Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/VgjHvOxBU8eTA_iP_fNUCn81xQg.roa
File: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (raw, json)
Hash identifier: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=
Subject key identifier: 56:08:C7:BC:EC:41:53:C7:93:03:F8:8F:FD:F3:54:0A:7F:35:C5:08
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 01942521BF1193309B5BD52B3471F9248653
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/VgjHvOxBU8eTA_iP_fNUCn81xQg.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15699
IP address blocks: 46.226.40.0/21 maxlen: 32
2a0b:9d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:11:93:30:9b:5b:d5:2b:34:71:f9:24:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5608c7bcec4153c79303f88ffdf3540a7f35c508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9c:3c:a4:c0:00:e6:a7:e0:48:16:4a:9b:f3:
9d:75:7b:62:3a:bf:ed:81:b5:54:3c:20:74:0b:b1:
49:c2:48:ce:2c:42:30:4c:04:bd:94:e4:ac:17:3f:
5c:ee:67:78:92:93:58:8d:b9:c2:90:cb:e6:39:b7:
ce:b3:7a:4a:54:14:38:dd:75:e2:5b:8a:8a:f0:61:
e5:f0:c0:3f:89:76:d2:0d:5d:1e:da:d7:1b:dd:35:
5a:7c:15:f2:1c:50:5d:7f:af:6c:dd:0c:e3:51:a8:
10:44:2b:89:be:db:09:90:e4:61:9d:1e:17:f3:68:
fb:86:68:b7:eb:60:59:f9:dd:cb:11:05:c5:f0:91:
73:96:82:68:26:8b:03:e1:e7:4b:29:fe:fd:03:1d:
2c:c3:65:61:02:cd:cb:4d:f5:db:3e:09:3e:0f:9d:
6a:75:f4:e7:71:96:56:ab:c5:db:58:bc:ae:96:da:
b9:3e:18:d2:0a:69:4a:21:e8:6b:d1:12:64:86:cf:
64:05:f8:26:e1:47:d6:d2:67:24:dc:2b:e1:f7:72:
f8:4a:d1:f1:aa:22:82:12:37:df:bd:de:e5:a2:82:
56:ed:56:ba:57:86:90:4d:f3:fc:d8:57:cf:b7:36:
e7:41:a5:dd:7c:16:53:e0:6d:73:d5:2c:a9:8f:b7:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:C7:BC:EC:41:53:C7:93:03:F8:8F:FD:F3:54:0A:7F:35:C5:08
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/VgjHvOxBU8eTA_iP_fNUCn81xQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.40.0/21
IPv6:
2a0b:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
56:80:b3:48:5a:fc:d1:9d:5e:a7:f2:fb:71:07:3a:d1:cd:82:
21:72:ed:fe:78:c8:6e:d4:f7:c9:56:8a:ca:7c:3e:31:ff:b8:
48:af:6c:60:f2:1f:62:34:63:03:4d:22:27:6b:d5:e1:c0:6f:
ca:92:73:55:f2:42:6d:71:9e:9f:b3:d8:4d:58:5c:68:61:c2:
97:b3:92:37:27:01:f5:06:86:3b:1b:b2:19:d7:34:98:bc:d5:
d0:b6:2b:0b:e2:91:ac:a8:4c:6b:0d:40:55:32:80:bc:c7:8b:
d5:6f:1d:ca:eb:6e:8f:84:c9:f2:5a:b9:c0:0a:62:09:d1:1f:
00:33:43:4f:47:ec:f5:a2:3b:8d:f0:38:3a:c7:b9:30:a1:e8:
d3:ab:c2:eb:af:b1:ff:ab:4f:b7:c8:fe:5c:c6:e7:bb:d7:10:
18:52:9e:af:f8:e5:fd:dc:fe:4a:60:b9:55:7c:1a:e0:3c:fe:
06:23:a5:c9:86:44:08:b5:2c:5f:75:b0:a4:af:50:26:e6:bb:
ae:9b:3a:2f:5b:72:83:dc:45:76:ff:6f:9d:76:b2:7c:45:ef:
0c:4b:be:15:da:34:d6:a2:3f:2a:18:2c:0f:13:29:9d:ab:7e:
42:fd:2c:0e:3c:da:aa:0e:a6:a2:09:cc:bd:d0:45:72:26:18:
b3:e3:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:24 2025 by rpki-client