Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VaExz3Z7oukyF2co-VO61dhReyg.roa
File: VaExz3Z7oukyF2co-VO61dhReyg.roa (raw, json)
Hash identifier: ib/9LWEDVLButEYyxcEDQ7UvsMHcGUcCGOA2hLd8If4=
Subject key identifier: 55:A1:31:CF:76:7B:A2:E9:32:17:67:28:F9:53:BA:D5:D8:51:7B:28
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D990DB4776E6EA28590D6E7142A9E7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VaExz3Z7oukyF2co-VO61dhReyg.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215554
IP address blocks: 2a03:5840:116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:90:db:47:76:e6:ea:28:59:0d:6e:71:42:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a131cf767ba2e932176728f953bad5d8517b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:4d:db:6b:50:81:97:fa:31:06:44:3c:81:
84:1c:ed:26:ce:bc:36:8a:51:93:7e:0a:23:14:9c:
8f:60:35:56:f7:28:37:92:86:39:44:d5:08:3e:d6:
83:01:57:07:33:85:03:92:ce:a6:fa:5b:8b:12:f4:
74:e1:9d:7b:a3:e5:36:95:ae:5b:58:48:3b:06:5f:
49:65:c7:63:98:e8:56:bd:88:b9:e6:3f:7f:83:4d:
45:71:34:62:7f:05:b8:57:54:f3:eb:dd:67:bf:75:
be:4a:7d:69:5d:ea:de:96:d0:d9:33:e8:e7:49:34:
a2:14:fb:8e:68:e9:8e:90:eb:10:39:3d:5f:c4:22:
d8:1b:c3:83:80:25:c1:2b:9a:1d:fb:f8:d6:89:b2:
07:bf:6f:10:34:e4:fb:ee:35:48:6e:75:5c:23:76:
68:02:38:06:f9:90:ef:45:3c:ce:f9:7b:83:19:0f:
49:b5:92:57:45:66:54:9e:51:09:40:98:0f:60:74:
ca:02:63:a7:57:37:23:74:37:cc:6b:5f:bd:ba:f6:
94:28:10:5b:25:e7:05:96:13:80:68:30:d2:16:49:
32:80:93:8c:55:ae:20:0b:48:bd:0f:34:26:0a:64:
ca:e4:97:1f:0a:8f:cd:7d:3b:ee:05:44:e0:e4:c2:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:31:CF:76:7B:A2:E9:32:17:67:28:F9:53:BA:D5:D8:51:7B:28
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VaExz3Z7oukyF2co-VO61dhReyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:116::/48
Signature Algorithm: sha256WithRSAEncryption
7e:79:9e:39:14:c1:e0:7e:50:23:fd:04:bd:84:6a:b4:f1:6a:
d5:16:01:a4:b7:71:0e:5d:29:11:2c:b7:be:a9:6e:3a:69:01:
84:86:f2:3d:57:19:93:f8:5a:49:9a:d8:b9:f5:0e:9d:ac:07:
82:b0:73:6d:1d:b7:f6:39:95:8c:6f:3e:40:74:2b:6b:e3:a3:
52:3c:df:e0:4e:f4:8e:21:5a:4f:76:c5:9c:e3:b2:46:fa:1a:
a5:e7:31:4e:f8:58:bc:4f:fc:00:7e:68:ce:24:57:6b:ed:0d:
ad:3c:fb:ad:a7:2a:d4:18:36:70:28:b9:bd:71:0e:ea:3e:60:
65:53:b9:cb:6f:49:24:8f:a1:a7:35:ed:01:a4:15:00:a9:91:
5c:e0:83:d4:5c:6b:bd:89:b0:6e:39:c6:7d:88:3c:c2:c4:d0:
0e:37:7e:59:2d:2e:13:b1:bf:9f:b5:3e:46:b8:a7:86:f5:ee:
35:f9:2c:8b:51:1b:7f:27:e1:1a:ea:02:a4:b4:72:bb:6b:0d:
1a:04:16:52:9f:07:bb:0f:a3:8c:c9:f5:26:01:bd:fe:78:aa:
53:23:3d:5c:fd:fa:fc:dc:4a:29:e9:6a:e2:dd:68:0a:a9:5e:
d3:3b:cd:b3:9a:f6:99:68:93:8f:24:30:4a:98:2c:ab:4a:3a:
1b:4b:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:21:34 2025 by rpki-client