Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jvLhOE4GhVC-9VyAb5JcZ56RExc.roa
File: jvLhOE4GhVC-9VyAb5JcZ56RExc.roa (raw, json)
Hash identifier: drB0jmJEjYSoqaHbydAj762zJVYIpu78kjvKUQO9WC8=
Subject key identifier: 8E:F2:E1:38:4E:06:85:50:BE:F5:5C:80:6F:92:5C:67:9E:91:13:17
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0195107A9052064B6E31EADE741F02BAA1B3
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jvLhOE4GhVC-9VyAb5JcZ56RExc.roa
Signing time: Sun 16 Feb 2025 20:37:02 +0000
ROA not before: Sun 16 Feb 2025 20:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19148
IP address blocks: 2001:3280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:7a:90:52:06:4b:6e:31:ea:de:74:1f:02:ba:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Feb 16 20:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef2e1384e068550bef55c806f925c679e911317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:1e:27:7a:cc:fb:cd:f5:1a:e4:1d:ba:7f:
e9:64:39:85:a0:d6:ff:10:4f:9f:a7:1d:29:08:72:
d5:36:c0:b1:d0:07:dd:6e:ec:e6:88:e7:97:ba:6d:
ca:00:48:ac:31:4f:24:96:4b:0a:17:ab:b9:23:fc:
5e:9f:31:c0:3d:ed:e6:18:fc:6f:b4:75:47:3e:56:
16:b0:0c:db:a8:9a:9c:1e:05:79:1c:fe:b1:12:f5:
0b:44:53:1f:69:24:42:11:f6:e7:0b:35:3d:cf:f5:
30:22:f0:c9:cc:96:1b:d8:63:8a:27:30:d6:eb:bd:
d9:4b:21:c6:7a:3c:e2:ae:aa:8c:09:67:28:0e:87:
d9:65:c2:78:a6:78:8d:78:b1:17:60:0a:19:a7:26:
12:1c:38:88:75:2c:30:81:e6:e7:c8:04:42:80:b7:
fa:cf:0c:6c:4a:96:06:7a:a4:d1:0e:f3:9d:5c:eb:
08:79:55:9a:17:e7:9e:34:32:83:6f:ad:f5:08:81:
23:9b:9d:04:68:7d:45:bd:d8:a8:ef:2d:48:78:c0:
7f:9f:57:24:f6:fb:40:b4:4b:e3:b2:dc:e5:96:26:
d1:88:e2:ac:45:76:f6:1c:dd:3d:0b:2f:ad:86:4b:
ec:96:90:24:4e:9f:91:87:97:7c:af:6e:43:4a:ec:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:E1:38:4E:06:85:50:BE:F5:5C:80:6F:92:5C:67:9E:91:13:17
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jvLhOE4GhVC-9VyAb5JcZ56RExc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3280::/29
Signature Algorithm: sha256WithRSAEncryption
72:fe:5d:9e:38:e6:9f:2c:ff:73:58:cb:1d:ad:0d:a0:0a:81:
55:98:3e:36:9d:9a:86:e4:83:fc:1a:3d:f0:b5:46:72:aa:6f:
fc:4c:40:ae:bc:0d:e1:c1:85:c4:71:9d:08:b0:a6:a7:1e:9e:
5f:3d:1a:c7:bb:14:c9:d3:3c:f0:99:0b:b9:80:94:e7:a2:38:
a4:6d:8e:c2:3c:d4:15:80:0e:62:1c:41:8c:3b:2e:94:f4:e0:
1c:ef:38:33:cc:ac:a4:9d:40:00:3b:96:60:09:77:db:4f:d2:
36:99:35:9c:a8:9d:f3:43:ac:e9:fd:d2:4e:ff:0d:86:d2:d6:
33:f5:a0:7b:1b:fb:d4:00:98:d9:c8:6f:d2:80:95:71:ed:c5:
64:59:df:92:fc:31:eb:dc:a2:fa:99:f0:ac:28:d6:4c:dd:a3:
7e:7b:1e:57:45:78:8b:dd:cd:c4:06:85:f4:18:28:ff:b5:d8:
f8:af:fb:8e:0b:40:9e:8a:e9:44:cb:82:8a:0b:e0:5c:7f:9c:
3c:0f:9f:d4:92:9c:97:c9:65:e0:3b:d3:38:ea:a8:50:fe:d7:
62:5b:93:df:13:62:a2:55:68:c0:a4:e9:a3:6f:3e:5d:b6:1b:
d2:c8:5c:7e:b1:43:4e:b7:dd:37:fd:99:59:c1:03:3c:bf:e3:
fc:5a:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:24 2025 by rpki-client