Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa
File: vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa (raw, json)
Hash identifier: 1s2dWFQ6yIEmp8FiTPqLYuMVpLoqmko/eqoHIt276/8=
Subject key identifier: BC:55:59:F5:AB:F7:06:F4:3E:C2:CF:FB:11:57:22:0D:80:ED:E9:1C
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019421B252B4AC1F062D20FC6749E89F496E
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208975
IP address blocks: 45.9.195.0/24 maxlen: 24
2a0e:1107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:b4:ac:1f:06:2d:20:fc:67:49:e8:9f:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc5559f5abf706f43ec2cffb1157220d80ede91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:aa:33:ad:bf:9d:12:7e:cb:b6:cb:e1:6c:
fd:40:4d:1e:90:2d:1c:c9:71:ae:e0:61:d1:15:fa:
ac:66:47:9a:5e:e4:5f:28:8a:18:a6:30:6b:87:40:
d1:8a:d3:2d:08:d8:5d:7a:40:b8:84:80:22:12:f2:
a3:f9:9d:da:6e:f4:58:b0:54:0b:dd:45:91:29:71:
fc:45:a6:eb:f9:9d:07:50:9a:40:45:64:8e:55:30:
76:b3:3e:d0:16:7b:09:0c:80:0c:bb:4e:86:3c:99:
fa:14:84:6f:3b:53:15:d8:2f:ab:20:82:f3:b0:04:
2f:69:fc:b4:16:50:49:d9:8c:0d:ba:38:d1:d2:86:
ae:62:cb:ac:36:96:43:40:6c:8b:9c:59:07:bd:8f:
18:d3:f6:f1:35:27:78:bb:23:df:6c:56:e3:86:5a:
4f:a2:db:80:14:29:9e:32:8f:85:93:2d:1a:d5:ac:
8b:23:8c:3e:2b:b1:74:a1:b6:10:8f:56:c5:5f:46:
75:0b:6d:6b:bb:81:f7:6a:0f:77:c3:71:80:0e:48:
5d:96:ce:5a:f2:93:96:23:88:0e:ed:f0:4c:2d:4f:
64:1f:5d:af:7f:cb:31:2a:90:db:9a:0e:41:f4:bb:
5f:73:6b:51:42:0b:cf:f3:6b:c5:68:1a:f4:69:eb:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:59:F5:AB:F7:06:F4:3E:C2:CF:FB:11:57:22:0D:80:ED:E9:1C
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.195.0/24
IPv6:
2a0e:1107::/48
Signature Algorithm: sha256WithRSAEncryption
c3:d0:0b:3a:4a:23:af:90:f8:6b:2a:76:b5:5a:9f:80:92:3f:
08:c5:78:48:ae:1b:5f:58:86:d7:e2:c9:61:c9:b8:bf:f2:bc:
55:08:cd:86:fd:99:71:24:13:31:2e:57:4f:67:4c:fd:c5:ef:
c8:3b:df:79:de:45:ab:78:49:7e:51:2d:c8:f3:d1:fe:69:8d:
42:10:d5:01:4d:d0:b5:65:9b:60:6e:79:ec:89:e0:0f:9e:06:
5a:9c:bf:c3:c7:fa:a3:37:87:47:68:28:cf:cd:c7:bb:a5:57:
43:0e:fc:ba:2d:0f:93:58:97:45:05:76:87:4c:ae:18:dc:f9:
16:01:33:fe:ac:be:74:03:25:32:76:ee:18:37:05:54:20:24:
d8:09:24:a2:3f:e5:4c:b8:d8:15:7e:6f:2e:85:f1:ca:7e:4f:
6b:a7:4c:86:51:57:5b:17:50:a8:28:b0:fc:eb:b5:1e:e5:ea:
7d:89:d1:60:fe:b8:c9:75:da:4f:c6:8e:67:42:24:58:f6:5d:
bf:34:40:ac:72:7a:67:34:72:07:46:e7:87:34:77:8e:8d:0d:
a4:0a:e2:a3:a4:1e:7d:55:4e:f4:64:4e:2c:aa:f4:1d:7a:0f:
b5:50:53:5a:05:a8:fd:d1:82:9e:51:13:ca:13:57:4c:3f:6c:
37:5d:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:51 2025 by rpki-client