Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa
File: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (raw, json)
Hash identifier: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=
Subject key identifier: 56:5F:81:53:25:BF:E2:2E:16:D5:69:F1:99:FD:0A:0C:65:BA:75:53
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 0194266C2E1ABBBE351D1FEFE4D4630DE1DA
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209907
IP address blocks: 2a0f:ca00:8002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2e:1a:bb:be:35:1d:1f:ef:e4:d4:63:0d:e1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565f815325bfe22e16d569f199fd0a0c65ba7553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:d0:10:48:10:a0:5d:f0:4b:78:78:ac:bc:
90:d4:d5:23:ec:23:c1:1c:c4:09:95:ca:bd:82:fe:
60:c1:af:4c:01:90:6c:27:ea:74:73:a4:26:60:a4:
70:fa:2d:4a:54:80:cc:f7:0b:03:da:e0:e4:b7:b4:
f5:e5:66:21:35:9a:d9:51:1f:97:58:46:99:be:52:
9f:e1:c8:5f:83:63:d2:40:85:63:97:0b:1a:92:2c:
8a:bf:c6:9f:5f:f8:88:ea:b1:cf:80:ce:ce:f3:a1:
c2:83:c4:4e:0f:b6:05:9f:3c:90:72:1a:91:0d:df:
45:db:47:2a:00:d5:20:e8:1e:35:d5:28:87:57:b8:
68:81:3e:44:e4:ea:59:c1:7c:2c:b7:95:95:4a:c5:
2d:2b:5c:9b:7a:7a:02:81:4c:8e:d1:f3:bd:75:87:
77:14:82:8d:1a:b4:c8:84:70:e0:48:01:ba:93:50:
b8:e9:1f:72:b3:04:31:c8:41:d1:ca:84:e3:ef:c0:
31:68:a9:ef:db:22:2c:76:5b:31:ca:6e:42:41:2d:
da:9a:bf:d6:eb:aa:7d:50:69:ff:30:a4:9a:3b:60:
c4:af:f6:7b:ee:a8:14:25:52:ba:6a:8c:d3:05:bf:
ae:a7:f2:f4:db:cf:2a:11:99:e0:a9:a4:db:0f:2b:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:81:53:25:BF:E2:2E:16:D5:69:F1:99:FD:0A:0C:65:BA:75:53
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca00:8002::/48
Signature Algorithm: sha256WithRSAEncryption
85:b5:c3:87:85:86:e8:66:7a:2b:01:35:a9:4c:e2:e0:10:c0:
55:24:db:8a:77:38:36:71:5f:76:70:7e:2f:2b:85:ed:8d:59:
1f:bf:49:5b:7b:f6:cb:ae:4f:6f:13:e1:4f:ac:b7:de:d2:c2:
2c:a2:a9:d2:d5:0e:a3:f5:33:b9:a9:7c:1c:cc:55:fd:c1:ce:
3b:39:52:a5:69:a4:10:8c:41:3f:39:e9:96:64:db:8b:77:b4:
dd:6a:69:71:c3:6a:21:b8:e5:0c:1e:75:3d:40:66:37:45:85:
cb:a0:38:a7:55:b4:9c:fe:83:98:15:b6:58:fe:7e:24:a1:a1:
e1:d3:2c:9e:6b:6a:82:0e:46:3a:cd:69:24:09:c7:4e:ff:0e:
69:8f:8f:86:0e:65:12:ad:2f:7a:eb:b8:92:60:42:51:31:18:
9f:53:5b:c9:37:86:71:4c:23:72:42:4d:df:36:ce:13:7b:91:
fe:43:b5:8f:75:34:9c:5e:1c:1d:36:e0:b0:84:d8:0b:b8:af:
4c:85:de:c7:fa:9b:ff:38:9e:28:6b:f9:df:b1:2d:74:75:3e:
e5:7b:ce:0c:10:10:7d:92:0e:d4:a3:99:9e:36:f3:1d:f7:db:
12:72:cb:97:cb:af:61:8c:8a:46:3e:cf:a7:ee:65:4f:d6:45:
b5:e3:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:03 2025 by rpki-client