Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/VGd9KjMwAgOKsTmpV-66ONuVSdc.roa
File: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (raw, json)
Hash identifier: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=
Subject key identifier: 54:67:7D:2A:33:30:02:03:8A:B1:39:A9:57:EE:BA:38:DB:95:49:D7
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 01942825F6FCDDB54D22BE1DBF62780A2C74
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/VGd9KjMwAgOKsTmpV-66ONuVSdc.roa
Signing time: Thu 02 Jan 2025 17:52:44 +0000
ROA not before: Thu 02 Jan 2025 17:52:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51548
IP address blocks: 45.13.96.0/22 maxlen: 22
2a0e:e300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f6:fc:dd:b5:4d:22:be:1d:bf:62:78:0a:2c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Jan 2 17:52:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54677d2a333002038ab139a957eeba38db9549d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:28:ae:42:e2:43:98:bf:75:21:75:43:87:
7b:07:43:c6:06:65:06:80:55:a3:6f:28:2f:60:a4:
b0:70:5a:cd:3a:e7:d1:87:6f:ff:d7:7c:f1:a1:fd:
77:58:23:a9:12:e7:09:77:bd:3f:46:ed:8f:00:25:
7f:56:83:1e:17:d1:49:a5:c8:76:a5:98:4c:b9:79:
99:d0:d4:d6:ca:35:92:6f:d6:88:1a:93:5d:e6:05:
0c:96:0f:55:16:1d:bf:8b:33:c5:c6:6a:55:d0:f3:
7a:ef:7e:9f:36:98:db:93:24:85:59:1c:18:0c:c6:
3e:79:04:36:13:8d:99:ce:11:4c:ad:7c:67:7c:d3:
e3:a6:52:34:4a:ad:be:38:3e:50:50:6c:1a:5d:61:
9f:c7:a0:ae:d6:e6:e9:09:89:ef:1a:81:bb:2b:76:
90:9e:96:e8:1d:14:03:8f:83:7b:4f:1d:f8:af:4f:
f2:86:43:27:35:5d:cb:23:e3:be:f7:a3:2f:64:ce:
99:c1:2c:b5:9a:34:f0:ef:b9:5e:68:e0:39:53:2e:
76:9e:21:5a:78:7e:92:ab:45:14:aa:ad:9e:d6:13:
6b:94:05:d2:f8:de:4f:a5:d6:57:d5:f8:e9:21:12:
02:f1:84:55:40:08:1a:38:11:fe:7b:bc:22:57:e0:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:7D:2A:33:30:02:03:8A:B1:39:A9:57:EE:BA:38:DB:95:49:D7
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/VGd9KjMwAgOKsTmpV-66ONuVSdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.96.0/22
IPv6:
2a0e:e300::/29
Signature Algorithm: sha256WithRSAEncryption
1a:4f:b4:7c:be:c5:10:a5:10:67:47:6f:b8:c1:14:9b:a0:8b:
2f:66:a0:95:af:a7:23:70:e5:8b:f2:8b:8d:d6:ad:d6:63:5e:
b2:85:7f:f8:76:0d:f8:45:1a:4e:c6:bd:64:b3:3b:78:31:3f:
c5:98:f3:f9:06:aa:71:a5:ea:d7:17:ae:c6:a4:28:50:14:06:
02:6a:32:d6:59:80:74:f7:59:65:e8:75:e0:92:50:fc:0c:2b:
7c:02:9a:87:20:c6:d4:20:fd:60:56:d0:07:22:7c:93:67:1c:
21:76:de:6a:b1:d2:ec:f9:ea:e3:a6:6f:5e:c2:00:99:0b:a8:
5a:21:8d:21:b6:ec:3c:81:31:19:eb:47:2d:59:76:c5:d8:85:
30:13:35:04:3b:59:01:97:69:b7:12:eb:4a:05:c7:8e:b2:c9:
e8:f3:6b:84:f4:f4:7a:c3:57:b7:d6:eb:92:d2:d5:c3:f7:26:
2b:14:12:38:12:69:08:f6:2a:16:f0:ab:d3:77:b9:b5:98:8c:
59:ff:d4:d2:cb:50:38:3f:8e:48:5e:9b:c0:ae:8c:85:8e:e8:
d1:7d:88:9b:60:7f:22:73:63:e2:d0:20:0c:10:ad:d3:1b:30:
28:a0:fe:05:47:9b:9c:44:78:b3:d8:cf:78:75:73:67:f9:89:
40:dc:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:23:21 2025 by rpki-client