Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/vdy1MmzFMK60AlIdpOXD1htDYPg.roa
File: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (raw, json)
Hash identifier: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=
Subject key identifier: BD:DC:B5:32:6C:C5:30:AE:B4:02:52:1D:A4:E5:C3:D6:1B:43:60:F8
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019421B197892887DD097B41F6CD2B14A62C
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/vdy1MmzFMK60AlIdpOXD1htDYPg.roa
Signing time: Wed 01 Jan 2025 11:47:54 +0000
ROA not before: Wed 01 Jan 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211723
IP address blocks: 2001:67c:296c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:97:89:28:87:dd:09:7b:41:f6:cd:2b:14:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bddcb5326cc530aeb402521da4e5c3d61b4360f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ef:99:f3:49:c2:c3:96:ba:da:f1:70:6f:
d5:51:ba:ce:88:22:b8:3c:ca:11:29:c3:ad:a4:76:
dd:6e:16:9a:76:3e:9e:b5:5d:e7:1c:67:3c:84:32:
74:54:fd:92:7a:f5:61:d9:8f:c8:cb:31:36:76:d4:
51:85:bb:ec:44:29:24:22:b4:1f:1f:12:ca:40:1f:
8a:72:64:8b:35:b4:8e:c7:34:fa:de:00:a2:b8:86:
d8:81:95:c5:46:33:88:e0:d7:76:28:86:d2:6f:4a:
e3:53:7f:f8:00:f8:a2:06:88:10:8d:76:28:3b:e7:
11:c7:fc:62:cd:c8:85:7a:71:aa:03:fe:4d:ab:01:
eb:9a:fc:c4:0c:95:30:87:92:0b:25:23:a7:45:a2:
a1:13:15:3b:a0:c4:fe:9e:cb:7c:67:69:dc:7c:67:
7b:ea:e1:d6:eb:ca:02:a4:a8:15:7a:8e:13:ea:e5:
ad:f1:bb:ed:19:5d:75:55:d4:40:56:1b:c2:eb:d9:
55:e6:5a:2b:51:fc:f2:47:35:51:51:48:f4:90:79:
d7:54:33:56:e9:c4:a5:8b:63:78:cd:24:b8:fa:4f:
ac:8c:9d:dd:34:f0:06:25:8a:a9:a2:17:4f:d6:6f:
e9:7f:b9:b2:01:b5:a7:50:5b:a7:e4:69:aa:fe:7e:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:B5:32:6C:C5:30:AE:B4:02:52:1D:A4:E5:C3:D6:1B:43:60:F8
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/vdy1MmzFMK60AlIdpOXD1htDYPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:296c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:72:f4:8b:f8:4b:49:d1:52:f6:2a:c1:b5:f8:13:65:d1:26:
16:0d:32:5d:52:cf:c5:82:f2:7c:b3:78:c3:0f:51:b6:a0:ab:
da:8f:44:cc:58:a5:16:c3:38:85:67:ff:c5:18:e5:a9:36:ea:
7b:bb:d1:41:3f:f8:e3:d7:55:34:0c:2d:61:56:71:fc:15:76:
2f:c8:71:71:59:97:dd:ad:67:d7:8b:3a:a6:7a:76:02:1e:17:
68:e5:90:23:36:68:40:24:7d:23:8a:dd:84:cb:cd:ea:e8:2b:
55:23:5e:25:f0:3e:13:b4:55:d9:37:ed:f9:4c:9d:63:44:58:
5e:1c:e3:2a:73:17:c1:2a:fc:13:1e:0e:cd:0b:cc:d5:78:ef:
fb:05:4c:09:ee:3a:01:26:86:47:89:9a:66:2f:ef:d8:58:84:
5f:7d:0f:96:9a:85:ca:76:0c:41:27:9f:1d:3a:e8:c0:b0:96:
c8:50:a6:93:06:12:26:81:ef:fd:d5:94:14:da:59:f6:13:5d:
24:0a:d8:dd:e2:72:91:3a:69:d6:6e:9c:0b:3b:a8:21:6e:e1:
8d:ec:4d:2c:5d:5e:ca:c4:0f:f6:86:1a:33:0b:43:5e:68:87:
f1:c4:a8:0f:88:d0:2a:52:b1:1c:94:7c:2a:33:a6:61:ea:c1:
79:73:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:27:55 2025 by rpki-client