Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/VxRGHdP__z9RHajqH60awAUqQgg.roa
File: VxRGHdP__z9RHajqH60awAUqQgg.roa (raw, json)
Hash identifier: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=
Subject key identifier: 57:14:46:1D:D3:FF:FF:3F:51:1D:A8:EA:1F:AD:1A:C0:05:2A:42:08
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019423D75E270F1589163E3F26CAC39F1152
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/VxRGHdP__z9RHajqH60awAUqQgg.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2a04:92c7:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5e:27:0f:15:89:16:3e:3f:26:ca:c3:9f:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5714461dd3ffff3f511da8ea1fad1ac0052a4208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:cc:fd:56:75:76:43:24:37:c0:d0:22:a9:
74:24:ad:ac:bc:10:68:4c:a5:ee:fb:f8:d9:93:0d:
bb:64:c2:1c:cb:1f:bb:48:6f:c3:9e:74:af:aa:ac:
d3:9a:0b:63:d8:ce:c1:e9:c8:ad:a3:87:44:c8:9d:
ec:23:61:12:68:66:93:8f:f8:91:cf:63:82:c4:8e:
d9:b7:eb:88:d6:0e:27:01:b3:49:a9:e4:26:80:2f:
d5:7b:4d:83:1f:2e:d1:e6:43:4a:c5:72:6b:b7:b1:
a3:6e:83:3e:b3:de:04:75:26:8f:fa:14:09:bf:6e:
ec:16:ba:5a:6a:6d:45:61:3a:88:4c:1a:8a:5c:50:
1d:71:f4:62:04:d0:e5:75:68:51:b4:17:47:62:c0:
5b:78:bb:19:d5:1a:bb:e6:86:92:2c:ed:af:7d:25:
cc:43:bd:c5:0c:e4:57:27:b4:2f:e7:cc:19:ae:a1:
2f:b7:16:ad:55:63:96:bc:5a:df:8d:de:be:96:33:
27:d6:5a:19:7d:7c:53:ad:89:e8:08:3a:09:08:e5:
ed:5a:18:80:7c:02:86:0d:bf:19:4c:5f:05:56:62:
35:ee:7b:00:5f:90:f1:ba:bc:6a:6f:36:16:cb:3e:
86:ab:56:ef:5b:d3:be:46:17:54:7b:06:72:5e:62:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:46:1D:D3:FF:FF:3F:51:1D:A8:EA:1F:AD:1A:C0:05:2A:42:08
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/VxRGHdP__z9RHajqH60awAUqQgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:16::/48
Signature Algorithm: sha256WithRSAEncryption
bb:50:04:4e:0d:1a:ff:24:2a:92:0d:88:e0:a5:93:e2:51:55:
5a:12:f7:76:a2:bb:5e:da:28:8d:93:6b:43:51:42:64:bc:3e:
15:01:e5:f7:ac:45:93:11:91:d5:1a:d0:0f:0f:e9:e8:1d:73:
fe:d5:d7:55:02:c1:05:12:32:a0:f7:3a:15:54:34:3c:53:42:
e5:43:09:6c:38:20:22:6d:c9:18:15:4e:a9:74:7c:6b:9e:dc:
cb:fe:c9:cc:1f:9b:6d:17:65:08:25:dc:99:8e:e2:c7:81:56:
6c:cb:ec:10:d8:9b:b5:57:89:f3:0b:55:c3:ec:3c:bf:a6:e8:
7d:fe:d8:0f:b1:45:62:50:1b:85:f1:92:c1:52:e9:09:6e:ee:
12:d1:d5:37:20:f3:88:76:75:85:19:e7:ea:42:2a:9b:37:d6:
89:ba:48:5b:91:45:e1:81:69:dc:9b:23:77:16:a6:43:8f:eb:
a2:90:32:51:28:e8:cd:15:9d:3f:d2:c3:08:ee:2a:9a:6b:4e:
dc:f9:cc:1d:34:14:72:36:7e:6e:e9:8c:33:dc:51:57:1e:35:
e2:2f:a7:59:e3:17:63:97:4b:b2:20:b3:38:9a:86:43:1a:10:
e0:98:ed:78:9f:3d:7f:72:fd:ef:14:4b:a3:97:28:7a:14:ed:
a4:2c:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:54 2025 by rpki-client