Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vHzjveqbJGroW6piTZbIds7wEKk.roa
File: vHzjveqbJGroW6piTZbIds7wEKk.roa (raw, json)
Hash identifier: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=
Subject key identifier: BC:7C:E3:BD:EA:9B:24:6A:E8:5B:AA:62:4D:96:C8:76:CE:F0:10:A9
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF6169350847F3E4EB2F7E0E0D223
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vHzjveqbJGroW6piTZbIds7wEKk.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7480
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f6:16:93:50:84:7f:3e:4e:b2:f7:e0:e0:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc7ce3bdea9b246ae85baa624d96c876cef010a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:aa:20:c8:0a:77:5d:c8:1e:de:82:a6:ea:
3f:76:b7:eb:b6:95:c3:65:c6:be:5e:98:47:a6:32:
b2:04:db:b7:c7:b5:b8:73:8a:6b:f1:96:bd:47:fe:
ee:08:4d:e6:25:2a:dd:15:2f:5f:8a:c4:b7:e4:a7:
f3:7c:fe:79:ab:3d:49:59:44:64:bc:a1:a9:b9:e8:
b7:e3:c9:7e:cb:5e:56:30:ac:ab:59:63:de:9b:15:
37:cd:2a:d4:60:a5:01:86:85:ff:db:5d:81:b9:25:
b9:0f:a8:bb:74:b2:23:c6:2a:1d:4f:73:6c:2a:8a:
a4:3d:57:cf:4f:67:41:18:d3:ca:f7:2f:b1:d1:f7:
8f:9c:c6:1c:78:be:e3:82:b0:cc:ae:16:cc:9c:4e:
c6:1c:af:df:f2:01:31:34:17:9a:9d:2c:f2:1d:36:
8a:8c:ab:c7:54:24:e6:ab:e1:15:01:b1:e9:29:87:
fa:5e:f5:dd:a3:5d:0b:80:45:31:90:e2:0e:9c:64:
a1:b3:75:a7:da:b7:52:2f:34:62:04:6d:cd:2a:43:
88:6b:e4:c9:3e:91:b9:f7:66:4f:a4:87:f4:60:22:
65:3e:a3:fb:af:39:0e:c3:1b:aa:9d:b6:58:f3:93:
ce:bd:d1:e5:82:17:24:a8:44:d9:12:fe:2b:f0:84:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7C:E3:BD:EA:9B:24:6A:E8:5B:AA:62:4D:96:C8:76:CE:F0:10:A9
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vHzjveqbJGroW6piTZbIds7wEKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
51:ed:50:8c:39:d4:2d:23:41:48:64:ba:b4:aa:0a:aa:27:8b:
d1:8f:a7:d0:4e:42:fd:c4:d2:37:57:5b:67:99:9d:e6:45:fc:
e2:07:6c:91:2f:53:f8:8f:2b:ab:bc:5c:99:10:89:78:dd:3c:
f2:78:3b:b1:1a:b4:d3:4a:e2:ef:57:e1:33:a9:98:6d:8c:04:
e1:e7:89:fa:18:4f:ac:b0:09:78:b9:f4:38:40:ea:13:16:ea:
d1:f2:7a:27:ca:20:16:3e:f9:04:e0:2a:d0:83:c4:6e:0c:fa:
ed:fe:ff:93:2a:b8:76:dd:5a:65:34:33:e1:b0:6b:bd:cb:56:
8a:a4:58:16:93:01:c2:ba:9f:81:91:bd:f5:51:cc:0a:0e:86:
bc:93:3d:08:6b:32:58:4c:fb:9e:1e:d5:30:f8:fa:c9:17:a0:
66:b6:b9:7a:54:be:4a:2b:e5:12:b7:ad:0a:5b:db:24:10:13:
43:51:b1:50:45:3c:f3:0c:e0:7c:38:eb:83:9d:6e:00:70:be:
91:86:3e:8e:f8:63:3e:93:0a:2a:19:07:f8:62:0a:19:c8:6e:
5c:72:96:29:b6:d4:f7:58:1d:4a:64:39:cc:d6:53:25:63:60:
ef:bc:8e:2e:e9:31:ee:ac:15:35:33:e4:e6:7a:5d:79:0b:cf:
18:39:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:11 2025 by rpki-client