Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa
File: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (raw, json)
Hash identifier: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=
Subject key identifier: B9:59:1B:C2:7E:F2:FF:93:0C:7A:AE:E2:D0:93:57:46:D3:A1:C4:7B
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0194221FF4B76C493EF9DFDD4945A12FA686
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198463
IP address blocks: 2001:67c:2d04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f4:b7:6c:49:3e:f9:df:dd:49:45:a1:2f:a6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9591bc27ef2ff930c7aaee2d0935746d3a1c47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:03:0d:63:ab:a8:58:cc:e1:74:b5:89:8e:
cc:42:ef:55:49:19:4f:23:68:0b:36:06:2f:26:d7:
95:ca:12:13:fe:f9:69:e1:a7:5f:72:45:b7:5e:60:
4a:cd:5d:44:40:7a:11:9a:0a:6b:ef:9b:7f:ae:91:
bf:94:0f:e4:d8:ab:63:f1:d7:b3:fe:86:c0:33:db:
0f:0d:02:7b:12:15:d5:af:04:b4:ea:17:dc:ff:19:
f6:c2:38:27:bf:bb:58:85:df:83:f6:40:7a:e0:bd:
e0:5a:af:36:3f:bd:28:74:b3:ac:54:18:98:83:14:
d9:bd:e4:fe:62:fd:15:b2:40:2e:a4:07:3c:ee:d5:
ac:fa:5e:5e:c7:11:c6:6b:66:9e:41:37:43:f1:bc:
4f:36:d5:e5:1c:02:21:b3:d8:6b:5f:a7:1a:89:27:
17:53:1d:70:42:2d:80:be:93:90:8a:45:56:80:52:
0c:1c:de:05:8e:b1:ea:1b:ed:6e:71:59:54:33:3c:
ef:83:5c:39:39:e5:b2:74:4a:b7:4c:ef:23:5a:c9:
b6:d7:9e:c9:7e:fd:12:69:c3:8d:04:3d:17:d8:9c:
c9:c1:38:24:b7:b1:76:b4:b0:fc:59:66:c6:46:43:
61:ff:9f:0e:d3:1a:83:07:de:54:9f:a8:80:3d:66:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:1B:C2:7E:F2:FF:93:0C:7A:AE:E2:D0:93:57:46:D3:A1:C4:7B
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d04::/48
Signature Algorithm: sha256WithRSAEncryption
9f:e8:d0:55:ad:0d:81:6c:46:24:1c:b1:f2:02:01:1e:8d:b9:
12:a6:3a:8a:6b:88:e2:e8:fd:0f:0b:30:b4:71:c5:17:d8:97:
d0:d2:68:53:9a:7c:e7:4e:69:ed:26:13:5b:35:e5:19:a1:05:
8f:20:03:d1:3a:b6:25:ca:ad:6b:85:79:11:c2:b3:e5:b9:28:
a3:c4:e0:40:06:97:0c:7f:91:94:2c:49:54:b1:e5:02:d3:31:
57:3a:31:6e:97:4b:ba:d6:5f:d5:0e:a7:66:f6:79:19:ff:2b:
88:a8:74:78:cf:b1:2f:0c:21:76:bb:5f:86:6e:9f:25:98:d8:
1e:2e:06:b8:05:b6:2a:47:bd:b5:1c:0b:68:4b:21:a9:93:42:
73:f0:5d:07:a2:e9:cc:b7:b8:53:7c:93:11:24:02:9c:e4:1b:
05:b7:bc:f6:d1:94:05:9d:33:15:46:9e:af:50:c8:12:03:9b:
f8:3d:73:db:9d:f9:92:dc:d8:db:3c:63:c0:98:49:9a:25:18:
05:14:8d:39:a8:c8:10:0a:e3:f9:17:ee:39:27:e4:bb:97:7e:
8e:69:79:90:bc:c1:ca:41:c2:71:3e:b1:23:8b:8a:06:01:aa:
f4:5b:79:ac:84:43:a6:7e:5f:80:d3:0e:bf:fe:ee:74:4a:3b:
53:43:5a:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiH/S3bEk++d/dSUWhL6aGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjU0NjM2ODBkMTRiNjQ1ODZiMWQ1YjQ2NTY2M2JjYjU3
N2U2OTMwHhcNMjUwMTAxMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTU5MWJjMjdlZjJmZjkzMGM3YWFlZTJkMDkzNTc0NmQzYTFjNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zcDDWOrqFjM4XS1iY7MQu9VSRlP
I2gLNgYvJteVyhIT/vlp4adfckW3XmBKzV1EQHoRmgpr75t/rpG/lA/k2Ktj8dez
/obAM9sPDQJ7EhXVrwS06hfc/xn2wjgnv7tYhd+D9kB64L3gWq82P70odLOsVBiY
gxTZveT+Yv0VskAupAc87tWs+l5exxHGa2aeQTdD8bxPNtXlHAIhs9hrX6caiScX
Ux1wQi2AvpOQikVWgFIMHN4FjrHqG+1ucVlUMzzvg1w5OeWydEq3TO8jWsm2157J
fv0SacONBD0X2JzJwTgkt7F2tLD8WWbGRkNh/58O0xqDB95Un6iAPWZEDQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLlZG8J+8v+TDHqu4tCTV0bTocR7MB8GA1UdIwQY
MBaAFLz1RjaA0UtkWGsdW0ZWY7y1d+aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWIt
NDczMDQ1YTkzYTA1LzEvdVZrYnduN3lfNU1NZXE3aTBKTlhSdE9oeEhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWItNDczMDQ1YTkzYTA1
LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC0E
MA0GCSqGSIb3DQEBCwUAA4IBAQCf6NBVrQ2BbEYkHLHyAgEejbkSpjqKa4ji6P0P
CzC0ccUX2JfQ0mhTmnznTmntJhNbNeUZoQWPIAPROrYlyq1rhXkRwrPluSijxOBA
BpcMf5GULElUseUC0zFXOjFul0u61l/VDqdm9nkZ/yuIqHR4z7EvDCF2u1+Gbp8l
mNgeLga4BbYqR721HAtoSyGpk0Jz8F0HounMt7hTfJMRJAKc5BsFt7z20ZQFnTMV
Rp6vUMgSA5v4PXPbnfmS3NjbPGPAmEmaJRgFFI05qMgQCuP5F+45J+S7l36OaXmQ
vMHKQcJxPrEji4oGAar0W3mshEOmfl+A0w6//u50SjtTQ1qD
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:40:50 2025 by rpki-client