Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/VP1dVitGNzhgzlrIu_RUc35dU0g.roa
File: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (raw, json)
Hash identifier: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=
Subject key identifier: 54:FD:5D:56:2B:46:37:38:60:CE:5A:C8:BB:F4:54:73:7E:5D:53:48
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01942521B54E023E7462AA0DF5CB9662D569
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/VP1dVitGNzhgzlrIu_RUc35dU0g.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48550
IP address blocks: 2001:67c:4e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b5:4e:02:3e:74:62:aa:0d:f5:cb:96:62:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54fd5d562b46373860ce5ac8bbf454737e5d5348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:aa:a3:6c:ff:2e:19:fe:4f:e1:e6:ab:2c:
2f:91:b1:25:89:73:31:cd:83:69:da:59:eb:2e:57:
4c:01:43:da:8c:15:60:db:eb:cc:8d:84:b6:3e:e9:
e5:1b:96:59:a5:0a:aa:9c:5c:a0:b5:4d:c9:1b:f8:
ce:64:9c:2f:47:8f:55:a8:fc:a7:84:6c:53:80:bd:
76:98:e2:18:60:0c:28:93:92:c7:16:e0:57:e6:3a:
a5:88:91:0b:39:53:6d:b6:ff:92:d9:38:61:77:cf:
be:1e:a9:ac:3a:9a:11:30:69:cc:93:0c:3f:5f:7d:
ed:49:70:ac:93:a1:85:03:e4:ed:72:61:0e:eb:fe:
58:7d:a7:3d:d4:77:e2:32:bd:c1:55:4a:b8:61:34:
a3:eb:ba:5a:de:5c:35:05:f0:e5:e8:fc:59:b9:56:
13:45:fb:27:44:ff:75:ed:f2:37:d5:bc:8e:3f:4a:
c1:f6:97:d9:37:81:84:9c:93:53:4b:48:c7:48:1b:
83:48:0e:6b:ab:e9:68:54:72:23:dc:2f:41:43:51:
07:f2:5a:d7:f2:7c:4e:c9:36:2d:a0:5f:1a:fa:3e:
4d:f8:d5:b9:21:4d:3b:95:5c:6d:58:b0:da:5f:72:
fe:dc:8d:28:d2:37:35:7e:72:9c:ad:c3:ab:5a:fe:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:5D:56:2B:46:37:38:60:CE:5A:C8:BB:F4:54:73:7E:5D:53:48
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/VP1dVitGNzhgzlrIu_RUc35dU0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4e0::/48
Signature Algorithm: sha256WithRSAEncryption
97:b0:f0:44:02:b3:a4:ff:96:c8:df:53:5e:7e:f6:45:91:94:
69:3a:68:46:a5:b5:a1:7b:fb:99:33:a8:49:83:c5:fb:73:0b:
37:b2:4f:50:9f:e4:8b:c8:e5:e0:46:84:2c:05:39:79:a0:03:
bd:ad:d1:5e:7d:36:ec:1d:5a:c0:e9:b3:58:d9:a4:d9:3b:26:
e7:99:3a:f9:6b:e0:fd:f1:f9:de:2c:b1:86:56:9a:a7:56:02:
30:b9:b4:60:28:cc:e9:c7:29:4d:58:30:72:a3:a7:89:f7:4c:
19:83:8b:47:b0:63:87:43:fa:69:3b:74:a2:38:7d:72:a8:a3:
61:7a:87:98:03:76:87:0f:bf:e6:41:86:69:70:51:f1:e2:43:
d4:29:0f:6c:34:57:71:6e:8f:bb:87:eb:29:72:c6:37:dc:99:
71:ea:9c:b1:e4:e5:1c:7e:e8:cc:50:a4:b4:17:cb:cc:eb:81:
70:e7:89:7e:0e:20:5e:c8:79:c2:f9:1c:13:7d:e8:62:f7:ad:
eb:37:15:c3:ba:80:7c:5f:03:b3:5b:61:43:f1:31:aa:11:f2:
c5:c8:f6:3e:7a:0e:00:1f:e5:e2:26:d8:15:42:0d:3a:bc:85:
4e:50:e3:e5:4f:18:98:c3:c9:b7:11:35:c8:51:05:28:4c:91:
00:ae:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:32 2025 by rpki-client