57:47:80:7c:56:40:da:4f:4f:87:9c:1b:
a7:ae:1d:e8:1f:4f:5e:5d:9b:2a:b3:62:fc:bd:bf:
7e:b3:2d:62:17:7d:41:b3:99:39:b7:02:a8:ca:51:
5e:2f:ba:28:50:1b:29:c3:f1:00:95:d4:85:51:ae:
1c:ff:d5:1c:ce:a6:22:71:94:2f:a3:6b:83:67:03:
09:a0:b2:57:31:70:44:af:e8:44:6f:08:16:a9:71:
9a:d6:ff:d0:5d:fb:41:78:6f:11:d3:7d:29:2f:81:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:9D:2A:FE:D1:D1:23:EA:83:66:DE:13:EA:DA:A9:59:0D:F5:D9
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/vCqdKv7R0SPqg2beE-raqVkN9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:7a:13:71:e4:ae:e0:a0:94:f2:a4:78:9f:ef:1f:42:16:1e:
5b:5a:c0:0d:0e:37:b3:79:c8:a9:42:af:e4:11:17:4e:51:5b:
17:f7:6f:a8:d8:c6:e9:15:bb:1c:39:1c:96:96:a7:d2:52:4b:
9b:bc:ce:dc:0d:ae:85:03:58:81:86:79:60:32:f2:07:b9:13:
50:f6:c0:c8:93:91:0d:e8:0a:3f:de:a9:fa:25:3f:1e:39:d4:
94:8d:f4:f5:bd:eb:4e:eb:49:82:7e:6d:75:72:20:b3:1d:bc:
fe:b0:ff:ad:bd:fc:5e:1c:da:46:c9:76:31:16:fc:a2:02:a5:
ed:56:20:fd:94:6b:8b:34:3c:9d:d3:7d:f9:31:3c:d9:45:37:
97:7c:43:2b:35:bf:d2:6b:7b:25:6e:6e:f1:4b:0d:c4:68:21:
a7:19:bd:12:fd:62:46:93:7f:7b:7b:25:bd:95:d1:56:01:23:
00:c0:0c:10:5a:fc:91:e3:7d:71:36:f7:f7:a4:12:2c:d3:ca:
eb:90:85:2e:84:47:ea:ac:a7:e0:d9:94:14:d0:82:bc:6e:5a:
af:2f:22:24:03:34:ab:37:11:79:66:2a:43:df:7c:83:e6:c5:
4c:e8:63:9a:cd:20:bd:06:89:76:91:4f:59:fa:fb:5e:f7:37:
34:95:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:28 2025 by rpki-client