Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vjKAe-wLEBQqE7ESMtidZJVOlq0.roa
File: vjKAe-wLEBQqE7ESMtidZJVOlq0.roa (raw, json)
Hash identifier: fpxkoi8RJON8YTNF17jgk+ZjAqKTWr8VHf0JiG8bJ1Y=
Subject key identifier: BE:32:80:7B:EC:0B:10:14:2A:13:B1:12:32:D8:9D:64:95:4E:96:AD
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDBFC61943FC0AA309FC78FA582C0A
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vjKAe-wLEBQqE7ESMtidZJVOlq0.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58083
IP address blocks: 2a07:3500:10a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bf:c6:19:43:fc:0a:a3:09:fc:78:fa:58:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be32807bec0b10142a13b11232d89d64954e96ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:b1:d1:ce:6e:bd:4f:17:d9:2e:f7:28:cb:
4a:ad:07:36:09:48:b3:99:bf:2b:15:87:5e:0a:13:
ea:2f:31:b6:8d:e0:33:73:06:16:d6:b5:35:ba:55:
38:0f:e4:60:46:30:f6:82:71:88:d3:e3:33:7b:32:
8f:42:54:b3:cb:b2:e3:74:d8:28:79:b4:bb:ac:48:
8e:54:16:94:bf:a6:62:b2:ef:90:0a:73:4d:3d:40:
b9:2b:3b:cd:c3:2a:b6:ab:9e:8f:cb:bb:c6:f6:d0:
fe:47:ca:f3:b2:b3:8c:6f:7e:47:5b:98:4f:74:6b:
64:05:8e:01:74:d2:78:f9:a8:0e:dc:0e:92:81:2d:
d1:aa:39:58:aa:0a:b9:73:b8:0f:65:88:98:77:c4:
af:ac:90:c7:c9:10:37:53:93:50:a4:ef:21:66:21:
59:cf:0e:f8:b8:15:04:6f:2f:86:1b:81:c6:7a:8a:
2d:7c:17:b4:33:34:05:e9:cc:fe:03:ba:51:c5:a4:
73:f1:0f:3f:e1:09:c5:f6:b1:2f:f1:e3:f4:e9:71:
10:41:14:f0:12:b8:c6:49:6b:a9:86:ce:7d:60:43:
c1:ff:42:62:50:38:38:b3:66:e2:2e:cf:8d:a9:b4:
3d:22:77:f7:6b:f4:db:e3:5b:dc:79:9b:ab:5f:d4:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:80:7B:EC:0B:10:14:2A:13:B1:12:32:D8:9D:64:95:4E:96:AD
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vjKAe-wLEBQqE7ESMtidZJVOlq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:10a0::/48
Signature Algorithm: sha256WithRSAEncryption
35:b4:e6:1d:2e:1d:58:3e:aa:51:9d:54:d0:c9:ef:47:ff:14:
c8:7c:b0:53:98:be:9f:35:9a:d6:78:d1:5a:ca:b7:7c:71:ec:
3f:33:4c:6f:af:ac:15:ea:76:76:fe:25:64:f1:ce:fd:07:62:
41:4c:22:cb:15:32:e4:35:c2:80:5f:7c:f5:c4:ef:cc:10:14:
e2:ef:97:5a:b1:30:87:30:35:51:c3:d1:c4:55:5b:11:b5:be:
ba:47:28:f0:6e:e0:a2:29:ff:e3:01:c9:11:a5:37:a8:cf:61:
2c:c9:47:4f:f3:25:b2:5e:45:21:aa:d6:b3:5d:9c:ff:c8:47:
33:47:d4:85:dd:c6:29:97:d1:c6:58:c4:a9:67:50:36:c4:82:
c3:48:b2:70:35:69:d2:7a:31:ba:19:b5:9c:39:9b:04:2f:0e:
21:a0:ad:69:23:ec:a9:7f:fe:02:1b:61:f7:f9:90:a8:a0:11:
32:61:3f:75:f0:ac:48:42:83:c0:82:89:4e:7c:64:d9:f2:ad:
84:37:f8:c9:80:4e:8e:4b:36:46:e8:86:45:bf:5a:36:c1:62:
6c:2f:74:20:b9:33:f0:8c:f4:bd:f6:5d:2a:db:a6:39:56:7c:
c4:1d:c5:71:02:84:a6:c5:ec:fd:66:b4:89:53:0d:e9:fd:38:
75:2f:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:03 2025 by rpki-client