Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa
File: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (raw, json)
Hash identifier: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=
Subject key identifier: 55:46:D4:92:9F:27:35:F8:BC:41:C2:CF:D4:CB:4F:C0:CC:EA:3A:9D
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019424458B91D0CB287B74FF0E31539A1C32
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 2a01:8107:fff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:91:d0:cb:28:7b:74:ff:0e:31:53:9a:1c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5546d4929f2735f8bc41c2cfd4cb4fc0ccea3a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:8e:eb:63:35:82:00:09:5d:34:47:9f:4a:
7b:56:f2:c7:43:09:f3:6d:99:ab:44:91:58:4a:38:
77:fc:07:cd:95:c9:62:7d:64:63:1f:8c:67:00:92:
d2:5e:b5:77:2c:dd:cd:60:46:4c:15:f5:b4:f3:80:
ac:38:43:05:d9:35:e3:55:4b:b6:90:d5:f5:53:ac:
09:87:1c:92:e9:91:71:d4:50:30:62:ed:b2:3c:dc:
ee:0e:e1:11:0c:a2:e4:64:49:ba:c3:c1:8f:bd:97:
22:31:81:74:ad:b2:fc:34:73:c0:5e:b2:02:2f:9b:
a5:de:2c:e1:50:0b:f7:f4:96:78:70:29:a1:e5:0b:
08:76:9f:0a:32:67:41:fd:72:9f:05:77:55:ff:27:
78:ae:08:1e:c7:b4:79:ad:20:40:33:d3:dd:f6:42:
5d:1c:67:f4:3a:10:3c:aa:e4:06:4d:ac:01:73:ff:
c1:bb:2a:f4:97:c9:1c:82:34:0b:e1:32:8e:e0:2e:
57:eb:a9:e0:89:0b:32:99:d5:05:39:de:2d:24:a3:
5d:9f:2b:5f:71:20:2f:7c:53:d9:a1:8c:8a:db:47:
66:f5:e0:d9:20:b0:d4:67:df:c3:ad:f6:fa:bc:05:
f8:e4:eb:7d:c6:a3:c4:48:38:0d:14:7b:56:b2:8f:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:D4:92:9F:27:35:F8:BC:41:C2:CF:D4:CB:4F:C0:CC:EA:3A:9D
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8107:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
8e:33:2b:9f:4a:dd:70:d1:80:f7:fc:8c:ce:d3:6a:19:51:42:
19:6c:7a:ee:e6:3e:52:26:63:9b:14:96:b3:d5:34:5e:be:e6:
7e:b3:ab:74:7c:3d:71:4c:75:86:4e:62:6a:b4:41:8d:79:11:
89:ef:5f:52:7b:19:bd:fc:0a:f4:eb:06:39:ab:61:18:62:6f:
1d:7c:eb:ea:9d:22:fd:7e:0c:2b:49:fd:04:b1:3a:d6:ed:71:
c3:23:40:32:da:49:7d:73:1e:6c:72:e3:27:9d:89:3e:6f:62:
2c:2d:92:9a:60:c7:31:d0:a6:9f:8e:99:23:18:e8:68:50:cd:
ab:6d:a6:83:4c:97:5b:ba:16:0b:0e:33:05:e9:cb:ff:08:6c:
33:67:85:05:58:19:cd:da:61:3a:40:83:d0:04:dd:45:15:fd:
b6:ab:1b:aa:21:0c:50:8e:ad:e6:56:c1:e2:a6:28:92:94:0d:
b5:13:6c:f2:b8:b6:d4:2f:c5:46:f1:e2:b1:9c:7a:ed:6f:bb:
23:63:07:6b:87:83:21:96:7a:ee:b0:5b:c0:6f:fe:c6:c3:4d:
cb:0c:69:af:03:9f:bb:07:d6:70:7c:67:c9:6f:ac:a4:5e:c1:
b1:7b:c9:bc:bc:4e:b2:69:4e:8d:2f:fe:4a:3a:36:c5:e4:c9:
82:ac:ba:be
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQkRYuR0Msoe3T/DjFTmhwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjUwMTAxMjM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQ2ZDQ5MjlmMjczNWY4YmM0MWMyY2ZkNGNiNGZjMGNjZWEzYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4WO62M1ggAJXTRHn0p7VvLHQwnz
bZmrRJFYSjh3/AfNlclifWRjH4xnAJLSXrV3LN3NYEZMFfW084CsOEMF2TXjVUu2
kNX1U6wJhxyS6ZFx1FAwYu2yPNzuDuERDKLkZEm6w8GPvZciMYF0rbL8NHPAXrIC
L5ul3izhUAv39JZ4cCmh5QsIdp8KMmdB/XKfBXdV/yd4rggex7R5rSBAM9Pd9kJd
HGf0OhA8quQGTawBc//Buyr0l8kcgjQL4TKO4C5X66ngiQsymdUFOd4tJKNdnytf
cSAvfFPZoYyK20dm9eDZILDUZ9/Drfb6vAX45Ot9xqPESDgNFHtWso9ikwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFVG1JKfJzX4vEHCz9TLT8DM6jqdMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvVlViVWtwOG5OZmk4UWNMUDFNdFB3TXpxT3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgGBB//w
MA0GCSqGSIb3DQEBCwUAA4IBAQCOMyufSt1w0YD3/IzO02oZUUIZbHru5j5SJmOb
FJaz1TRevuZ+s6t0fD1xTHWGTmJqtEGNeRGJ719Sexm9/Ar06wY5q2EYYm8dfOvq
nSL9fgwrSf0EsTrW7XHDI0Ay2kl9cx5scuMnnYk+b2IsLZKaYMcx0KafjpkjGOho
UM2rbaaDTJdbuhYLDjMF6cv/CGwzZ4UFWBnN2mE6QIPQBN1FFf22qxuqIQxQjq3m
VsHipiiSlA21E2zyuLbUL8VG8eKxnHrtb7sjYwdrh4MhlnrusFvAb/7Gw03LDGmv
A5+7B9ZwfGfJb6ykXsGxe8m8vE6yaU6NL/5KOjbF5MmCrLq+
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:55 2025 by rpki-client