Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vGmXJHkzVSZaSl_J3LyQ3k3C0hw.roa
File: vGmXJHkzVSZaSl_J3LyQ3k3C0hw.roa (raw, json)
Hash identifier: S42YU4wEavltJFnYK03v/xaFtLcVSI6NSFZEjy+y2tw=
Subject key identifier: BC:69:97:24:79:33:55:26:5A:4A:5F:C9:DC:BC:90:DE:4D:C2:D2:1C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23A5B5A4FEB539B51CDA1570EA249
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vGmXJHkzVSZaSl_J3LyQ3k3C0hw.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48357
IP address blocks: 45.89.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:5b:5a:4f:eb:53:9b:51:cd:a1:57:0e:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc699724793355265a4a5fc9dcbc90de4dc2d21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:98:13:e2:9e:ff:cd:8d:21:80:1a:70:6a:
da:63:79:cc:39:e4:67:89:c4:37:e3:8e:94:90:71:
21:7f:d5:2c:f8:e7:0d:6b:6b:fb:3c:88:28:8a:b6:
01:28:2e:1c:9e:51:40:c4:8e:50:22:12:c6:d2:7a:
5c:17:0d:ec:5d:aa:0c:ff:40:59:be:e7:8d:38:cd:
fd:b8:ab:60:e0:49:cd:06:04:b9:95:ae:ed:36:64:
84:62:94:96:2c:96:9a:41:9e:ed:8e:df:53:56:1a:
5b:43:3a:02:c4:a2:2a:a8:7a:69:9d:66:b3:74:3a:
ad:ca:9f:8a:8e:48:4e:16:d2:89:c6:af:85:94:8a:
03:d1:30:7f:78:b1:fa:0e:17:d3:f1:fa:79:63:26:
67:5f:60:8b:76:d4:91:6d:a7:44:48:a2:68:fd:aa:
9e:dc:94:c8:9e:3a:1c:58:ce:54:2e:e7:95:5c:9f:
8d:90:99:7d:f1:19:7a:5e:b0:10:91:46:d8:68:7b:
ae:1f:5f:e7:ba:b2:b4:82:5e:2c:17:83:5d:68:c2:
8b:b8:76:bd:cf:e7:0e:8b:0f:cd:53:dc:2b:9a:57:
51:3f:ed:6d:12:81:ac:4d:d7:a2:25:31:0a:33:d4:
c2:6f:2d:46:6a:4e:99:78:bd:ba:26:30:35:9a:ad:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:97:24:79:33:55:26:5A:4A:5F:C9:DC:BC:90:DE:4D:C2:D2:1C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vGmXJHkzVSZaSl_J3LyQ3k3C0hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:96:64:25:a6:62:89:77:2c:9c:80:1f:09:45:7f:3f:11:25:
72:02:0d:22:8a:71:58:71:2e:64:98:4c:a0:f5:01:6d:d7:ed:
db:6b:21:8a:8d:e3:92:78:61:ea:3b:bf:16:1c:96:13:55:ba:
da:65:30:e3:ec:53:ba:1e:6d:37:af:4d:2b:e9:52:93:bf:e6:
60:73:ee:cb:62:f1:8c:ad:d3:ba:bd:a6:f2:ae:7a:17:a0:12:
f7:53:bc:70:42:b0:0b:b1:9f:0d:d2:91:47:b4:18:72:a1:46:
4f:f8:32:ab:2a:f4:ba:72:14:2d:c1:fe:e3:b2:55:13:c9:69:
4b:1b:71:0f:98:23:db:f8:c5:12:83:5a:79:9b:cb:1a:73:40:
ab:f8:d0:5b:ed:60:d6:87:bd:dc:6b:12:56:ba:2b:cd:b0:f3:
3f:9b:a2:33:55:52:54:14:29:1e:f9:d7:da:3b:39:7c:8b:71:
5c:fe:33:77:bc:43:d3:f7:5b:8d:9c:3d:1b:37:e4:0a:1b:42:
a7:ed:7c:6d:06:0a:19:b2:90:b1:1e:e0:cc:b6:ac:7d:7a:06:
96:fa:4b:3a:1b:b9:ab:ed:2b:fe:21:57:65:50:64:43:a5:a5:
02:0f:e0:ef:ea:b8:53:e0:ef:0d:d0:ff:22:b7:3d:85:93:53:
55:2c:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:13 2025 by rpki-client