Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa
File: pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa (raw, json)
Hash identifier: DbYaOM55FhKgmSDQxNENLAyQLbX8jvEl6m8BL1vC3Fo=
Subject key identifier: A5:5B:C1:E0:33:E8:AB:14:B0:28:0E:DE:49:2E:E3:16:CF:90:32:DC
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019424B27A4E98E605273EB0125F93CB784C
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa
Signing time: Thu 02 Jan 2025 01:47:43 +0000
ROA not before: Thu 02 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62445
IP address blocks: 2001:678:898::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7a:4e:98:e6:05:27:3e:b0:12:5f:93:cb:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55bc1e033e8ab14b0280ede492ee316cf9032dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:fb:8d:4c:ec:42:b0:b6:0f:f3:88:6c:a5:
cc:92:cc:ee:f4:92:23:88:b1:09:ec:dd:9c:cf:70:
10:09:0a:c2:9a:81:b6:54:d4:0d:6b:fb:d9:08:4a:
2e:1c:6d:43:e9:4d:77:ce:68:cf:b0:48:59:48:d9:
f2:ac:ec:a2:bf:bc:0c:13:29:ae:1d:16:08:94:ed:
3b:82:8d:e8:43:3c:a5:b0:09:06:0d:85:c1:dd:8b:
ea:b3:d8:be:4d:68:9e:8e:df:9f:31:1a:44:12:38:
6d:f9:f3:2c:ec:ae:62:55:6f:3d:76:93:9f:d8:11:
e3:df:e8:2a:15:1c:31:52:b7:c3:45:62:5d:bb:09:
52:ae:64:72:40:7e:3c:44:a9:ea:98:e1:d6:76:3e:
6a:1d:f9:37:bb:59:dc:b3:41:09:c8:29:9c:f8:e6:
14:81:56:c6:27:44:49:5c:0e:5a:84:16:71:6b:31:
d6:d7:3a:4e:b3:d8:95:aa:86:1b:3e:b9:f8:c1:ca:
c3:01:07:49:05:0a:3c:4f:79:7d:0c:3f:1b:88:f9:
9d:90:62:56:f8:9c:0b:13:3b:38:37:46:6a:c6:6f:
19:23:85:d8:3d:c6:b9:f3:f3:97:0e:1e:4f:61:aa:
3c:9f:b8:f4:10:a4:3b:16:41:bf:eb:ad:53:72:73:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:C1:E0:33:E8:AB:14:B0:28:0E:DE:49:2E:E3:16:CF:90:32:DC
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:898::/48
Signature Algorithm: sha256WithRSAEncryption
0a:2b:79:34:e3:37:a3:e7:ff:97:61:27:c6:dd:79:31:3b:66:
b1:38:c4:8b:97:17:97:a1:05:89:91:46:e8:4b:40:80:eb:17:
41:24:63:f7:81:2c:a5:8d:dc:f5:67:7a:2a:c3:57:89:19:f1:
97:54:0b:b5:64:c8:5e:46:a0:07:58:ab:13:4c:9d:69:67:2d:
66:30:cb:17:5b:0f:a8:23:21:f0:95:b6:55:76:36:84:0c:88:
ed:fe:a7:23:85:08:c0:08:50:ae:46:14:85:d7:09:58:8d:ba:
be:b8:e6:0c:ab:d4:f3:5e:4f:9a:f3:11:6a:2f:cd:63:52:40:
0c:2a:f4:16:ca:2f:e8:75:54:78:32:46:ce:53:bc:51:26:3f:
f1:1f:6f:33:46:03:39:52:e2:dd:80:a4:56:8f:9b:28:ae:9a:
a1:9a:12:bd:57:3f:fd:46:b3:94:65:5f:1d:ce:69:3e:69:87:
3f:e2:37:de:e0:5e:98:38:01:4c:f3:38:8f:a7:66:df:a2:f9:
1d:1d:d3:25:56:b7:4f:7f:2a:a3:fa:e8:17:20:2f:59:a4:99:
8a:c4:56:8b:be:2c:6b:7a:0c:e9:50:b8:66:a6:89:1f:f6:59:
3b:2b:2d:94:42:fe:46:c5:c9:7c:0a:b1:1c:1c:01:ac:8c:42:
b1:f8:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:16 2025 by rpki-client