Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/dTnLOVxGDlmwLoq4gBTICx-ugUU.roa
File: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (raw, json)
Hash identifier: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=
Subject key identifier: 75:39:CB:39:5C:46:0E:59:B0:2E:8A:B8:80:14:C8:0B:1F:AE:81:45
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C5A6E719CF222C69B209E7F70CDD
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/dTnLOVxGDlmwLoq4gBTICx-ugUU.roa
Signing time: Thu 02 Jan 2025 17:52:31 +0000
ROA not before: Thu 02 Jan 2025 17:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47333
IP address blocks: 213.108.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c5:a6:e7:19:cf:22:2c:69:b2:09:e7:f7:0c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7539cb395c460e59b02e8ab88014c80b1fae8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:c8:d7:b8:9c:16:59:40:bb:06:a3:a0:7f:
61:2f:c0:d5:d9:2e:2a:f6:26:fd:99:a8:f3:16:40:
8e:30:a0:01:e0:f5:d1:ab:77:5b:ae:93:d6:05:87:
77:ab:61:6b:21:a8:d7:dc:c3:c0:f5:7f:3b:7e:ac:
6e:77:13:57:11:06:a3:0e:f7:25:23:6c:83:bc:c5:
58:53:7e:be:c9:43:79:04:8d:c3:04:eb:ce:4f:4c:
04:0d:23:80:7d:ad:ca:fa:e4:dc:fc:81:e9:f2:f2:
30:5c:74:b0:20:17:cc:85:99:63:29:61:da:b5:59:
c3:f7:c4:34:55:84:88:00:35:cc:13:fa:a5:2c:34:
5b:00:39:e6:1e:67:a2:67:db:94:a4:04:a1:84:13:
8a:99:57:b7:75:3f:19:21:2b:30:61:7c:8f:af:d4:
ff:ab:dc:d3:6f:86:00:42:53:e3:7d:83:fb:ff:61:
56:c2:6b:f5:e5:d1:b6:75:b5:88:1e:9c:ff:37:e9:
e1:0f:1a:2f:90:ff:18:33:d2:b6:50:6e:97:75:a4:
88:c0:5b:78:61:fc:2a:a0:8e:49:1f:12:b2:bc:7b:
4b:74:2f:45:10:06:c5:0b:9a:07:80:d5:da:83:f7:
9b:60:81:a2:d7:d5:92:9e:91:82:0f:53:34:6c:7d:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:CB:39:5C:46:0E:59:B0:2E:8A:B8:80:14:C8:0B:1F:AE:81:45
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/dTnLOVxGDlmwLoq4gBTICx-ugUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:63:c3:90:3d:40:cf:f3:bc:ac:05:2e:4c:cf:cd:3e:3f:d9:
49:5c:61:8a:89:04:42:e9:bf:6f:1b:b8:e0:9a:8c:db:a8:df:
38:0d:d3:8a:61:f4:3d:c9:d1:da:14:b0:6b:de:86:12:4d:29:
37:c9:d1:1c:f8:64:07:5a:32:ba:86:37:24:9c:cb:6c:c5:df:
0a:70:b7:3f:28:6d:64:4f:49:74:a5:bf:af:05:a7:99:73:ee:
fb:25:4d:91:90:38:14:cc:f7:0c:fd:78:82:a0:be:b7:34:99:
dc:31:61:df:0c:c4:5f:cf:cd:99:22:fe:d6:0c:00:c0:45:62:
3b:6b:9a:d2:43:7a:e7:0c:f4:75:5c:2c:ac:b4:62:be:e0:ba:
3e:69:ed:7c:58:e4:03:e0:62:14:b2:57:25:26:9b:a6:e7:37:
d9:19:ed:44:66:eb:7d:4c:4a:d7:bb:d4:c6:f6:d1:b9:3c:80:
1f:de:ff:53:55:8e:8a:f0:42:28:81:6c:30:67:b6:5b:6e:bc:
e2:b1:95:d3:eb:49:26:99:f5:ea:37:6a:54:6a:a6:b0:f4:87:
8c:c0:71:87:f2:81:2a:30:2b:11:69:ee:01:36:6f:05:78:6c:
d2:f9:3d:cd:03:b0:bd:1a:d1:4f:a2:f9:b4:a1:0f:7d:df:3d:
0c:da:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:48 2025 by rpki-client