Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Vmy4sbz8rbW4EPp2s0u0jf2lDwE.roa
File: Vmy4sbz8rbW4EPp2s0u0jf2lDwE.roa (raw, json)
Hash identifier: /4JnH5X7QA83fTLr7t6BcG7oskxmI8V65FhzLFOxcgM=
Subject key identifier: 56:6C:B8:B1:BC:FC:AD:B5:B8:10:FA:76:B3:4B:B4:8D:FD:A5:0F:01
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59A53B9914B7A69B115A0B728B3B5
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Vmy4sbz8rbW4EPp2s0u0jf2lDwE.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2281
IP address blocks: 2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9a:53:b9:91:4b:7a:69:b1:15:a0:b7:28:b3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566cb8b1bcfcadb5b810fa76b34bb48dfda50f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:94:0e:32:46:09:63:0b:37:3f:e9:31:c0:
6f:fe:d9:99:bf:8a:32:16:fc:b4:54:d7:ed:d2:de:
7f:cc:fd:4f:99:61:49:df:0a:9f:70:a8:f0:55:e4:
7a:32:a7:2b:7c:51:4b:02:9f:31:12:e1:f8:50:52:
98:16:e7:16:14:71:ec:58:db:62:1a:7b:db:33:3e:
b6:74:36:7f:5b:51:0f:47:3d:37:70:ec:72:0c:be:
8c:76:8a:8b:61:a0:a1:4a:ea:fd:bf:3d:2c:17:93:
f0:16:c5:01:6e:64:db:00:8b:8d:dd:ef:66:14:6f:
04:67:ae:86:22:bf:54:ef:76:6d:16:3d:cb:ef:44:
7a:3b:d6:e0:7d:c5:a5:75:8e:62:a9:9d:44:ce:5b:
c4:1b:8d:26:d3:96:5c:de:42:01:63:22:db:d7:fb:
4a:66:28:7a:ce:f9:50:bd:cc:9e:50:99:a2:25:45:
c6:85:c2:c6:cd:f3:20:06:b1:5e:25:f3:3d:6f:8c:
38:19:41:b0:d7:f9:39:68:03:ae:89:ee:41:69:eb:
f6:43:6b:bb:f3:72:d4:d8:d3:80:42:13:df:9f:0a:
e6:e8:88:71:55:e6:c1:a5:bb:76:82:1c:e3:fd:88:
ea:41:b7:15:fd:28:8a:44:ae:20:da:7d:08:47:bd:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:B8:B1:BC:FC:AD:B5:B8:10:FA:76:B3:4B:B4:8D:FD:A5:0F:01
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Vmy4sbz8rbW4EPp2s0u0jf2lDwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
4e:90:4a:ed:13:fc:e1:8b:f9:b6:65:5a:24:50:45:a7:2f:56:
52:a6:ba:82:d0:b2:80:37:81:3c:ab:38:04:75:a7:d6:5f:0f:
40:3a:1e:d0:36:26:f5:40:30:25:60:cc:98:91:2e:89:bf:2e:
d8:a0:53:f6:2a:5b:fb:ac:0e:4a:39:a2:ca:7e:b4:e5:d6:28:
ad:8b:98:a9:38:f7:fb:c9:0f:fb:a7:9b:34:ef:3a:2f:2b:d0:
a1:e6:7b:95:89:df:6d:36:5b:90:a8:9a:eb:91:4d:85:af:0b:
df:6c:2b:8a:02:73:02:36:aa:30:89:70:e1:e9:a2:76:eb:23:
2c:7d:c3:01:e1:bc:fd:a6:84:23:ba:63:5e:26:e9:c4:36:6b:
b1:26:26:6a:09:78:03:7f:c0:06:65:04:36:ef:c5:74:b2:19:
c0:af:1a:c3:26:2a:b3:75:12:03:47:a1:5c:d8:a4:31:cc:70:
6b:c6:e6:e7:58:36:bc:9b:f8:b1:cd:7c:d0:67:df:07:5c:71:
85:98:e8:36:ec:6d:9a:e0:af:dd:68:a0:91:e7:d0:f6:8a:27:
87:7c:c8:d8:ac:37:a6:c5:88:62:2e:b5:03:ab:06:52:d4:30:
b3:af:51:1c:88:e6:44:22:2e:3a:0f:33:02:e4:09:4c:1d:03:
f4:2a:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:58:38 2025 by rpki-client