Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/aVFvre28J3DS0B2KG9gBaQhWY8E.roa
File: aVFvre28J3DS0B2KG9gBaQhWY8E.roa (raw, json)
Hash identifier: w9ACEEmzHkbgzfK1WYGzAfxTUhSKPdzFdcOYaL2Jl/0=
Subject key identifier: 69:51:6F:AD:ED:BC:27:70:D2:D0:1D:8A:1B:D8:01:69:08:56:63:C1
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0194CC84DB1F29E1817AA761DE28E6087312
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/aVFvre28J3DS0B2KG9gBaQhWY8E.roa
Signing time: Mon 03 Feb 2025 15:54:06 +0000
ROA not before: Mon 03 Feb 2025 15:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 1.179.112.0/20 maxlen: 20
1.179.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:84:db:1f:29:e1:81:7a:a7:61:de:28:e6:08:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Feb 3 15:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69516fadedbc2770d2d01d8a1bd80169085663c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:a8:98:02:80:b7:b4:1a:5d:6d:b6:72:7d:
fd:69:55:14:94:e0:40:26:7d:f6:34:60:94:8e:eb:
e2:3b:43:91:49:fd:89:e6:81:71:e4:57:a8:3a:9b:
6b:ca:be:a5:f6:92:9c:8c:20:53:c0:fb:ea:ea:20:
15:5c:c7:f4:4c:94:10:87:ca:f8:66:c9:4b:6d:23:
da:60:cd:08:8c:95:cc:2f:be:9d:ab:64:20:07:29:
f4:2e:dd:4a:99:73:81:86:9b:e4:65:db:d6:19:2b:
09:60:4c:37:77:1e:7a:aa:a1:2f:0f:4c:4c:80:e4:
70:ef:02:51:e9:bb:dd:22:fa:82:51:bb:a1:f0:e4:
39:df:51:4a:28:ff:29:89:5d:8f:5c:48:1a:82:18:
58:ff:5d:18:92:20:3d:df:a8:a5:bf:a7:28:a5:43:
c5:03:b3:ac:b3:f2:fb:54:73:74:b9:ce:18:d6:9f:
db:3b:68:17:94:1a:b9:69:86:8e:9b:32:90:a8:bb:
46:5e:c0:96:da:a2:14:f4:b7:a8:b3:f7:83:89:35:
9a:3a:9e:b3:2e:bc:56:df:bb:2b:93:22:4c:6c:dd:
32:84:3b:76:65:14:7f:42:76:85:66:bf:3b:5c:7c:
6f:9a:9f:55:7b:f0:28:07:8a:cd:d8:30:c2:9f:ae:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:6F:AD:ED:BC:27:70:D2:D0:1D:8A:1B:D8:01:69:08:56:63:C1
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/aVFvre28J3DS0B2KG9gBaQhWY8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.112.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:c1:10:59:fe:89:85:6e:5e:77:6b:37:43:61:7a:96:2c:fe:
58:cd:26:2f:d8:9a:04:42:87:80:27:9f:e5:89:74:60:6b:ce:
63:9b:29:b6:0e:dc:e8:ea:11:97:fa:0e:da:16:65:85:76:35:
ae:ed:48:30:97:d7:96:4b:f8:84:e5:4b:97:fd:14:29:7a:d4:
a6:c5:b4:aa:13:35:00:01:6e:ea:de:9e:bc:64:2e:57:bd:29:
b7:b3:42:88:18:9f:fb:65:cc:fa:02:26:ed:9b:d9:8c:21:53:
58:61:96:61:52:67:e0:55:3b:14:e2:3f:df:b5:84:4a:c9:b6:
a1:63:ef:7e:35:b2:0c:c4:5b:0b:73:39:ec:90:21:d1:fc:57:
2c:cd:11:bd:87:0c:5a:db:76:03:4b:82:6f:f9:c0:ba:90:ab:
e1:3f:b4:44:73:1e:e6:59:22:b1:41:c4:d6:90:f6:4e:25:24:
c3:7a:f2:16:3b:87:cf:4b:d5:bc:46:da:ee:65:05:a5:47:69:
ed:51:ab:9d:8c:45:88:0b:cc:12:e6:f4:4e:42:73:ae:6a:07:
30:ab:22:f4:c6:ab:04:95:75:80:ea:8b:d2:e3:18:a6:61:27:
a7:9e:a3:28:c0:59:5d:bf:1b:79:3c:0f:0c:8f:30:0f:28:a1:
a1:ed:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:36 2025 by rpki-client