Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vNGrsvbfYxTA7JDcp-SVTvKIPM8.roa
File: vNGrsvbfYxTA7JDcp-SVTvKIPM8.roa (raw, json)
Hash identifier: kmKSvBVrFdvwGI+yJcWm73tRVYSrsXgb3QU/MaSZofE=
Subject key identifier: BC:D1:AB:B2:F6:DF:63:14:C0:EC:90:DC:A7:E4:95:4E:F2:88:3C:CF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C768C18AA5A619A22C80FE33F0C47
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vNGrsvbfYxTA7JDcp-SVTvKIPM8.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216061
IP address blocks: 2a12:bec0:580::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:8c:18:aa:5a:61:9a:22:c8:0f:e3:3f:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcd1abb2f6df6314c0ec90dca7e4954ef2883ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:61:b8:e6:96:15:15:9b:b0:23:77:06:33:
1e:b4:e4:27:45:38:93:0d:62:d5:11:be:d2:5e:e8:
93:65:21:f6:e0:d9:4e:e9:d8:14:94:4b:eb:6f:05:
5d:10:eb:15:f7:af:fd:c4:0a:79:d8:e9:24:4f:da:
81:5e:ce:cc:36:f4:0b:0a:d2:df:19:17:26:11:e1:
39:76:3f:5d:9a:cb:d8:3d:ef:12:2f:ee:b2:bf:95:
65:ca:10:18:1d:69:8a:af:69:37:50:a8:5a:9f:67:
a3:59:06:bc:c2:04:fd:fd:e7:40:34:6c:d3:09:4b:
7e:ad:78:fd:dc:1a:e4:50:3c:82:a7:24:9f:25:95:
e7:38:12:81:50:bb:55:55:ff:77:59:0c:b2:dc:d1:
77:70:19:8f:de:a8:b0:b5:2a:45:e8:1f:d3:35:ad:
81:13:ac:ab:ca:6b:c7:a5:59:cd:92:ae:0f:27:54:
8b:7c:22:70:22:11:34:b6:80:c0:8b:5c:a3:46:27:
d7:05:1d:58:c6:49:9c:6d:1f:0c:be:cf:77:6b:bc:
f6:48:14:09:f5:7b:2d:31:64:69:32:15:12:58:bf:
48:5a:2e:e6:8d:c6:63:3b:d8:48:64:37:79:53:e5:
0c:c6:fb:05:a5:da:1b:ee:c6:3f:ed:2d:06:df:aa:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:AB:B2:F6:DF:63:14:C0:EC:90:DC:A7:E4:95:4E:F2:88:3C:CF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vNGrsvbfYxTA7JDcp-SVTvKIPM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:580::/44
Signature Algorithm: sha256WithRSAEncryption
60:cd:9f:b8:d3:cd:af:7c:9f:c2:b2:c6:26:52:02:37:3e:74:
94:64:7f:98:32:b7:1a:dc:fd:53:dd:bb:b5:e3:ed:49:49:05:
0d:71:ac:3b:35:54:c4:e5:97:50:f8:72:5a:19:0e:3e:9a:57:
91:70:92:3c:64:5e:c0:45:b5:d3:59:46:e3:25:dc:e6:e9:49:
31:a7:ed:7f:e0:ae:89:da:e8:de:58:c7:e6:bf:a0:2d:14:7b:
59:14:91:88:c4:7f:64:db:93:c8:6a:03:c5:1e:87:f8:05:e8:
25:a4:a8:78:75:64:28:62:1d:fe:69:13:65:ed:f7:b0:88:3b:
56:40:4c:99:e4:81:d7:1c:67:ef:27:d4:94:ed:02:25:c6:63:
23:74:80:1c:d1:9d:5e:50:d8:9b:6d:f3:69:0f:91:3b:21:26:
ba:0b:8b:35:8f:a4:23:ab:63:52:6d:ca:56:13:54:e8:c0:ad:
6b:ab:29:c0:a8:61:37:24:e3:07:2e:08:61:61:46:1a:2e:fd:
66:ba:55:04:bc:01:14:75:0e:d0:05:9b:20:1f:dd:ad:ec:0a:
d9:d3:eb:ff:12:98:9f:f7:57:c1:9c:9d:2e:e9:38:12:e9:b8:
c7:76:92:23:fa:92:ed:66:0b:da:2d:a9:fc:76:d5:32:56:f5:
e5:e0:f3:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHaMGKpaYZoiyA/jPwxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2QxYWJiMmY2ZGY2MzE0YzBlYzkwZGNhN2U0OTU0ZWYyODgzY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaVhuOaWFRWbsCN3BjMetOQnRTiT
DWLVEb7SXuiTZSH24NlO6dgUlEvrbwVdEOsV96/9xAp52OkkT9qBXs7MNvQLCtLf
GRcmEeE5dj9dmsvYPe8SL+6yv5VlyhAYHWmKr2k3UKhan2ejWQa8wgT9/edANGzT
CUt+rXj93BrkUDyCpySfJZXnOBKBULtVVf93WQyy3NF3cBmP3qiwtSpF6B/TNa2B
E6yrymvHpVnNkq4PJ1SLfCJwIhE0toDAi1yjRifXBR1YxkmcbR8Mvs93a7z2SBQJ
9XstMWRpMhUSWL9IWi7mjcZjO9hIZDd5U+UMxvsFpdob7sY/7S0G36qHkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLzRq7L232MUwOyQ3KfklU7yiDzPMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdk5HcnN2YmZZeFRBN0pEY3AtU1ZUdktJUE04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAWA
MA0GCSqGSIb3DQEBCwUAA4IBAQBgzZ+4082vfJ/CssYmUgI3PnSUZH+YMrca3P1T
3bu14+1JSQUNcaw7NVTE5ZdQ+HJaGQ4+mleRcJI8ZF7ARbXTWUbjJdzm6Ukxp+1/
4K6J2ujeWMfmv6AtFHtZFJGIxH9k25PIagPFHof4BeglpKh4dWQoYh3+aRNl7few
iDtWQEyZ5IHXHGfvJ9SU7QIlxmMjdIAc0Z1eUNibbfNpD5E7ISa6C4s1j6Qjq2NS
bcpWE1TowK1rqynAqGE3JOMHLghhYUYaLv1mulUEvAEUdQ7QBZsgH92t7ArZ0+v/
Epif91fBnJ0u6TgS6bjHdpIj+pLtZgvaLan8dtUyVvXl4PM7
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:20:34 2025 by rpki-client