Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/vCyJ_4gbyrukZoytmDIUJKLGPq0.roa
File: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (raw, json)
Hash identifier: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=
Subject key identifier: BC:2C:89:FF:88:1B:CA:BB:A4:66:8C:AD:98:32:14:24:A2:C6:3E:AD
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019426D97FB130E04D5577AB404F5FB23DEE
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/vCyJ_4gbyrukZoytmDIUJKLGPq0.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203602
IP address blocks: 185.255.244.0/22 maxlen: 22
2a0c:61c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7f:b1:30:e0:4d:55:77:ab:40:4f:5f:b2:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2c89ff881bcabba4668cad98321424a2c63ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:f0:55:71:3b:31:f8:55:42:d8:b6:ec:a7:
24:d2:67:95:f0:fd:3b:0f:bb:4f:b5:7f:04:53:51:
2e:1f:88:da:f9:72:1a:2b:63:ed:8f:65:6a:6b:65:
90:ad:58:53:88:5a:e9:2a:0b:f4:09:ae:92:b6:7c:
e4:7b:24:79:32:3e:a8:2e:f3:92:1c:d1:f0:f1:41:
38:1f:01:77:c8:c8:46:f3:df:bf:d8:0e:ab:3c:ee:
19:60:c9:92:ca:ae:65:cb:2a:c4:e3:9d:67:e3:6e:
89:9f:30:55:f3:77:85:11:a6:06:ea:ad:05:51:c2:
8c:b7:3c:a3:e8:17:7e:c8:4e:d9:64:cc:48:5f:ab:
29:5a:3d:d9:dd:4d:00:4c:f8:8f:d4:f8:78:be:66:
b5:34:cb:53:49:5e:da:01:1c:4e:f4:c6:77:7a:98:
c7:25:c5:1f:43:b2:04:ca:08:ff:97:5b:03:91:46:
45:b6:0a:2a:40:c4:29:fc:4c:b1:16:30:af:05:2f:
f5:3f:42:a4:af:8f:52:59:67:38:3c:29:ae:b5:1f:
ba:ea:a2:61:b2:37:5c:ce:06:75:32:77:8b:92:e4:
de:4a:2e:c4:d7:4d:c4:73:22:46:4f:96:54:9b:56:
9b:40:4e:9e:04:6e:75:c2:42:b8:34:29:c5:30:1e:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2C:89:FF:88:1B:CA:BB:A4:66:8C:AD:98:32:14:24:A2:C6:3E:AD
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/vCyJ_4gbyrukZoytmDIUJKLGPq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.244.0/22
IPv6:
2a0c:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
05:05:54:c9:fc:7c:38:a4:78:c3:d6:96:14:16:2d:3c:a2:99:
9e:6a:ab:b2:f6:57:71:13:ee:d1:d9:73:42:f6:d1:a7:2b:6e:
28:64:b6:81:b2:eb:0b:cc:e9:a3:af:6e:1e:fe:6b:c7:ec:5d:
ab:a8:81:db:7a:72:29:ef:54:97:38:74:a3:52:3a:53:9a:c0:
e0:64:45:13:69:46:f2:24:c3:4c:c6:e4:4e:81:01:f2:45:3e:
5e:b0:2b:ed:94:67:2b:c3:4c:95:01:16:30:00:e8:2b:56:0f:
8b:bc:1a:50:47:09:56:e1:c1:cc:63:6a:d4:cd:c0:25:e3:2e:
9d:9d:6e:c0:ea:3f:af:23:cc:2d:25:b7:df:a1:92:34:17:42:
e7:18:97:8b:58:26:d4:5a:5a:0b:fb:67:61:3e:2d:c9:55:01:
76:1f:71:7f:90:58:0c:72:3f:2e:df:cd:94:8f:c6:a6:bd:4a:
33:a6:ce:a1:80:0d:40:ec:88:9c:be:41:ca:64:7c:50:47:fe:
47:3c:3d:8b:5c:18:5d:5d:2f:d6:11:16:cb:35:a5:37:59:25:
ee:f4:f1:59:95:58:2f:13:4b:32:a3:e2:40:11:a0:e6:18:f8:
ff:75:29:b9:94:b1:d4:fa:7b:a0:14:62:c8:55:21:ba:c7:53:
77:54:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:48 2025 by rpki-client