Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VTgIeAjnu6QDITPutn3ZYiX28hw.roa
File: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (raw, json)
Hash identifier: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=
Subject key identifier: 55:38:08:78:08:E7:BB:A4:03:21:33:EE:B6:7D:D9:62:25:F6:F2:1C
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01942369B1C596D177B44FD42A25E126FD2B
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VTgIeAjnu6QDITPutn3ZYiX28hw.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197035
IP address blocks: 2a02:2000:3c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b1:c5:96:d1:77:b4:4f:d4:2a:25:e1:26:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5538087808e7bba4032133eeb67dd96225f6f21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:1b:59:aa:9e:ce:60:62:22:94:cb:98:b9:
06:90:71:c3:07:29:c6:2e:7c:3e:e2:87:9f:b0:a4:
03:55:02:76:c7:ad:d4:e8:43:bf:75:cd:a8:c7:da:
e8:8e:60:f3:c1:5c:2b:ad:86:96:d0:6a:d0:de:ec:
0c:4e:ad:f5:ad:2d:37:e0:ac:af:7d:ae:e3:df:33:
75:ad:db:f7:0d:34:e6:bb:c3:f8:28:d4:8c:b7:52:
d9:0f:03:75:8e:82:b6:09:33:8c:d9:e5:49:b6:64:
ea:67:cf:40:ac:48:02:5f:e4:4d:d7:c1:b2:3b:01:
42:8f:4f:1c:a7:00:9e:38:8b:18:32:6c:29:dc:8f:
63:23:59:24:3e:5c:f5:84:39:c4:d1:f8:d6:fd:96:
9c:b1:58:4e:90:76:04:b1:1d:ec:2f:2d:17:31:68:
73:28:14:84:0a:b2:0d:df:e8:d6:50:14:6d:99:d6:
c8:24:c3:c4:c6:93:e0:06:41:55:ad:78:6e:9f:44:
e1:cf:c7:d1:84:13:6f:0a:c6:3f:ee:a1:85:0a:f3:
b8:a5:4c:48:cf:cf:46:bd:9c:ca:0b:20:52:fb:01:
b5:d6:a8:49:ab:1c:d4:18:1e:4c:b9:e9:87:d4:34:
e1:1a:2b:8b:03:56:88:a1:c3:c3:d4:55:d2:b6:33:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:08:78:08:E7:BB:A4:03:21:33:EE:B6:7D:D9:62:25:F6:F2:1C
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VTgIeAjnu6QDITPutn3ZYiX28hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2000:3c5::/48
Signature Algorithm: sha256WithRSAEncryption
04:8c:cb:4e:b8:28:53:87:c3:07:f6:a7:b3:ad:50:9e:bc:48:
e6:dd:de:7c:3b:4f:d2:ca:cc:f7:ba:63:de:10:1f:48:60:1a:
62:0b:5a:3d:99:1c:51:29:a0:55:10:c9:7d:b5:eb:a4:6c:43:
da:b7:d9:a5:89:ba:f1:c4:5b:df:3c:02:e1:cc:4d:78:64:47:
3d:3d:0c:30:62:6f:19:bb:35:61:6c:e1:28:a2:a4:9b:3b:06:
7a:69:4a:76:24:bd:38:2f:39:7f:04:ff:9f:e7:05:7f:d2:d1:
3a:29:ad:2c:e9:1a:fa:a2:80:8a:f5:60:d1:b4:93:a5:6a:c2:
fa:6c:86:8a:c5:61:67:69:0f:fa:83:8e:2d:f7:68:e1:8a:b8:
63:b4:59:dc:00:87:85:40:31:03:44:50:a9:59:2f:2b:96:b1:
18:da:cd:92:c8:64:5a:00:27:1c:89:7b:11:ed:11:45:8e:be:
02:40:10:19:b3:17:fc:80:87:98:49:09:c0:06:97:ca:d2:d9:
81:79:fb:5b:93:df:03:0c:16:84:d7:98:6c:06:31:e0:67:4a:
1e:98:49:16:b5:d5:ba:df:27:83:96:11:f1:2e:ce:98:ea:a6:
2a:20:ba:a2:d0:36:c1:38:cd:f7:6e:ca:41:33:90:6c:ac:76:
d7:17:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:39:29 2025 by rpki-client