Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/1vlRfCaSk19utZ6mYDSMBaT5_HI.roa
File: 1vlRfCaSk19utZ6mYDSMBaT5_HI.roa (raw, json)
Hash identifier: z0pNCa/eOomRTa1MMJcTALbLmWhOD7sFEunzHzMt61o=
Subject key identifier: D6:F9:51:7C:26:92:93:5F:6E:B5:9E:A6:60:34:8C:05:A4:F9:FC:72
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0194CB4E7E376358936DA8EF64C2EE87F1EA
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/1vlRfCaSk19utZ6mYDSMBaT5_HI.roa
Signing time: Mon 03 Feb 2025 10:15:06 +0000
ROA not before: Mon 03 Feb 2025 10:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12679
IP address blocks: 212.8.224.0/22 maxlen: 22
212.8.228.0/24 maxlen: 24
2a07:500::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a07:503::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a07:505::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:4e:7e:37:63:58:93:6d:a8:ef:64:c2:ee:87:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Feb 3 10:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f9517c2692935f6eb59ea660348c05a4f9fc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:ef:69:00:ac:6f:a2:a3:8a:8b:af:2c:53:
49:6f:c9:25:81:69:e4:be:40:b8:c5:a9:73:d8:78:
eb:46:05:39:96:64:8a:ba:b5:86:42:f4:ee:ec:5e:
2c:e5:76:3d:f3:0d:6c:ca:9f:ae:c0:5e:02:ad:35:
01:36:12:ba:9d:62:34:1c:c2:fd:e5:c5:ef:b3:de:
32:d3:1c:82:0c:3c:d7:2f:56:d0:93:67:ff:07:04:
7e:be:62:22:cb:95:f9:81:fa:24:aa:9c:64:4a:a9:
d6:43:ca:9d:c7:86:f8:80:d6:09:5e:7c:27:b2:9f:
ac:5f:fc:78:c5:97:fd:7a:f1:ce:16:5c:1b:c2:83:
d9:b5:65:09:66:aa:49:5d:8e:83:26:42:0a:25:5c:
6c:c1:7b:65:b4:4b:c3:63:5e:a0:c1:e2:1e:8f:6b:
f7:8c:6f:18:d1:8c:e6:aa:4a:d9:9e:94:46:8c:90:
dd:9c:d0:ef:bf:cd:2d:75:50:5b:66:41:48:00:0d:
3b:39:7b:b3:66:08:ef:06:4a:f5:8e:c5:4d:0c:12:
97:60:43:45:c5:bb:af:25:a2:2d:7a:63:75:8d:7f:
cc:73:a7:c6:bb:7c:d1:cb:0a:ad:6b:98:94:64:a3:
1b:33:a9:c1:5b:16:46:10:e5:41:02:94:06:0d:77:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:51:7C:26:92:93:5F:6E:B5:9E:A6:60:34:8C:05:A4:F9:FC:72
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/1vlRfCaSk19utZ6mYDSMBaT5_HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.224.0-212.8.228.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:2a:82:31:4b:d1:17:d0:21:14:f6:79:f7:5e:f3:22:a7:65:
b4:1c:d3:d5:e2:6c:08:70:a6:a4:39:fb:29:05:c2:1f:17:5f:
d0:70:45:3e:b8:74:03:f4:38:97:8a:5d:7f:5d:57:a0:9b:0a:
95:21:9e:6e:37:7c:15:74:46:32:a5:f1:e5:a4:8a:f9:2d:ca:
ef:d1:bb:ca:b9:9d:4a:91:c2:e1:4c:e7:9d:b7:29:27:3e:8b:
21:53:99:0c:1c:66:47:1c:fa:72:6b:be:a3:c2:59:f2:df:0c:
b0:f2:41:bf:7c:d9:90:db:49:ca:eb:96:12:91:05:a8:5e:f3:
98:dd:fa:72:3c:72:a4:e8:6d:51:34:ed:0c:7f:57:d9:c3:37:
57:46:81:e3:01:35:55:f5:91:07:03:db:08:40:dd:b1:a7:56:
9e:37:46:e6:5d:a4:58:67:05:83:a1:4f:7a:22:f7:53:a4:91:
60:b4:2a:02:83:ff:aa:e1:10:86:1b:aa:c8:56:b6:87:bd:24:
c9:5e:38:70:bd:cc:c2:0e:25:75:12:fd:1a:66:87:61:be:9c:
5a:3f:d3:a1:6f:99:4a:d1:af:63:ce:77:22:1b:cd:c1:bb:93:
e7:b9:c2:1a:a1:22:a9:2b:7a:18:59:e4:ba:21:94:ce:bc:46:
a4:d6:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:51 2025 by rpki-client