Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/VxdHezzHKrkrE2Feoz1POMlVQMY.roa
File: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (raw, json)
Hash identifier: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=
Subject key identifier: 57:17:47:7B:3C:C7:2A:B9:2B:13:61:5E:A3:3D:4F:38:C9:55:40:C6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019488D3C21DFB46D275D6F3C70AEC640074
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/VxdHezzHKrkrE2Feoz1POMlVQMY.roa
Signing time: Tue 21 Jan 2025 12:26:06 +0000
ROA not before: Tue 21 Jan 2025 12:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212128
IP address blocks: 2a10:cbc0::/29 maxlen: 32
2a10:cbc0::/32 maxlen: 32
2a10:cbc1::/32 maxlen: 32
2a10:cbc2::/32 maxlen: 32
2a10:cbc3::/32 maxlen: 32
2a10:cbc4::/32 maxlen: 32
2a10:cbc5::/32 maxlen: 32
2a10:cbc6::/32 maxlen: 32
2a10:cbc7::/32 maxlen: 32
2a11:e380::/29 maxlen: 32
2a11:e380::/32 maxlen: 32
2a11:e381::/32 maxlen: 32
2a11:e382::/32 maxlen: 32
2a11:e383::/32 maxlen: 32
2a11:e384::/32 maxlen: 32
2a11:e385::/32 maxlen: 32
2a11:e386::/32 maxlen: 32
2a11:e387::/32 maxlen: 32
2a12:70c0::/29 maxlen: 32
2a12:70c0::/32 maxlen: 32
2a12:70c1::/32 maxlen: 32
2a12:70c2::/32 maxlen: 32
2a12:70c3::/32 maxlen: 32
2a12:70c4::/32 maxlen: 32
2a12:70c5::/32 maxlen: 32
2a12:70c6::/32 maxlen: 32
2a12:70c7::/32 maxlen: 32
2a13:7e00::/32 maxlen: 32
2a13:7e01::/32 maxlen: 32
2a13:7e02::/32 maxlen: 32
2a13:7e03::/32 maxlen: 32
2a13:7e04::/32 maxlen: 32
2a13:7e05::/32 maxlen: 32
2a13:7e06::/32 maxlen: 32
2a13:7e07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:d3:c2:1d:fb:46:d2:75:d6:f3:c7:0a:ec:64:00:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 21 12:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5717477b3cc72ab92b13615ea33d4f38c95540c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:6c:f8:d7:7e:bc:e0:ba:78:aa:a7:4f:fc:
6c:f1:4c:08:a5:86:ad:8f:6d:dd:b2:95:d3:69:c4:
1c:da:49:12:d0:2b:59:ef:8f:66:84:59:e7:65:91:
74:29:6d:f1:0d:54:eb:52:b9:53:a2:56:16:0e:ef:
cb:46:d7:7f:51:92:5b:20:c7:2f:cc:3a:1c:a1:05:
22:3f:28:02:ec:0f:41:f8:39:80:0d:11:a3:8f:fb:
da:0c:b3:f3:f0:9a:46:17:59:0a:57:7d:92:84:e4:
a0:d9:71:75:55:9c:89:9a:e9:52:a7:75:7e:b5:0c:
a0:1d:f3:6e:a1:53:07:00:d0:37:92:3a:1f:cc:b6:
b0:5f:0d:3b:c9:f0:8c:7d:f2:38:e2:36:3e:3f:85:
af:29:5f:4b:12:bb:0d:27:51:a4:10:45:fa:9a:78:
2f:23:84:31:ef:4d:1c:8e:4e:68:6a:5a:3e:e2:12:
b5:1f:1f:67:1e:ad:40:b0:20:28:18:5f:7a:28:8e:
28:5a:9b:4d:f0:07:9f:3d:7b:92:23:08:49:08:d3:
0d:8f:aa:1c:d3:1b:4a:63:be:0c:62:4d:6a:e1:0e:
c2:81:2a:47:9c:0f:29:ab:8b:3c:b7:92:04:64:6c:
4f:ca:e9:af:94:c4:dd:7c:ee:e1:37:35:f9:88:48:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:47:7B:3C:C7:2A:B9:2B:13:61:5E:A3:3D:4F:38:C9:55:40:C6
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/VxdHezzHKrkrE2Feoz1POMlVQMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cbc0::/29
2a11:e380::/29
2a12:70c0::/29
2a13:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
70:6c:e7:e5:3d:f3:85:bd:e5:e6:42:e5:46:8b:25:ba:25:bb:
58:ed:36:0b:97:2a:4d:b9:72:9f:4b:b5:4b:5b:21:65:2b:50:
fb:b0:f7:83:ab:d8:b5:17:cb:46:45:04:22:d0:df:ea:f3:ab:
67:32:40:d6:e9:1f:ec:94:c2:32:7e:17:7f:50:d5:17:e3:0a:
ac:26:6b:1b:ea:1a:05:da:eb:15:0b:3d:56:91:9d:fa:7a:56:
15:87:ab:c1:f0:0a:dd:61:ef:d4:10:a8:d5:d0:72:e9:9b:8d:
05:c7:78:8d:5a:55:4e:79:e5:d3:71:08:6b:17:57:68:bd:d7:
5c:b0:df:bd:76:aa:80:9c:d3:cd:e1:09:6b:f9:8d:3a:be:80:
64:39:f2:20:e4:4d:69:2f:42:9c:6b:19:2c:1d:8f:b2:51:86:
a0:55:91:2d:ee:a3:e1:30:5e:06:61:30:55:05:cc:0a:c5:0b:
fa:2b:e5:cb:03:9f:cc:e8:14:27:f6:3b:2a:5a:3d:d2:1f:46:
83:72:b2:61:8c:ec:de:76:1c:af:a5:88:28:53:01:77:0e:29:
67:44:0e:a7:57:45:99:7c:bb:80:37:de:ab:3d:4b:b9:33:d3:
38:0c:05:cd:29:2b:a4:69:f8:0a:bf:d9:d3:61:26:59:57:e7:
02:4a:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:31 2025 by rpki-client